Subject: bug#73683: closed (Re: [bug#73683] [PATCH] gnu: vips: Update to 8.15.3. [security fixes])

From: [email-masked] (GNU bug Tracking System)
Date: Mon, 14 Oct 2024 02:22:02 +0000

Your bug report

#73683: [PATCH] gnu: vips: Update to 8.15.3. [security fixes]

which was filed against the guix-patches package, has been closed.

The explanation is attached below, along with your original report.
If you require more details, please reply to [email-masked].

-- 
73683: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=73683
GNU Bug Tracking System
Contact [email-masked] with problems

Subject: Re: [bug#73683] [PATCH] gnu: vips: Update to 8.15.3. [security fixes]
From: Zheng Junjie <[email-masked]>
To: Nicolas Graves via Guix-patches via <[email-masked]>
Cc: [email-masked], Nicolas Graves <[email-masked]>
Date: Mon, 14 Oct 2024 10:20:29 +0800
List-Id: <debbugs-submit.debbugs.gnu.org>

Nicolas Graves via Guix-patches via <[email-masked]> writes:

> This fixes CVE-2023-40032.
>
> * gnu/packages/image-processing.scm (vips): Update to 8.15.3.
>   [build-system]: Switch to meson-build-system.
>   [inputs]: Add glib:bin.
> ---
>  gnu/packages/image-processing.scm | 11 +++++++----
>  1 file changed, 7 insertions(+), 4 deletions(-)
>
> diff --git a/gnu/packages/image-processing.scm b/gnu/packages/image-processing.scm
> index 033e006d06..1a24837ac8 100644
> --- a/gnu/packages/image-processing.scm
> +++ b/gnu/packages/image-processing.scm
> @@ -23,6 +23,7 @@
>  ;;; Copyright © 2022 Tomasz Jeneralczyk <[email-masked]>
>  ;;; Copyright © 2022 Paul A. Patience <[email-masked]>
>  ;;; Copyright © 2023 Cairn <[email-masked]>
> +;;; Copyright © 2024 Nicolas Graves <[email-masked]>
>  ;;;
>  ;;; This file is part of GNU Guix.
>  ;;;
> @@ -49,6 +50,7 @@ (define-module (gnu packages image-processing)
>    #:use-module (guix build-system qt)
>    #:use-module (guix build-system cmake)
>    #:use-module (guix build-system gnu)
> +  #:use-module (guix build-system meson)
>    #:use-module (guix build-system python)
>    #:use-module (guix build-system pyproject)
>    #:use-module (gnu packages)
> @@ -776,16 +778,16 @@ (define-public opencv
>  (define-public vips
>    (package
>      (name "vips")
> -    (version "8.13.1")
> +    (version "8.15.3")
>      (source
>       (origin
>         (method url-fetch)
>         (uri (string-append
>               "https://github.com/libvips/libvips/releases/download/v"
> -             version "/vips-" version ".tar.gz"))
> +             version "/vips-" version ".tar.xz"))
>         (sha256
> -        (base32 "00kp3439jcqv9l2gcjg88xzvlq8clv54z1m3x66i3chvarz7ndxd"))))
> -    (build-system gnu-build-system)
> +        (base32 "182j20dw38f1nyfx8cf7cjsr0k4nl7lfk3wm2d0ddypa6vsxj9ry"))))
> +    (build-system meson-build-system)
>      (native-inputs
>       (list gobject-introspection pkg-config))
>      (inputs
> @@ -793,6 +795,7 @@ (define-public vips
>             fftw
>             giflib
>             glib
> +           (list glib "bin")
>             hdf5
>             imagemagick
>             lcms

push, and add commit to fetch sources from git.

Subject: [PATCH] gnu: vips: Update to 8.15.3. [security fixes]
From: Nicolas Graves <[email-masked]>
To: [email-masked]
Cc: Nicolas Graves <[email-masked]>
Date: Tue, 8 Oct 2024 00:05:45 +0200
List-Id: <debbugs-submit.debbugs.gnu.org>

This fixes CVE-2023-40032.

* gnu/packages/image-processing.scm (vips): Update to 8.15.3.
  [build-system]: Switch to meson-build-system.
  [inputs]: Add glib:bin.
---
 gnu/packages/image-processing.scm | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/gnu/packages/image-processing.scm b/gnu/packages/image-processing.scm
index 033e006d06..1a24837ac8 100644
--- a/gnu/packages/image-processing.scm
+++ b/gnu/packages/image-processing.scm
@@ -23,6 +23,7 @@
 ;;; Copyright © 2022 Tomasz Jeneralczyk <[email-masked]>
 ;;; Copyright © 2022 Paul A. Patience <[email-masked]>
 ;;; Copyright © 2023 Cairn <[email-masked]>
+;;; Copyright © 2024 Nicolas Graves <[email-masked]>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -49,6 +50,7 @@ (define-module (gnu packages image-processing)
   #:use-module (guix build-system qt)
   #:use-module (guix build-system cmake)
   #:use-module (guix build-system gnu)
+  #:use-module (guix build-system meson)
   #:use-module (guix build-system python)
   #:use-module (guix build-system pyproject)
   #:use-module (gnu packages)
@@ -776,16 +778,16 @@ (define-public opencv
 (define-public vips
   (package
     (name "vips")
-    (version "8.13.1")
+    (version "8.15.3")
     (source
      (origin
        (method url-fetch)
        (uri (string-append
              "https://github.com/libvips/libvips/releases/download/v"
-             version "/vips-" version ".tar.gz"))
+             version "/vips-" version ".tar.xz"))
        (sha256
-        (base32 "00kp3439jcqv9l2gcjg88xzvlq8clv54z1m3x66i3chvarz7ndxd"))))
-    (build-system gnu-build-system)
+        (base32 "182j20dw38f1nyfx8cf7cjsr0k4nl7lfk3wm2d0ddypa6vsxj9ry"))))
+    (build-system meson-build-system)
     (native-inputs
      (list gobject-introspection pkg-config))
     (inputs
@@ -793,6 +795,7 @@ (define-public vips
            fftw
            giflib
            glib
+           (list glib "bin")
            hdf5
            imagemagick
            lcms
-- 
2.46.0