more security patching

(Portage version: 2.1.2.3)

4 files changed, 95 insertions, 4 deletions

diff --git a/media-libs/freetype/ChangeLog b/media-libs/freetype/ChangeLog
index 9e65f799b855..c84a13af1934 100644
--- a/media-libs/freetype/ChangeLog
+++ b/media-libs/freetype/ChangeLog
@@ -1,11 +1,11 @@
 # ChangeLog for media-libs/freetype
 # Copyright 1999-2007 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/media-libs/freetype/ChangeLog,v 1.113 2007/04/04 13:51:04 foser Exp $
+# $Header: /var/cvsroot/gentoo-x86/media-libs/freetype/ChangeLog,v 1.114 2007/04/04 14:23:26 foser Exp $
 
 *freetype-2.3.2-r3 (04 Apr 2007)
 
   04 Apr 2007; Marinus Schraal <foser@gentoo.org> freetype-2.3.2-r3.ebuild,
-  files/freetype-2.3.2-bdflib.patch :
+  freetype-2.1.10-r3.ebuild, files/freetype-2.3.2-bdflib.patch :
   Fix for CVE-2007-1351 (#172577)
 
   01 Apr 2007; Ryan Hill <dirtyepic@gentoo.org> freetype-2.1.9-r1.ebuild:
diff --git a/media-libs/freetype/files/digest-freetype-2.1.10-r3 b/media-libs/freetype/files/digest-freetype-2.1.10-r3
new file mode 100644
index 000000000000..cd91f56c10ab
--- /dev/null
+++ b/media-libs/freetype/files/digest-freetype-2.1.10-r3
@@ -0,0 +1,9 @@
+MD5 8c5f24790e1e8b0b2710e633c150b650 freetype-2.1.10-security_batch-r1.patch.bz2 10300
+RMD160 3994ed6bd5fc3c1e09467267a00ae0166f180fc5 freetype-2.1.10-security_batch-r1.patch.bz2 10300
+SHA256 d1d31feb556c21a51a08451b14eccb697cf18979e2d24d4412ec47fa1597b296 freetype-2.1.10-security_batch-r1.patch.bz2 10300
+MD5 a4012e7d1f6400df44a16743b11b8423 freetype-2.1.10.tar.bz2 1037107
+RMD160 3d31d548632f14784283c97ece64c7425efc3975 freetype-2.1.10.tar.bz2 1037107
+SHA256 fed2ed148d7d105b95493c5e95561c8b05ee7909e00f828f036d8ed1be6a5e53 freetype-2.1.10.tar.bz2 1037107
+MD5 10608a55ee9ee12e29ba3d705318e61d freetype-doc-2.1.10.tar.bz2 163725
+RMD160 fef03cfdf83c8980a8b16fe7a2b9bb139f6f62a9 freetype-doc-2.1.10.tar.bz2 163725
+SHA256 2bfdca5fd7bb44fe80c41b12998dc044418038e69c828b0e2c31d79d72d1117c freetype-doc-2.1.10.tar.bz2 163725
diff --git a/media-libs/freetype/freetype-2.1.10-r3.ebuild b/media-libs/freetype/freetype-2.1.10-r3.ebuild
new file mode 100644
index 000000000000..507493a33922
--- /dev/null
+++ b/media-libs/freetype/freetype-2.1.10-r3.ebuild
@@ -0,0 +1,82 @@
+# Copyright 1999-2007 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/media-libs/freetype/freetype-2.1.10-r3.ebuild,v 1.1 2007/04/04 14:23:26 foser Exp $
+
+inherit eutils flag-o-matic libtool
+
+DESCRIPTION="A high-quality and portable font engine"
+HOMEPAGE="http://www.freetype.org/"
+SRC_URI="mirror://sourceforge/freetype/${P/_/}.tar.bz2
+	mirror://gentoo/freetype-2.1.10-security_batch-r1.patch.bz2
+	doc? ( mirror://sourceforge/${PN}/${PN}-doc-${PV}.tar.bz2 )"
+
+LICENSE="FTL GPL-2"
+SLOT="2"
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~x86-fbsd"
+IUSE="zlib bindist doc"
+
+# The RDEPEND below makes sure that if there is a version of moz/ff/tb
+# installed, then it will have the freetype-2.1.8+ binary compatibility patch.
+# Otherwise updating freetype will cause moz/ff/tb crashes.  #59849
+# 20 Nov 2004 agriffis
+DEPEND="zlib? ( sys-libs/zlib )"
+
+RDEPEND="${DEPEND}
+	!<www-client/mozilla-1.7.3-r3
+	!<www-client/mozilla-firefox-1.0-r3
+	!<mail-client/mozilla-thunderbird-0.9-r3
+	!<media-libs/libwmf-0.2.8.2"
+
+src_unpack() {
+
+	unpack ${A}
+
+	# fix internal header cast which gets used by pango (bad)
+	epatch ${FILESDIR}/${P}-internal_header.patch
+	# fix bunch of overflows etc. (#124828)
+	epatch ${WORKDIR}/${P}-security_batch-r1.patch
+	# revert pointer
+	epatch ${FILESDIR}/${P}-revert_pointer.patch
+	# fix artificial bold bug (#127872)
+	cd ${S}/src/base
+	epatch ${FILESDIR}/${P}-fix_synth.patch
+	# fix CVE-2007-1351 (#172577)
+	cd ${S}
+	epatch "${FILESDIR}/${PN}-2.3.2-bdflib.patch"
+
+	elibtoolize
+	epunt_cxx
+
+}
+
+src_compile() {
+
+	# https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=118021
+	append-flags "-fno-strict-aliasing"
+
+	use bindist || append-flags -DTT_CONFIG_OPTION_BYTECODE_INTERPRETER
+
+	# Fix missing symbols in fontconfig in some circumstances
+	append-flags -DFT_CONFIG_OPTION_OLD_INTERNALS
+
+	make setup CFG="--host=${CHOST} --prefix=/usr $(use_with zlib) --libdir=/usr/$(get_libdir)" unix || die
+
+	emake || die "make failed"
+
+	if use doc ; then
+		emake refdoc || die "refdoc failed"
+	fi
+
+}
+
+src_install() {
+
+	make DESTDIR="${D}" install || die
+
+	dodoc ChangeLog README
+	dodoc docs/{CHANGES,CUSTOMIZE,DEBUG,*.txt,PATENTS,TODO}
+
+	cd ${WORKDIR}/${PN}-doc-${PV}
+	use doc && dohtml -r docs/*
+
+}
diff --git a/media-libs/freetype/freetype-2.3.2-r3.ebuild b/media-libs/freetype/freetype-2.3.2-r3.ebuild
index 3a31ebfe25c8..cd0ec65bb1d9 100644
--- a/media-libs/freetype/freetype-2.3.2-r3.ebuild
+++ b/media-libs/freetype/freetype-2.3.2-r3.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2007 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/media-libs/freetype/freetype-2.3.2-r3.ebuild,v 1.1 2007/04/04 13:51:04 foser Exp $
+# $Header: /var/cvsroot/gentoo-x86/media-libs/freetype/freetype-2.3.2-r3.ebuild,v 1.2 2007/04/04 14:23:26 foser Exp $
 
 inherit eutils flag-o-matic libtool
 
@@ -66,7 +66,7 @@ src_unpack() {
 	# 2.3.2 only - bug #170532
 	epatch "${FILESDIR}"/${P}-truetype-regression.patch
 
-	# sec vuln
+	# fix CVE-2007-1351 (#172577)
 	epatch "${FILESDIR}"/${P}-bdflib.patch
 
 	sed -i -e "s:\.\.\/freetype2$:../freetype-${PV}:" ../ft2demos-${PV}/Makefile