commit e5092a90774bf9b6acedc935881c63aa23bc6876 Author: Thomas Penteker <tek@serverop.de> Date: Mon Dec 9 18:27:34 2013 +0100 [notify] gimp: 2.6.8 -> 2.6.10 This update fixes several security vulnerabilities in the xwd image loader diff --git a/gimp/.footprint b/gimp/.footprint index 3804fe4..0328995 100644 --- a/gimp/.footprint +++ b/gimp/.footprint @@ -265,6 +265,10 @@ drwxr-xr-x root/root usr/lib/gimp/2.0/modules/ -rwxr-xr-x root/root usr/lib/gimp/2.0/modules/libdisplay-filter-gamma.so -rwxr-xr-x root/root usr/lib/gimp/2.0/modules/libdisplay-filter-high-contrast.la -rwxr-xr-x root/root usr/lib/gimp/2.0/modules/libdisplay-filter-high-contrast.so +-rwxr-xr-x root/root usr/lib/gimp/2.0/modules/libdisplay-filter-lcms.la +-rwxr-xr-x root/root usr/lib/gimp/2.0/modules/libdisplay-filter-lcms.so +-rwxr-xr-x root/root usr/lib/gimp/2.0/modules/libdisplay-filter-proof.la +-rwxr-xr-x root/root usr/lib/gimp/2.0/modules/libdisplay-filter-proof.so drwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/ -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/alien-map -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/align-layers @@ -314,6 +318,7 @@ drwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/ -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/edge-sobel -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/emboss -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/engrave +-rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/file-aa -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/file-bmp -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/file-cel -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/file-compressor @@ -331,19 +336,24 @@ drwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/ -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/file-header -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/file-html-table -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/file-ico +-rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/file-jp2-load -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/file-jpeg +-rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/file-mng -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/file-pat -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/file-pcx +-rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/file-pdf-load -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/file-pdf-save -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/file-pix -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/file-png -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/file-pnm +-rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/file-ps -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/file-psd-load -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/file-psd-save -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/file-psp -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/file-raw -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/file-sgi -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/file-sunras +-rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/file-svg -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/file-tga -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/file-tiff-load -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/file-tiff-save @@ -371,6 +381,7 @@ drwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/ -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/imagemap -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/iwarp -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/jigsaw +-rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/lcms -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/lens-apply -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/lens-distortion -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/lens-flare @@ -379,6 +390,7 @@ drwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/ -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/map-object -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/max-rgb -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/maze +-rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/metadata -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/mosaic -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/newsprint -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/nl-filter @@ -431,41 +443,41 @@ drwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/ -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/whirl-pinch -rwxr-xr-x root/root usr/lib/gimp/2.0/plug-ins/wind -rwxr-xr-x root/root usr/lib/libgimp-2.0.la -lrwxrwxrwx root/root usr/lib/libgimp-2.0.so -> libgimp-2.0.so.0.800.6 -lrwxrwxrwx root/root usr/lib/libgimp-2.0.so.0 -> libgimp-2.0.so.0.800.6 --rwxr-xr-x root/root usr/lib/libgimp-2.0.so.0.800.6 +lrwxrwxrwx root/root usr/lib/libgimp-2.0.so -> libgimp-2.0.so.0.800.10 +lrwxrwxrwx root/root usr/lib/libgimp-2.0.so.0 -> libgimp-2.0.so.0.800.10 +-rwxr-xr-x root/root usr/lib/libgimp-2.0.so.0.800.10 -rwxr-xr-x root/root usr/lib/libgimpbase-2.0.la -lrwxrwxrwx root/root usr/lib/libgimpbase-2.0.so -> libgimpbase-2.0.so.0.800.6 -lrwxrwxrwx root/root usr/lib/libgimpbase-2.0.so.0 -> libgimpbase-2.0.so.0.800.6 --rwxr-xr-x root/root usr/lib/libgimpbase-2.0.so.0.800.6 +lrwxrwxrwx root/root usr/lib/libgimpbase-2.0.so -> libgimpbase-2.0.so.0.800.10 +lrwxrwxrwx root/root usr/lib/libgimpbase-2.0.so.0 -> libgimpbase-2.0.so.0.800.10 +-rwxr-xr-x root/root usr/lib/libgimpbase-2.0.so.0.800.10 -rwxr-xr-x root/root usr/lib/libgimpcolor-2.0.la -lrwxrwxrwx root/root usr/lib/libgimpcolor-2.0.so -> libgimpcolor-2.0.so.0.800.6 -lrwxrwxrwx root/root usr/lib/libgimpcolor-2.0.so.0 -> libgimpcolor-2.0.so.0.800.6 --rwxr-xr-x root/root usr/lib/libgimpcolor-2.0.so.0.800.6 +lrwxrwxrwx root/root usr/lib/libgimpcolor-2.0.so -> libgimpcolor-2.0.so.0.800.10 +lrwxrwxrwx root/root usr/lib/libgimpcolor-2.0.so.0 -> libgimpcolor-2.0.so.0.800.10 +-rwxr-xr-x root/root usr/lib/libgimpcolor-2.0.so.0.800.10 -rwxr-xr-x root/root usr/lib/libgimpconfig-2.0.la -lrwxrwxrwx root/root usr/lib/libgimpconfig-2.0.so -> libgimpconfig-2.0.so.0.800.6 -lrwxrwxrwx root/root usr/lib/libgimpconfig-2.0.so.0 -> libgimpconfig-2.0.so.0.800.6 --rwxr-xr-x root/root usr/lib/libgimpconfig-2.0.so.0.800.6 +lrwxrwxrwx root/root usr/lib/libgimpconfig-2.0.so -> libgimpconfig-2.0.so.0.800.10 +lrwxrwxrwx root/root usr/lib/libgimpconfig-2.0.so.0 -> libgimpconfig-2.0.so.0.800.10 +-rwxr-xr-x root/root usr/lib/libgimpconfig-2.0.so.0.800.10 -rwxr-xr-x root/root usr/lib/libgimpmath-2.0.la -lrwxrwxrwx root/root usr/lib/libgimpmath-2.0.so -> libgimpmath-2.0.so.0.800.6 -lrwxrwxrwx root/root usr/lib/libgimpmath-2.0.so.0 -> libgimpmath-2.0.so.0.800.6 --rwxr-xr-x root/root usr/lib/libgimpmath-2.0.so.0.800.6 +lrwxrwxrwx root/root usr/lib/libgimpmath-2.0.so -> libgimpmath-2.0.so.0.800.10 +lrwxrwxrwx root/root usr/lib/libgimpmath-2.0.so.0 -> libgimpmath-2.0.so.0.800.10 +-rwxr-xr-x root/root usr/lib/libgimpmath-2.0.so.0.800.10 -rwxr-xr-x root/root usr/lib/libgimpmodule-2.0.la -lrwxrwxrwx root/root usr/lib/libgimpmodule-2.0.so -> libgimpmodule-2.0.so.0.800.6 -lrwxrwxrwx root/root usr/lib/libgimpmodule-2.0.so.0 -> libgimpmodule-2.0.so.0.800.6 --rwxr-xr-x root/root usr/lib/libgimpmodule-2.0.so.0.800.6 +lrwxrwxrwx root/root usr/lib/libgimpmodule-2.0.so -> libgimpmodule-2.0.so.0.800.10 +lrwxrwxrwx root/root usr/lib/libgimpmodule-2.0.so.0 -> libgimpmodule-2.0.so.0.800.10 +-rwxr-xr-x root/root usr/lib/libgimpmodule-2.0.so.0.800.10 -rwxr-xr-x root/root usr/lib/libgimpthumb-2.0.la -lrwxrwxrwx root/root usr/lib/libgimpthumb-2.0.so -> libgimpthumb-2.0.so.0.800.6 -lrwxrwxrwx root/root usr/lib/libgimpthumb-2.0.so.0 -> libgimpthumb-2.0.so.0.800.6 --rwxr-xr-x root/root usr/lib/libgimpthumb-2.0.so.0.800.6 +lrwxrwxrwx root/root usr/lib/libgimpthumb-2.0.so -> libgimpthumb-2.0.so.0.800.10 +lrwxrwxrwx root/root usr/lib/libgimpthumb-2.0.so.0 -> libgimpthumb-2.0.so.0.800.10 +-rwxr-xr-x root/root usr/lib/libgimpthumb-2.0.so.0.800.10 -rwxr-xr-x root/root usr/lib/libgimpui-2.0.la -lrwxrwxrwx root/root usr/lib/libgimpui-2.0.so -> libgimpui-2.0.so.0.800.6 -lrwxrwxrwx root/root usr/lib/libgimpui-2.0.so.0 -> libgimpui-2.0.so.0.800.6 --rwxr-xr-x root/root usr/lib/libgimpui-2.0.so.0.800.6 +lrwxrwxrwx root/root usr/lib/libgimpui-2.0.so -> libgimpui-2.0.so.0.800.10 +lrwxrwxrwx root/root usr/lib/libgimpui-2.0.so.0 -> libgimpui-2.0.so.0.800.10 +-rwxr-xr-x root/root usr/lib/libgimpui-2.0.so.0.800.10 -rwxr-xr-x root/root usr/lib/libgimpwidgets-2.0.la -lrwxrwxrwx root/root usr/lib/libgimpwidgets-2.0.so -> libgimpwidgets-2.0.so.0.800.6 -lrwxrwxrwx root/root usr/lib/libgimpwidgets-2.0.so.0 -> libgimpwidgets-2.0.so.0.800.6 --rwxr-xr-x root/root usr/lib/libgimpwidgets-2.0.so.0.800.6 +lrwxrwxrwx root/root usr/lib/libgimpwidgets-2.0.so -> libgimpwidgets-2.0.so.0.800.10 +lrwxrwxrwx root/root usr/lib/libgimpwidgets-2.0.so.0 -> libgimpwidgets-2.0.so.0.800.10 +-rwxr-xr-x root/root usr/lib/libgimpwidgets-2.0.so.0.800.10 drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/gimp-2.0.pc -rw-r--r-- root/root usr/lib/pkgconfig/gimpthumb-2.0.pc @@ -482,6 +494,8 @@ lrwxrwxrwx root/root usr/man/man5/gimprc.5.gz -> gimprc-2.8.5.gz drwxr-xr-x root/root usr/share/ drwxr-xr-x root/root usr/share/aclocal/ -rw-r--r-- root/root usr/share/aclocal/gimp-2.0.m4 +drwxr-xr-x root/root usr/share/appdata/ +-rw-r--r-- root/root usr/share/appdata/gimp.appdata.xml drwxr-xr-x root/root usr/share/applications/ -rw-r--r-- root/root usr/share/applications/gimp.desktop drwxr-xr-x root/root usr/share/gimp/ diff --git a/gimp/.md5sum b/gimp/.md5sum index d0b205c..50b76ac 100644 --- a/gimp/.md5sum +++ b/gimp/.md5sum @@ -1 +1,3 @@ -12b3fdf33d1f07ae79b412a9e38b9693 gimp-2.8.6.tar.bz2 +dcc2acc9f9962a7c83ffb4243c08c469 cve-2013-1913 +901643efc82fae57af466d8a0a8991ff cve-2013-1978 +84c964aab7044489af69f7319bb59b47 gimp-2.8.10.tar.bz2 diff --git a/gimp/Pkgfile b/gimp/Pkgfile index a4489e2..e73bcb5 100644 --- a/gimp/Pkgfile +++ b/gimp/Pkgfile @@ -6,12 +6,16 @@ # Nice to have: gimp-print, libsdl, ghostscript, librsvg, libmng name=gimp -version=2.8.6 +version=2.8.10 release=1 -source=(ftp://ftp.gimp.org/pub/gimp/v2.8/gimp-$version.tar.bz2) +source=(ftp://ftp.gimp.org/pub/gimp/v2.8/gimp-$version.tar.bz2 cve-2013-1913 cve-2013-1978) build() { cd gimp-$version + + patch -p1 -i ../cve-2013-1913 + patch -p1 -i ../cve-2013-1978 + sed -i -e '/$(helpbrowser)/d' plug-ins/Makefile.in ./configure --prefix=/usr \ --mandir=/usr/man \