commit:     7d2e5965d2cee1eb84e26896fec3321e2d195527
Author:     Sergey Torokhov <torokhov-s-a <AT> yandex <DOT> ru>
AuthorDate: Sat Jun  4 20:47:53 2022 +0000
Commit:     Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Wed Jun 15 20:56:26 2022 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7d2e5965

media-gfx/gimp: 2.10.32 version bump, fix CVE-2022-30067

Bug: https://bugs.gentoo.org/845402

Signed-off-by: Sergey Torokhov <torokhov-s-a <AT> yandex.ru>
Closes: https://github.com/gentoo/gentoo/pull/25757
Signed-off-by: Sam James <sam <AT> gentoo.org>

 media-gfx/gimp/Manifest            |   1 +
 media-gfx/gimp/gimp-2.10.32.ebuild | 210 +++++++++++++++++++++++++++++++++++++
 2 files changed, 211 insertions(+)

diff --git a/media-gfx/gimp/Manifest b/media-gfx/gimp/Manifest
index a5ece810b9e8..37cb3e86c62e 100644
--- a/media-gfx/gimp/Manifest
+++ b/media-gfx/gimp/Manifest
@@ -1,3 +1,4 @@
 DIST gimp-2.10.28.tar.bz2 31675862 BLAKE2B 
b491b55d5adf08221feb7cee8b3adc1d8b090901e8f43b93a4d2c3d935ce1ca45072b0ccd6840e06b329fbfafc8fe5e3d6056381c5129203fa3c5e781cab0453
 SHA512 
587f6f46741672f0700fd642a5b779694d2d8bc8ad70e7677ccdbfc2266dc62203ed347d6aaffaa4b8e7d84a84a25f7d5a51507dfd64b21b4c05970856d3ab94
 DIST gimp-2.10.30.tar.bz2 31731327 BLAKE2B 
6d948e16fbf7bae7b514a60a44fc5eaac32bebb915de0dcb5120d10739501a01973cb1f5821699d94c4d4cc7ef86d0e5456674a87623b6996d9b276d83a6eb74
 SHA512 
02ca9e8846dc2ae856f720b92f3c6af69984cf0b3ce85ba5a67479e5c3c813315a0551b7d011dcf7a6c83dc771e550cc31041126bbea0be3fd483176e0eb2851
+DIST gimp-2.10.32.tar.bz2 31397425 BLAKE2B 
3887e2e29ebfd5dcfa671a9d1549180d11bd5e3656c6854ff4130c6c6e6ca9479df075981e09b9b6b97e47dd1fcd939fea726ca09c08c040ebd1998d80e61771
 SHA512 
aa999c1ec388154965f84d995a9b5517e9c38608d03a0d0bb6ec9fa55de946f9da106e7d6f7c02052b61d2b6806e7a378e786539f0de5b5ffaa2fcd1bbd9c7f1
 DIST gimp-2.99.10.tar.bz2 26782056 BLAKE2B 
103e7fa2d04b1989e59fb03964a122891831d122cdc6dd3b7637f06cff28310e12d9a79678ac477b56728f4ceb53292001c53f026e94be417db76dd7e14740ab
 SHA512 
898c1e1ffd2270ccc965db9a8263e04d95455535361b47f92256b4028808e1e91eb1924cf6cef7ff9e988194ebbc67535bd9cfbf0243159824e58551a2b91ba3

diff --git a/media-gfx/gimp/gimp-2.10.32.ebuild 
b/media-gfx/gimp/gimp-2.10.32.ebuild
new file mode 100644
index 000000000000..93ceeab6ac4e
--- /dev/null
+++ b/media-gfx/gimp/gimp-2.10.32.ebuild
@@ -0,0 +1,210 @@
+# Copyright 1999-2022 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+GNOME2_EAUTORECONF=yes
+WANT_AUTOMAKE=
+
+inherit autotools gnome2 toolchain-funcs virtualx
+
+DESCRIPTION="GNU Image Manipulation Program"
+HOMEPAGE="https://www.gimp.org/";
+SRC_URI="mirror://gimp/v2.10/${P}.tar.bz2"
+LICENSE="GPL-3 LGPL-3"
+SLOT="0/2"
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~ppc ~ppc64 ~riscv ~x86"
+
+IUSE="aalib alsa aqua debug doc gnome heif jpeg2k mng openexr postscript udev 
unwind vector-icons webp wmf xpm cpu_flags_ppc_altivec cpu_flags_x86_mmx 
cpu_flags_x86_sse"
+
+RESTRICT="!test? ( test )"
+
+COMMON_DEPEND="
+       >=app-text/poppler-0.50[cairo]
+       >=app-text/poppler-data-0.4.7
+       >=dev-libs/atk-2.2.0
+       >=dev-libs/glib-2.56.2:2
+       >=dev-libs/json-glib-1.2.6
+       dev-libs/libxml2:2
+       dev-libs/libxslt
+       >=gnome-base/librsvg-2.40.6:2
+       >=media-gfx/mypaint-brushes-2.0.2:=
+       >=media-libs/babl-0.1.88
+       >=media-libs/fontconfig-2.12.4
+       >=media-libs/freetype-2.1.7
+       >=media-libs/gegl-0.4.34:0.4[cairo]
+       >=media-libs/gexiv2-0.10.6
+       >=media-libs/harfbuzz-0.9.19:=
+       >=media-libs/lcms-2.8:2
+       media-libs/libjpeg-turbo
+       >=media-libs/libmypaint-1.6.1:=
+       >=media-libs/libpng-1.6.25:0=
+       >=media-libs/tiff-3.5.7:0
+       net-libs/glib-networking[ssl]
+       sys-libs/zlib
+       >=x11-libs/cairo-1.12.2
+       >=x11-libs/gdk-pixbuf-2.31:2
+       >=x11-libs/gtk+-2.24.32:2
+       x11-libs/libXcursor
+       >=x11-libs/pango-1.29.4
+       aalib? ( media-libs/aalib )
+       alsa? ( >=media-libs/alsa-lib-1.0.0 )
+       aqua? ( >=x11-libs/gtk-mac-integration-2.0.0 )
+       heif? ( >=media-libs/libheif-1.9.1:= )
+       jpeg2k? ( >=media-libs/openjpeg-2.1.0:2= )
+       mng? ( media-libs/libmng:= )
+       openexr? ( >=media-libs/openexr-1.6.1:= )
+       postscript? ( app-text/ghostscript-gpl )
+       udev? ( dev-libs/libgudev:= )
+       unwind? ( >=sys-libs/libunwind-1.1.0:= )
+       webp? ( >=media-libs/libwebp-0.6.0:= )
+       wmf? ( >=media-libs/libwmf-0.2.8 )
+       xpm? ( x11-libs/libXpm )
+"
+
+RDEPEND="
+       ${COMMON_DEPEND}
+       x11-themes/hicolor-icon-theme
+       gnome? ( gnome-base/gvfs )
+"
+
+DEPEND="
+       ${COMMON_DEPEND}
+       >=dev-lang/perl-5.10.0
+       dev-libs/appstream-glib
+       dev-util/gtk-update-icon-cache
+       >=dev-util/intltool-0.40.1
+       >=sys-devel/gettext-0.19
+       >=sys-devel/libtool-2.2
+       virtual/pkgconfig
+"
+
+DOCS=( "AUTHORS" "ChangeLog" "HACKING" "NEWS" "README" "README.i18n" )
+
+PATCHES=(
+       "${FILESDIR}/${PN}-2.10_fix_test-appdata.patch" # Bugs 685210 (and 
duplicate 691070)
+)
+
+src_prepare() {
+       sed -i -e 's/mypaint-brushes-1.0/mypaint-brushes-2.0/' configure.ac || 
die #737794
+
+       sed -i -e 's/== "xquartz"/= "xquartz"/' configure.ac || die #494864
+       sed 's:-DGIMP_DISABLE_DEPRECATED:-DGIMP_protect_DISABLE_DEPRECATED:g' 
-i configure.ac || die #615144
+
+       gnome2_src_prepare  # calls eautoreconf
+
+       sed 's:-DGIMP_protect_DISABLE_DEPRECATED:-DGIMP_DISABLE_DEPRECATED:g' 
-i configure || die #615144
+       grep -F -q GIMP_DISABLE_DEPRECATED configure || die #615144, self-test
+
+       export CC_FOR_BUILD="$(tc-getBUILD_CC)"
+}
+
+_adjust_sandbox() {
+       # Bugs #569738 and #591214
+       local nv
+       for nv in /dev/nvidia-uvm /dev/nvidiactl /dev/nvidia{0..9} ; do
+               # We do not check for existence as they may show up later
+               # https://bugs.gentoo.org/show_bug.cgi?id=569738#c21
+               addwrite "${nv}"
+       done
+
+       addwrite /dev/dri/  # bugs #574038 and #684886
+       addwrite /dev/ati/  # bug #589198
+       addwrite /proc/mtrr  # bug #589198
+}
+
+src_configure() {
+       _adjust_sandbox
+
+       local myconf=(
+               GEGL="${EPREFIX}"/usr/bin/gegl-0.4
+               GDBUS_CODEGEN="${EPREFIX}"/bin/false
+
+               --enable-default-binary
+
+               --disable-check-update
+               --disable-python
+               --enable-mp
+               --with-appdata-test
+               --with-bug-report-url=https://bugs.gentoo.org/
+               --with-xmc
+               --without-libbacktrace
+               --without-webkit
+               --without-xvfb-run
+               $(use_enable cpu_flags_ppc_altivec altivec)
+               $(use_enable cpu_flags_x86_mmx mmx)
+               $(use_enable cpu_flags_x86_sse sse)
+               $(use_enable debug)
+               $(use_enable vector-icons)
+               $(use_with aalib aa)
+               $(use_with alsa)
+               $(use_with !aqua x)
+               $(use_with heif libheif)
+               $(use_with jpeg2k jpeg2000)
+               $(use_with mng libmng)
+               $(use_with openexr)
+               $(use_with postscript gs)
+               $(use_with udev gudev)
+               $(use_with unwind libunwind)
+               $(use_with webp)
+               $(use_with wmf)
+               $(use_with xpm libxpm)
+       )
+
+       gnome2_src_configure "${myconf[@]}"
+}
+
+src_compile() {
+       export XDG_DATA_DIRS="${EPREFIX}"/usr/share  # bug 587004
+       gnome2_src_compile
+}
+
+# for https://bugs.gentoo.org/664938
+_rename_plugins() {
+       einfo 'Renaming plug-ins to not collide with pre-2.10.6 file layout 
(bug #664938)...'
+       local prename=gimp-org-
+       (
+               cd "${ED}"/usr/$(get_libdir)/gimp/2.0/plug-ins || die
+               for plugin_slash in $(ls -d1 */); do
+                   plugin=${plugin_slash%/}
+                   if [[ -f ${plugin}/${plugin} ]]; then
+                       # NOTE: Folder and file name need to match for Gimp to 
load that plug-in
+                       #       so "file-svg/file-svg" becomes 
"${prename}file-svg/${prename}file-svg"
+                       mv ${plugin}/{,${prename}}${plugin} || die
+                       mv {,${prename}}${plugin} || die
+                   fi
+               done
+       )
+}
+
+src_test() {
+       virtx emake check
+}
+
+src_install() {
+       gnome2_src_install
+
+       # Workaround for bug #321111 to give GIMP the least
+       # precedence on PDF documents by default
+       mv "${ED}"/usr/share/applications/{,zzz-}gimp.desktop || die
+
+       find "${D}" -name '*.la' -type f -delete || die
+
+       # Prevent dead symlink gimp-console.1 from downstream man page 
compression (bug #433527)
+       local gimp_app_version=$(ver_cut 1-2)
+       mv "${ED}"/usr/share/man/man1/gimp-console{-${gimp_app_version},}.1 || 
die
+
+       # Remove gimp devel-docs html files if user doesn't need it
+       if ! use doc; then
+               rm -r "${ED}"/usr/share/gtk-doc || die
+       fi
+
+       _rename_plugins || die
+}
+
+pkg_postinst() {
+       gnome2_pkg_postinst
+}
+
+pkg_postrm() {
+       gnome2_pkg_postrm
+}

Reply via email to