gnu: LibRaw: Update to 0.20.0 [fixes CVE-2020-15503].

* gnu/packages/photo.scm (libraw): Update to 0.20.0.
* gnu/packages/image.scm (freeimage)[source](patches): Add LibRaw
compatibility patch.
This commit is contained in:
Marius Bakke 2020-07-24 00:40:37 +02:00
parent e85d7ed609
commit 271f278640
No known key found for this signature in database
GPG key ID: A2A06DF2A33A54FA
2 changed files with 15 additions and 3 deletions

View file

@ -1030,7 +1030,19 @@ (define-public freeimage
(delete-file-recursively (string-append "Source/" dir)))
'("LibJPEG" "LibOpenJPEG" "LibPNG" "LibRawLite"
"LibJXR" "LibWebP" "OpenEXR" "ZLib"))))
(patches (search-patches "freeimage-unbundle.patch"))))
(patches
(append
(search-patches "freeimage-unbundle.patch")
;; Take one patch from Arch Linux that adds LibRaw 0.20 compatibility.
(list (origin
(method url-fetch)
(uri "https://raw.githubusercontent.com/archlinux\
/svntogit-community/ca3e6a52f5a46dec87cbf85e9d84fe370e282c8c/trunk\
/freeimage-libraw-0.20.patch")
(file-name "freeimage-libraw-compat.patch")
(sha256
(base32
"0cwjxjz0f4gs6igvwqg0p99mnrsrwzkal1l2n08yvz2xq9s5khki"))))))))
(build-system gnu-build-system)
(arguments
'(#:phases

View file

@ -173,14 +173,14 @@ (define-public rapid-photo-downloader
(define-public libraw
(package
(name "libraw")
(version "0.19.5")
(version "0.20.0")
(source (origin
(method url-fetch)
(uri (string-append "https://www.libraw.org/data/LibRaw-"
version ".tar.gz"))
(sha256
(base32
"1x827sh6vl8j3ll2ihkcr234y07f31hi1v7sl08jfw3irkbn58j0"))))
"18wlsvj6c1rv036ph3695kknpgzc3lk2ikgshy8417yfl8ykh2hz"))))
(build-system gnu-build-system)
(native-inputs
`(("pkg-config" ,pkg-config)))