GNU bug report logs - #32663
[PATCH 0/2] Ghostscript fixes

Previous Next

Full log

View this message in rfc822 format

From: Marius Bakke <mbakke <at> fastmail.com>
To: 32663 <at> debbugs.gnu.org
Subject: [bug#32663] [PATCH 1/2] gnu: jbig2dec: Replace with 0.15 [security fixes].
Date: Sat,  8 Sep 2018 13:10:57 +0200

* gnu/packages/image.scm (jbig2dec-0.15): New public variable.
(jbig2dec)[replacement]: New field.
---
 gnu/packages/image.scm | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/gnu/packages/image.scm b/gnu/packages/image.scm
index 81d22ed42..209d33273 100644
--- a/gnu/packages/image.scm
+++ b/gnu/packages/image.scm
@@ -495,6 +495,7 @@ arithmetic ops.")
   (package
     (name "jbig2dec")
     (version "0.14")
+    (replacement jbig2dec-0.15)
     (source
       (origin
         (method url-fetch)
@@ -519,6 +520,20 @@ work.")
     (home-page "https://jbig2dec.com")
     (license license:gpl2+)))
 
+;; This is a bugfix release from an ongoing Ghostscript security audit.
+(define-public jbig2dec-0.15
+  (package
+    (inherit jbig2dec)
+    (version "0.15")
+    (source (origin
+              (inherit (package-source jbig2dec))
+              (uri (string-append "https://github.com/ArtifexSoftware"
+                                  "/ghostpdl-downloads/releases/download/gs924/"
+                                  "jbig2dec-" version ".tar.gz"))
+              (sha256
+               (base32
+                "0m1qwpbjbirgw2fqznbajdhdhh35d6xa2csr64lpjz735pvimykb"))))))
+
 (define-public openjpeg
   (package
     (name "openjpeg")
-- 
2.18.0

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.