Security update OpenEXR and ilmbase to 2.2.1.

While here, fix libIlmImfUtil_la_LDFLAGp so that when linking libIlmImfUtil,
the locally built libIlmImf gets precedence over the one in /usr/local,
to permit upgrades in a running system with the older version installed.

This changes the library's SONAME, so bump PORTREVISION of all dependees.

Unfortunately, this looks a bit too intrusive for an MFH to 2017Q4.

Security:	CVE-2017-9110
Security:	CVE-2017-9111
Security:	CVE-2017-9112
Security:	CVE-2017-9113
Security:	CVE-2017-9114
Security:	CVE-2017-9115
Security:	CVE-2017-9116
Security:	803879e9-4195-11e7-9b08-080027ef73ec
This commit is contained in:
Matthias Andree 2017-12-01 01:58:23 +00:00
parent 34f4fb6411
commit 1fb0ae7cf9
Notes: svn2git 2021-03-31 03:12:20 +00:00
svn path=/head/; revision=455244
49 changed files with 83 additions and 106 deletions

View file

@ -3,7 +3,7 @@
PORTNAME= synfig
PORTVERSION= 1.0.2
PORTREVISION= 11
PORTREVISION= 12
CATEGORIES= devel graphics multimedia
MASTER_SITES= SF/${PORTNAME}/releases/${PORTVERSION}/source

View file

@ -6,7 +6,7 @@
#
PORTNAME= calligra
PORTVERSION= 3.0.1
PORTREVISION= 6
PORTREVISION= 7
CATEGORIES= editors kde
MASTER_SITES= KDE/stable/${PORTNAME}/${PORTVERSION}
DIST_SUBDIR= KDE/${PORTNAME}

View file

@ -2,8 +2,8 @@
# $FreeBSD$
PORTNAME= OpenEXR
PORTVERSION= 2.2.0
PORTREVISION= 8
PORTVERSION= 2.2.1
PORTREVISION= 0
CATEGORIES= graphics devel
MASTER_SITES= SAVANNAH/openexr/:dist \
LOCAL/mandree/:test
@ -14,13 +14,10 @@ DISTFILES= ${DISTNAME}${EXTRACT_SUFX}:dist \
MAINTAINER= mandree@FreeBSD.org
COMMENT= High dynamic-range (HDR) image file format
DEPRECATED= Vulnerable with no upstream support
EXPIRATION_DATE=2017-12-31
LICENSE= BSD3CLAUSE
# exact version required to avoid hard-to-debug issues
LIB_DEPENDS= libImath-2_2.so.12:graphics/ilmbase
LIB_DEPENDS= libImath-2_2.so.23:graphics/ilmbase
WRKSRC= ${WRKDIR}/${DISTNAME}
@ -58,7 +55,7 @@ USE_GCC= yes
.endif
MAJORVER= 2_2
VER= 22
VER= 23
PLIST_SUB= MAJORVER=${MAJORVER}
PLIST_SUB+= VER=${VER}

View file

@ -1,4 +1,5 @@
SHA256 (openexr-2.2.0.tar.gz) = 36a012f6c43213f840ce29a8b182700f6cf6b214bea0d5735594136b44914231
SIZE (openexr-2.2.0.tar.gz) = 14489661
TIMESTAMP = 1512081871
SHA256 (openexr-2.2.1.tar.gz) = 8f9a5af6131583404261931d9a5c83de0a425cb4b8b25ddab2b169fbf113aecd
SIZE (openexr-2.2.1.tar.gz) = 18176639
SHA256 (openexr-2.2.0-comp_dwa-test-images.tar.xz) = bbb8ff547e9b68f0dfb1e8804a7ad984978c2b15897988399cc68176e99dd63a
SIZE (openexr-2.2.0-comp_dwa-test-images.tar.xz) = 653768

View file

@ -1,6 +1,12 @@
--- IlmImfUtil/Makefile.in.orig 2014-08-10 04:48:23 UTC
--- IlmImfUtil/Makefile.in.orig 2017-12-01 01:20:37 UTC
+++ IlmImfUtil/Makefile.in
@@ -265,10 +265,11 @@ libIlmImfUtil_la_LDFLAGS = @ILMBASE_LDFL
@@ -375,15 +375,16 @@ libIlmImfUtil_la_SOURCES = \
ImfImageDataWindow.h ImfImageDataWindow.cpp \
ImfImageChannelRenaming.h
-libIlmImfUtil_la_LDFLAGS = @ILMBASE_LDFLAGS@ -version-info \
+libIlmImfUtil_la_LDFLAGS = -L$(top_builddir)/IlmImf @ILMBASE_LDFLAGS@ -version-info \
@LIBTOOL_VERSION@ -no-undefined $(am__append_1)
libIlmImfUtil_la_LIBADD = -L$(top_builddir)/IlmImf @ILMBASE_LIBS@ -lIlmImf
libIlmImfUtilincludedir = $(includedir)/OpenEXR
EXTRA_DIST = CMakeLists.txt

View file

@ -1,4 +1,4 @@
--- IlmImf/ImfFastHuf.cpp.orig 2014-08-10 04:23:56 UTC
--- IlmImf/ImfFastHuf.cpp.orig 2017-11-17 23:00:24 UTC
+++ IlmImf/ImfFastHuf.cpp
@@ -107,7 +107,7 @@ FastHufDecoder::FastHufDecoder
for (int i = 0; i <= MAX_CODE_LEN; ++i)

View file

@ -1,4 +1,4 @@
--- IlmImf/ImfSystemSpecific.cpp.orig 2014-08-10 04:23:57 UTC
--- IlmImf/ImfSystemSpecific.cpp.orig 2017-11-17 23:00:24 UTC
+++ IlmImf/ImfSystemSpecific.cpp
@@ -44,11 +44,23 @@ namespace {
// Helper functions for gcc + SSE enabled

View file

@ -96,8 +96,8 @@ lib/libIlmImf-%%MAJORVER%%.so.%%VER%%
lib/libIlmImf-%%MAJORVER%%.so.%%VER%%.0.0
lib/libIlmImf.a
lib/libIlmImf.so
lib/libIlmImfUtil-%%MAJORVER%%.so.22
lib/libIlmImfUtil-%%MAJORVER%%.so.22.0.0
lib/libIlmImfUtil-%%MAJORVER%%.so.%%VER%%
lib/libIlmImfUtil-%%MAJORVER%%.so.%%VER%%.0.0
lib/libIlmImfUtil.a
lib/libIlmImfUtil.so
libdata/pkgconfig/OpenEXR.pc

View file

@ -3,6 +3,7 @@
PORTNAME= ampasCTL
PORTVERSION= 1.5.2
PORTREVISION= 1
CATEGORIES= graphics devel
MAINTAINER= ports@FreeBSD.org

View file

@ -3,6 +3,7 @@
PORTNAME= appleseed
DISTVERSION= 1.6.0-beta
PORTREVISION= 1
CATEGORIES= graphics
MAINTAINER= danfe@FreeBSD.org

View file

@ -3,7 +3,7 @@
PORTNAME= aqsis
PORTVERSION= 1.8.2
PORTREVISION= 15
PORTREVISION= 16
CATEGORIES= graphics
MASTER_SITES= SF/${PORTNAME}/${PORTNAME}-source/${PORTVERSION}

View file

@ -3,7 +3,7 @@
PORTNAME= blender
PORTVERSION= 2.79
PORTREVISION= 2
PORTREVISION= 3
CATEGORIES= graphics games
MASTER_SITES= http://download.blender.org/source/ \
http://mirror.cs.umn.edu/blender.org/source/ \

View file

@ -3,7 +3,7 @@
PORTNAME= cinepaint
DISTVERSION= 1.0-4
PORTREVISION= 12
PORTREVISION= 13
CATEGORIES= graphics
MASTER_SITES= SF/${PORTNAME}/CinePaint/CinePaint-${DISTVERSION}

View file

@ -3,7 +3,7 @@
PORTNAME= darktable
PORTVERSION= 2.2.5
PORTREVISION= 2
PORTREVISION= 4
CATEGORIES= graphics
MASTER_SITES= https://github.com/darktable-org/${PORTNAME}/releases/download/release-${PORTVERSION:C/\.rc/rc/}/

View file

@ -3,7 +3,7 @@
PORTNAME= enblend
PORTVERSION= 4.1.4
PORTREVISION= 13
PORTREVISION= 14
CATEGORIES= graphics
MASTER_SITES= SF/enblend/enblend-enfuse/enblend-enfuse-${PORTVERSION:R}
DISTNAME= enblend-enfuse-${PORTVERSION}

View file

@ -3,7 +3,7 @@
PORTNAME= exact-image
PORTVERSION= 0.9.1
PORTREVISION= 0
PORTREVISION= 1
CATEGORIES= graphics perl5 python
MASTER_SITES= http://dl.exactcode.de/oss/${PORTNAME}/ LOCAL/bf

View file

@ -3,7 +3,7 @@
PORTNAME= exrtools
PORTVERSION= 0.4
PORTREVISION= 13
PORTREVISION= 14
CATEGORIES= graphics
MASTER_SITES= http://scanline.ca/exrtools/ \
LOCAL/ehaupt

View file

@ -3,7 +3,7 @@
PORTNAME= fyre
PORTVERSION= 1.0.1
PORTREVISION= 8
PORTREVISION= 9
CATEGORIES= graphics
MASTER_SITES= http://releases.navi.cx/fyre/

View file

@ -3,7 +3,7 @@
PORTNAME= gegl
PORTVERSION= 0.2.0
PORTREVISION= 20
PORTREVISION= 21
CATEGORIES= graphics
MASTER_SITES= GIMP

View file

@ -3,7 +3,7 @@
PORTNAME= gegl
PORTVERSION= 0.3.20
PORTREVISION= 1
PORTREVISION= 2
CATEGORIES= graphics
MASTER_SITES= GIMP
PKGNAMESUFFIX= 3

View file

@ -2,7 +2,7 @@
PORTNAME= gmic
PORTVERSION= 1.6.9
PORTREVISION= 10
PORTREVISION= 11
CATEGORIES= graphics
MASTER_SITES= http://gmic.eu/files/source/
PKGNAMEPREFIX= gimp-

View file

@ -1,6 +1,6 @@
# $FreeBSD$
PORTREVISION= 0
PORTREVISION= 1
CATEGORIES= graphics
COMMENT= GStreamer OpenExr codec plugin

View file

@ -3,7 +3,7 @@
PORTNAME= hdr_tools
PORTVERSION= 0.0.2010.11.23 # unspecified by the author, so use the date
PORTREVISION= 2
PORTREVISION= 3
CATEGORIES= graphics
MASTER_SITES= http://ttic.uchicago.edu/~cotter/projects/hdr_tools/archives/ \
http://freebsd.nsu.ru/distfiles/

View file

@ -3,7 +3,7 @@
PORTNAME= hugin
PORTVERSION= 2017.0.0
PORTREVISION= 4
PORTREVISION= 5
CATEGORIES= graphics
MASTER_SITES= SF/${PORTNAME}/${PORTNAME}/${PORTNAME}-${PORTVERSION:R}

View file

@ -2,7 +2,7 @@
# $FreeBSD$
PORTNAME= ilmbase
PORTVERSION= 2.2.0
PORTVERSION= 2.2.1
CATEGORIES= graphics devel
MASTER_SITES= SAVANNAH/openexr/
DISTNAME= ilmbase-${PORTVERSION}
@ -23,7 +23,7 @@ OPTIONS_SUB= yes
THREAD_CONFIGURE_ENABLE= threading
MAJORVER= 2_2
VER= 12
VER= 23
PLIST_SUB= MAJORVER=${MAJORVER}
PLIST_SUB+= VER=${VER}
@ -31,14 +31,14 @@ PLIST_SUB+= VER=${VER}
HALF_BIN= eLut toFloat
regression-test regression test check: build
@(cd ${WRKSRC}; ${SETENV} ${MAKE_ENV} ${MAKE} ${MAKE_FLAGS} ${MAKEFILE} ${MAKE_ARGS} check)
@(cd ${WRKSRC}; ${SETENV} ${MAKE_ENV} ${MAKE_CMD} ${MAKE_FLAGS} ${MAKEFILE} ${MAKE_ARGS} test)
post-install:
${STRIP_CMD} ${STAGEDIR}${PREFIX}/lib/libHalf.so.${VER}
${RM} ${STAGEDIR}${PREFIX}/lib/*.la
.for l in libIex libIexMath libImath libIlmThread
${STRIP_CMD} ${STAGEDIR}${PREFIX}/lib/${l}-${MAJORVER}.so.${VER}
${LN} -s ${l}-${MAJORVER}.so.${VER} ${STAGEDIR}${PREFIX}/lib/${l}.so
${LN} -s ${l}-${MAJORVER}.so.${VER} ${STAGEDIR}${PREFIX}/lib/${l}.so || :
.endfor
.for e in ${HALF_BIN}

View file

@ -1,2 +1,3 @@
SHA256 (ilmbase-2.2.0.tar.gz) = ecf815b60695555c1fbc73679e84c7c9902f4e8faa6e8000d2f905b8b86cedc7
SIZE (ilmbase-2.2.0.tar.gz) = 525289
TIMESTAMP = 1512081439
SHA256 (ilmbase-2.2.1.tar.gz) = cac206e63be68136ef556c2b555df659f45098c159ce24804e9d5e9e0286609e
SIZE (ilmbase-2.2.1.tar.gz) = 573073

View file

@ -1,42 +1,6 @@
--- ./CMakeLists.txt.orig 2014-08-10 06:23:56.000000000 +0200
+++ ./CMakeLists.txt 2014-08-15 02:01:33.000000000 +0200
@@ -160,30 +160,30 @@
SET_TARGET_PROPERTIES ( Half
PROPERTIES
- VERSION 12.0.0
+ VERSION 12
SOVERSION 12
)
SET_TARGET_PROPERTIES ( Iex
PROPERTIES
- VERSION 12.0.0
+ VERSION 12
SOVERSION 12
OUTPUT_NAME "Iex${ILMBASE_LIBSUFFIX}"
)
SET_TARGET_PROPERTIES ( Imath
PROPERTIES
- VERSION 12.0.0
+ VERSION 12
SOVERSION 12
OUTPUT_NAME "Imath${ILMBASE_LIBSUFFIX}"
)
SET_TARGET_PROPERTIES ( IlmThread
PROPERTIES
- VERSION 12.0.0
+ VERSION 12
SOVERSION 12
OUTPUT_NAME "IlmThread${ILMBASE_LIBSUFFIX}"
)
SET_TARGET_PROPERTIES ( IexMath
PROPERTIES
- VERSION 12.0.0
+ VERSION 12
SOVERSION 12
OUTPUT_NAME "IexMath${ILMBASE_LIBSUFFIX}"
)
@@ -227,5 +227,5 @@
--- CMakeLists.txt.orig 2017-11-17 23:00:23 UTC
+++ CMakeLists.txt
@@ -227,5 +227,5 @@ Cflags: -pthread -I\${OpenEXR_includedir
INSTALL ( FILES
${CMAKE_BINARY_DIR}/IlmBase.pc
DESTINATION

View file

@ -1,6 +1,6 @@
--- IlmThread/CMakeLists.txt.orig 2013-11-12 01:10:49.000000000 +0400
+++ IlmThread/CMakeLists.txt 2014-03-27 00:38:30.616700075 +0400
@@ -18,6 +18,7 @@
--- IlmThread/CMakeLists.txt.orig 2017-11-17 23:00:23 UTC
+++ IlmThread/CMakeLists.txt
@@ -18,6 +18,7 @@ IF (WIN32)
)
ENDIF()
@ -8,7 +8,7 @@
IF(BUILD_SHARED_LIBS)
ADD_DEFINITIONS(-DILMTHREAD_EXPORTS)
@@ -26,7 +27,7 @@
@@ -26,7 +27,7 @@ ENDIF()
ADD_LIBRARY ( IlmThread ${LIB_TYPE}
${ILMTHREAD_LIBRARY_SOURCES}
)

View file

@ -1,6 +1,6 @@
--- ./ImathTest/testBoxAlgo.cpp.orig 2013-06-18 21:51:38.000000000 +0200
+++ ./ImathTest/testBoxAlgo.cpp 2014-01-29 13:16:44.000000000 +0100
@@ -356,7 +356,7 @@
--- ImathTest/testBoxAlgo.cpp.orig 2017-11-17 23:00:23 UTC
+++ ImathTest/testBoxAlgo.cpp
@@ -356,7 +356,7 @@ entryAndExitPoints1 ()
Box3f ()
};

View file

@ -1,6 +1,6 @@
--- ./ImathTest/testShear.cpp.orig 2013-06-18 21:51:38.000000000 +0200
+++ ./ImathTest/testShear.cpp 2014-01-29 13:16:44.000000000 +0100
@@ -54,7 +54,6 @@
--- ImathTest/testShear.cpp.orig 2017-11-17 23:00:23 UTC
+++ ImathTest/testShear.cpp
@@ -54,7 +54,6 @@ testShear ()
const float epsilon = IMATH_INTERNAL_NAMESPACE::limits< float >::epsilon();

View file

@ -1,5 +1,5 @@
--- ./Imath/ImathFun.cpp.orig 2013-10-11 20:40:29.000000000 +0200
+++ ./Imath/ImathFun.cpp 2014-01-29 13:16:44.000000000 +0100
--- Imath/ImathFun.cpp.orig 2017-11-17 23:00:23 UTC
+++ Imath/ImathFun.cpp
@@ -33,6 +33,7 @@
///////////////////////////////////////////////////////////////////////////
@ -8,7 +8,7 @@
#include "ImathFun.h"
IMATH_INTERNAL_NAMESPACE_SOURCE_ENTER
@@ -41,14 +42,14 @@
@@ -41,14 +42,14 @@ IMATH_INTERNAL_NAMESPACE_SOURCE_ENTER
float
succf (float f)
{
@ -25,7 +25,7 @@
{
// Plus or minus zero.
@@ -76,14 +77,14 @@
@@ -76,14 +77,14 @@ succf (float f)
float
predf (float f)
{

View file

@ -59,16 +59,21 @@ include/OpenEXR/halfFunction.h
include/OpenEXR/halfLimits.h
lib/libHalf.so
lib/libHalf.so.%%VER%%
lib/libHalf.so.%%VER%%.0.0
lib/libIex-%%MAJORVER%%.so
lib/libIex-%%MAJORVER%%.so.%%VER%%
lib/libIex-%%MAJORVER%%.so.%%VER%%.0.0
lib/libIex.so
lib/libIexMath-%%MAJORVER%%.so
lib/libIexMath-%%MAJORVER%%.so.%%VER%%
lib/libIexMath-%%MAJORVER%%.so.%%VER%%.0.0
lib/libIexMath.so
lib/libIlmThread-%%MAJORVER%%.so
lib/libIlmThread-%%MAJORVER%%.so.%%VER%%
lib/libIlmThread-%%MAJORVER%%.so.%%VER%%.0.0
lib/libIlmThread.so
lib/libImath-%%MAJORVER%%.so
lib/libImath-%%MAJORVER%%.so.%%VER%%
lib/libImath-%%MAJORVER%%.so.%%VER%%.0.0
lib/libImath.so
libdata/pkgconfig/IlmBase.pc

View file

@ -2,7 +2,7 @@
PORTNAME= kimageformats
DISTVERSION= ${KDE_FRAMEWORKS_VERSION}
PORTREVISION= 1
PORTREVISION= 2
CATEGORIES= graphics kde kde-frameworks
MAINTAINER= kde@FreeBSD.org

View file

@ -2,7 +2,7 @@
PORTNAME= krita
PORTVERSION= 3.1.2.1
PORTREVISION= 6
PORTREVISION= 7
CATEGORIES= graphics kde
MASTER_SITES= KDE/stable/${PORTNAME}/3.1.2
DIST_SUBDIR= KDE/${PORTNAME}

View file

@ -3,7 +3,7 @@
PORTNAME= luminance-hdr
DISTVERSION= 2.4.0
PORTREVISION= 18
PORTREVISION= 19
CATEGORIES= graphics
MASTER_SITES= SF/qtpfsgui/luminance/${DISTVERSION}
PKGNAMESUFFIX= -qt5

View file

@ -3,7 +3,7 @@
PORTNAME= luminance-hdr
DISTVERSION= 2.3.1
PORTREVISION= 15
PORTREVISION= 16
CATEGORIES= graphics
MASTER_SITES= SF/qtpfsgui/luminance/${DISTVERSION}

View file

@ -3,7 +3,7 @@
PORTNAME= mitsuba
PORTVERSION= 0.5.0
PORTREVISION= 7
PORTREVISION= 8
CATEGORIES= graphics
MASTER_SITES= https://www.mitsuba-renderer.org/repos/mitsuba/archive/${HG_REVISION}${EXTRACT_SUFX}?dummy=
DISTNAME= ${PORTNAME}-${HG_REVISION}

View file

@ -3,7 +3,7 @@
PORTNAME= nvidia-texture-tools
PORTVERSION= 2.0.8.1 # needed to not bump PORTEPOCH; remove on next update
PORTREVISION= 8
PORTREVISION= 9
CATEGORIES= graphics
MAINTAINER= amdmi3@FreeBSD.org

View file

@ -4,7 +4,7 @@
PORTNAME= openimageio
PORTVERSION= 1.7.17
DISTVERSIONPREFIX= Release-
PORTREVISION= 5
PORTREVISION= 6
CATEGORIES?= graphics multimedia
MAINTAINER?= FreeBSD@Shaneware.biz

View file

@ -3,7 +3,7 @@
PORTNAME= openshadinglanguage
PORTVERSION= 1.8.10
PORTREVISION= 3
PORTREVISION= 4
DISTVERSIONPREFIX= Release-
CATEGORIES= graphics devel

View file

@ -3,7 +3,7 @@
PORTNAME= pixie
PORTVERSION= 2.2.6
PORTREVISION= 15
PORTREVISION= 16
CATEGORIES= graphics
MASTER_SITES= SF/${PORTNAME}/${PORTNAME}/Pixie%20${PORTVERSION}
DISTNAME= Pixie-src-${PORTVERSION}

View file

@ -3,7 +3,7 @@
PORTNAME= openexr
PORTVERSION= 1.2.0
PORTREVISION= 6
PORTREVISION= 7
CATEGORIES= graphics python
MASTER_SITES= http://excamera.com/files/ \
CHEESESHOP

View file

@ -1,6 +1,7 @@
# Created by: Shane Ambler
# $FreeBSD$
PORTREVISION= 1
CATEGORIES= graphics multimedia python
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}

View file

@ -3,7 +3,7 @@
PORTNAME= simpleviewer
PORTVERSION= 2.92
PORTREVISION= 1
PORTREVISION= 2
CATEGORIES= graphics
MASTER_SITES= https://bitbucket.org/andreyu/simple-viewer-gl/get/
DISTNAME= v${PORTVERSION} # version tag, thus no embedded ${PORTNAME}

View file

@ -3,7 +3,7 @@
PORTNAME= vigra
DISTVERSION= 1.11.0
PORTREVISION= 15
PORTREVISION= 16
CATEGORIES= graphics
PATCH_SITES= https://github.com/${GH_ACCOUNT}/${GH_PROJECT}/commit/

View file

@ -3,7 +3,7 @@
PORTNAME= vips
PORTVERSION= 8.4.5
PORTREVISION= 4
PORTREVISION= 5
CATEGORIES= graphics
MASTER_SITES= http://www.vips.ecs.soton.ac.uk/supported/${PORTVERSION:R}/

View file

@ -3,7 +3,7 @@
PORTNAME= gwyddion
PORTVERSION= 2.45
PORTREVISION= 2
PORTREVISION= 3
CATEGORIES= science graphics
MASTER_SITES= SF

View file

@ -2,7 +2,7 @@
PORTNAME= kde-runtime
PORTVERSION= ${KDE_APPLICATIONS_VERSION}
PORTREVISION= 5
PORTREVISION= 6
CATEGORIES= x11 kde kde-applications
MAINTAINER= kde@FreeBSD.org

View file

@ -3,7 +3,7 @@
PORTNAME= kdelibs
PORTVERSION= ${KDE4_KDELIBS_VERSION}
PORTREVISION= 5
PORTREVISION= 6
CATEGORIES= x11 kde kde-applications
MAINTAINER= kde@FreeBSD.org