mirrors/aports
2
0
Fork 0
mirror of https://gitlab.alpinelinux.org/alpine/aports.git synced 2024-09-20 11:23:16 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

main/gdk-pixbuf: security upgrade to 2.42.12

Browse source 
* CVE-2022-48622
This commit is contained in:
Krassy Boykinov 2024-09-12 09:32:51 +02:00 committed by Natanael Copa
parent a3ecdb8f62
commit 9be59f9e43
2 changed files with 6 additions and 39 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

32
main/gdk-pixbuf/0001-fix-build-failure-due-to-typo-in-the-build-script.patch
View file

@ -1,32 +0,0 @@
From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
From: Christian Heusel <christian@heusel.eu>
Date: Sat, 20 Apr 2024 11:07:32 +0200
Subject: [PATCH] fix build failure due to typo in the build script
The fixed commit had a typo where it would try to call a nonexistant
function instead of the .contains method of the relevant array.
This was only made visible when the "other" loaders were enabled so it
is triggered all the time.
This was made visible when working on
https://gitlab.archlinux.org/archlinux/packaging/packages/gdk-pixbuf2/-/merge_requests/1
Fixes: 81a77399a ("Update the testsuite")
Signed-off-by: Christian Heusel <christian@heusel.eu>
---
tests/meson.build | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/tests/meson.build b/tests/meson.build
index 78d0ad92e5e2..78ae43af17f9 100644
--- a/tests/meson.build
+++ b/tests/meson.build
@@ -71,7 +71,7 @@ installed_tests = {
'pixbuf-construction': { 'suites': ['conform'], },
'animation': {
'suites': ['format'],
- 'skip': not (enabled_loaders.contains('ani') and enabled_loaders_contains('gif')),
+ 'skip': not (enabled_loaders.contains('ani') and enabled_loaders.contains('gif')),
},
'cve-2015-4491': {
'suites': ['security'],

13
main/gdk-pixbuf/APKBUILD
View file

@ -1,8 +1,8 @@
# Contributor: Rasmus Thomsen <oss@cogitri.dev>
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
pkgname=gdk-pixbuf
pkgver=2.42.11
pkgrel=1
pkgver=2.42.12
pkgrel=0
pkgdesc="GTK+ image loading library"
url="https://wiki.gnome.org/Projects/GdkPixbuf"
arch="all"
@ -20,9 +20,7 @@ makedepends="
install="$pkgname.pre-deinstall"
triggers="$pkgname.trigger=/usr/lib/gdk-pixbuf-2.0/*/loaders"
subpackages="$pkgname-dbg $pkgname-doc $pkgname-lang $pkgname-dev $pkgname-loaders"
source="https://download.gnome.org/sources/gdk-pixbuf/${pkgver%.*}/gdk-pixbuf-$pkgver.tar.xz
0001-fix-build-failure-due-to-typo-in-the-build-script.patch
"
source="https://download.gnome.org/sources/gdk-pixbuf/${pkgver%.*}/gdk-pixbuf-$pkgver.tar.xz"
case "$CARCH" in
x86|arm*)
@ -31,6 +29,8 @@ x86|arm*)
esac
# secfixes:
# 2.42.12-r0:
# - CVE-2022-48622
# 2.42.8-r0:
# - CVE-2021-44648
# 2.42.2-r0:
@ -64,6 +64,5 @@ loaders() {
}
sha512sums="
582ea4eee2bfe0824175c35f56baf72799585f90ac86069a781830830b605f4cd93f5c6eafab80f4f7354f8f9d51d157ae89eda6eb1e32a0e51de37d7f6290cc gdk-pixbuf-2.42.11.tar.xz
45420d8f4119c222768f7477fafa4ffcbd479948f5b6d06f74726700b1645579fb6647f81247b0b281dcde0df010c7811c954021f2a477a88a40acd232247336 0001-fix-build-failure-due-to-typo-in-the-build-script.patch
ae9fcc9b4e8fd10a4c9bf34c3a755205dae7bbfe13fbc93ec4e63323dad10cc862df6a9e2e2e63c84ffa01c5e120a3be06ac9fad2a7c5e58d3dc6ba14d1766e8 gdk-pixbuf-2.42.12.tar.xz
"