GNU bug report logs - #62624
[PATCH] gnu: libexif: Update to 0.6.24. [fixes CVE-2020-0198, CVE-2020-0452]

Previous Next

Package: guix-patches;

Reported by: Bruno Victal <mirai <at> makinata.eu>

Date: Sun, 2 Apr 2023 18:05:02 UTC

Severity: normal

Tags: patch, security

Done: Ludovic Courtès <ludo <at> gnu.org>

Bug is archived. No further changes may be made.

Full log


View this message in rfc822 format

From: help-debbugs <at> gnu.org (GNU bug Tracking System)
To: Bruno Victal <mirai <at> makinata.eu>
Subject: bug#62624: closed (Re: bug#62624: [PATCH] gnu: libexif: Update to
 0.6.24. [fixes CVE-2020-0198, CVE-2020-0452])
Date: Thu, 06 Apr 2023 15:43:01 +0000
[Message part 1 (text/plain, inline)]
Your bug report

#62624: [PATCH] gnu: libexif: Update to 0.6.24. [fixes CVE-2020-0198, CVE-2020-0452]

which was filed against the guix-patches package, has been closed.

The explanation is attached below, along with your original report.
If you require more details, please reply to 62624 <at> debbugs.gnu.org.

-- 
62624: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=62624
GNU Bug Tracking System
Contact help-debbugs <at> gnu.org with problems
[Message part 2 (message/rfc822, inline)]
From: Ludovic Courtès <ludo <at> gnu.org>
To: Bruno Victal <mirai <at> makinata.eu>
Cc: 62624-done <at> debbugs.gnu.org
Subject: Re: bug#62624: [PATCH] gnu: libexif: Update to 0.6.24. [fixes
 CVE-2020-0198, CVE-2020-0452]
Date: Thu, 06 Apr 2023 17:42:25 +0200
Hi,

Bruno Victal <mirai <at> makinata.eu> skribis:

> * gnu/packages/photo.scm (libexif): Update to 0.6.24.
> [source]: Switch to git checkout.
> [native-inputs]: Add autoconf, automake, gettext-minimal and libtool.

Applied, thanks!

[Message part 3 (message/rfc822, inline)]
From: Bruno Victal <mirai <at> makinata.eu>
To: guix-patches <at> gnu.org
Cc: Bruno Victal <mirai <at> makinata.eu>
Subject: [PATCH] gnu: libexif: Update to 0.6.24. [fixes CVE-2020-0198,
 CVE-2020-0452]
Date: Sun,  2 Apr 2023 18:55:08 +0100
* gnu/packages/photo.scm (libexif): Update to 0.6.24.
[source]: Switch to git checkout.
[native-inputs]: Add autoconf, automake, gettext-minimal and libtool.
---
 gnu/packages/photo.scm | 17 +++++++++--------
 1 file changed, 9 insertions(+), 8 deletions(-)

diff --git a/gnu/packages/photo.scm b/gnu/packages/photo.scm
index 80fc963363..8df1034487 100644
--- a/gnu/packages/photo.scm
+++ b/gnu/packages/photo.scm
@@ -211,18 +211,19 @@ (define-public libraw
 (define-public libexif
   (package
     (name "libexif")
-    (version "0.6.22")
+    (version "0.6.24")
     (source (origin
-              (method url-fetch)
-              (uri (string-append
-                    "https://github.com/libexif/libexif/releases"
-                    "/download/libexif-"
-                    (string-map (lambda (x) (if (char=? x #\.) #\_ x)) version)
-                    "-release/libexif-" version ".tar.xz"))
+              (method git-fetch)
+              (uri (git-reference
+                    (url "https://github.com/libexif/libexif.git")
+                    (commit (string-append "v" version))))
+              (file-name (git-file-name name version))
               (sha256
                (base32
-                "0mhcad5zab7fsn120rd585h8ncwkq904nzzrq8vcd72hzk4g2j2h"))))
+                "0zi5vvb0khlzc6xyfayk6mjx5lgkrj8r7s8lfv4j7wkcgndjga0j"))))
     (build-system gnu-build-system)
+    (native-inputs
+     (list autoconf automake gettext-minimal libtool))
     (home-page "https://libexif.github.io/")
     (synopsis "Read and manipulate EXIF data in digital photographs")
     (description
-- 
2.39.2




This bug report was last modified 2 years and 138 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.