* gnu/packages/patches/gd-CVE-2016-8670.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/gd.scm (gd)[source]: Use it.
		
			
				
	
	
		
			153 lines
		
	
	
	
		
			6.2 KiB
		
	
	
	
		
			Scheme
		
	
	
	
	
	
			
		
		
	
	
			153 lines
		
	
	
	
		
			6.2 KiB
		
	
	
	
		
			Scheme
		
	
	
	
	
	
;;; GNU Guix --- Functional package management for GNU
 | 
						|
;;; Copyright © 2013, 2016 Ludovic Courtès <ludo@gnu.org>
 | 
						|
;;; Copyright © 2015, 2016 Mark H Weaver <mhw@netris.org>
 | 
						|
;;; Copyright © 2015 Eric Bavier <bavier@member.fsf.org>
 | 
						|
;;; Copyright © 2016 Leo Famulari <leo@famulari.name>
 | 
						|
;;;
 | 
						|
;;; This file is part of GNU Guix.
 | 
						|
;;;
 | 
						|
;;; GNU Guix is free software; you can redistribute it and/or modify it
 | 
						|
;;; under the terms of the GNU General Public License as published by
 | 
						|
;;; the Free Software Foundation; either version 3 of the License, or (at
 | 
						|
;;; your option) any later version.
 | 
						|
;;;
 | 
						|
;;; GNU Guix is distributed in the hope that it will be useful, but
 | 
						|
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
 | 
						|
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | 
						|
;;; GNU General Public License for more details.
 | 
						|
;;;
 | 
						|
;;; You should have received a copy of the GNU General Public License
 | 
						|
;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.
 | 
						|
 | 
						|
(define-module (gnu packages gd)
 | 
						|
  #:use-module (guix packages)
 | 
						|
  #:use-module (guix build-system gnu)
 | 
						|
  #:use-module (guix build-system perl)
 | 
						|
  #:use-module (guix download)
 | 
						|
  #:use-module (gnu packages)
 | 
						|
  #:use-module (gnu packages perl)
 | 
						|
  #:use-module (gnu packages image)
 | 
						|
  #:use-module (gnu packages imagemagick)
 | 
						|
  #:use-module (gnu packages fontutils)
 | 
						|
  #:use-module (gnu packages compression)
 | 
						|
  #:use-module (gnu packages pkg-config)
 | 
						|
  #:use-module ((guix licenses) #:select (non-copyleft)))
 | 
						|
 | 
						|
(define-public gd
 | 
						|
  (package
 | 
						|
    (name "gd")
 | 
						|
 | 
						|
    ;; Note: With libgd.org now pointing to github.com, genuine old
 | 
						|
    ;; tarballs are no longer available.  Notably, versions 2.0.x are
 | 
						|
    ;; missing.
 | 
						|
    (version "2.2.3")
 | 
						|
 | 
						|
    (source (origin
 | 
						|
             (method url-fetch)
 | 
						|
             (uri (string-append
 | 
						|
                   "https://github.com/libgd/libgd/releases/download/gd-"
 | 
						|
                   version "/libgd-" version ".tar.xz"))
 | 
						|
             (sha256
 | 
						|
              (base32
 | 
						|
               "0g3xz8jpz1pl2zzmssglrpa9nxiaa7rmcmvgpbrjz8k9cyynqsvl"))
 | 
						|
             (patches (search-patches "gd-CVE-2016-7568.patch"
 | 
						|
                                      "gd-CVE-2016-8670.patch"
 | 
						|
                                      "gd-fix-gd2-read-test.patch"
 | 
						|
                                      "gd-fix-tests-on-i686.patch"))))
 | 
						|
    (build-system gnu-build-system)
 | 
						|
    (native-inputs
 | 
						|
     `(("pkg-config" ,pkg-config)))
 | 
						|
    (inputs
 | 
						|
     `(("freetype" ,freetype)
 | 
						|
       ("libpng" ,libpng)
 | 
						|
       ("zlib" ,zlib)))
 | 
						|
    (propagated-inputs
 | 
						|
     `(("fontconfig" ,fontconfig)
 | 
						|
       ("libjpeg" ,libjpeg)))
 | 
						|
    (home-page "http://www.libgd.org/")
 | 
						|
    (synopsis "Library for the dynamic creation of images by programmers")
 | 
						|
    (description
 | 
						|
     "GD is a library for the dynamic creation of images by programmers.  GD
 | 
						|
is written in C, and \"wrappers\" are available for Perl, PHP and other
 | 
						|
languages.  GD creates PNG, JPEG, GIF, WebP, XPM, BMP images, among other
 | 
						|
formats.  GD is commonly used to generate charts, graphics, thumbnails, and
 | 
						|
most anything else, on the fly.  While not restricted to use on the web, the
 | 
						|
most common applications of GD involve website development.")
 | 
						|
    (license (non-copyleft "file://COPYING"
 | 
						|
                           "See COPYING file in the distribution."))
 | 
						|
    (properties '((cpe-name . "libgd")))))
 | 
						|
 | 
						|
(define-public perl-gd
 | 
						|
  (package
 | 
						|
    (name "perl-gd")
 | 
						|
    (version "2.56")
 | 
						|
    (source
 | 
						|
     (origin
 | 
						|
       (method url-fetch)
 | 
						|
       (uri (string-append "mirror://cpan/authors/id/L/LD/LDS/"
 | 
						|
                           "GD-" version ".tar.gz"))
 | 
						|
       (sha256
 | 
						|
        (base32
 | 
						|
         "1ya8f9hpiax8j29vwaiwlvvgah0vkyvpzva28r8231nyk0f3s40z"))
 | 
						|
       (patches (search-patches
 | 
						|
                 "perl-gd-options-passthrough-and-fontconfig.patch"))))
 | 
						|
    (build-system perl-build-system)
 | 
						|
    (native-inputs
 | 
						|
     `(("perl-module-build" ,perl-module-build))) ;needs Module::Build >= 0.42
 | 
						|
    (inputs
 | 
						|
     `(("gd" ,gd)
 | 
						|
       ("zlib" ,zlib)
 | 
						|
       ("png" ,libpng)
 | 
						|
       ("ft" ,freetype)
 | 
						|
       ("jpeg" ,libjpeg)
 | 
						|
       ("fontconfig" ,fontconfig)))
 | 
						|
    (arguments
 | 
						|
     ;; We must use Build.PL for building because Makefile.PL fails to build
 | 
						|
     ;; the XS source.
 | 
						|
     `(#:module-build-flags (map (lambda (i)
 | 
						|
                                   (string-append "--lib_" i "_path="
 | 
						|
                                                  (assoc-ref %build-inputs i)))
 | 
						|
                                 '("zlib" "png" "ft" "jpeg" "fontconfig"))
 | 
						|
       #:tests? #f ;; Failed 1/2 test programs. 1/12 subtests failed.
 | 
						|
       #:phases (alist-cons-after
 | 
						|
                 'configure 'clear-autogenerated-files
 | 
						|
                 (lambda _
 | 
						|
                   ;; This file is autogenerated by its .PLS script at build
 | 
						|
                   ;; time, but file creation fails because that file already
 | 
						|
                   ;; exists in the distribution with non-writable
 | 
						|
                   ;; permissions, so delete it first.
 | 
						|
                   (delete-file "bdf_scripts/bdf2gdfont.pl"))
 | 
						|
                 %standard-phases)))
 | 
						|
    (home-page "http://search.cpan.org/dist/GD")
 | 
						|
    (synopsis "Perl interface to the GD graphics library")
 | 
						|
    (description "GD.pm is an autoloadable interface module for libgd, a
 | 
						|
popular library for creating and manipulating PNG files.  With this library
 | 
						|
you can create PNG images on the fly or modify existing files.")
 | 
						|
    (license (package-license perl))))
 | 
						|
 | 
						|
(define-public perl-gd-securityimage
 | 
						|
  (package
 | 
						|
    (name "perl-gd-securityimage")
 | 
						|
    (version "1.73")
 | 
						|
    (source
 | 
						|
     (origin
 | 
						|
       (method url-fetch)
 | 
						|
       (uri (string-append "mirror://cpan/authors/id/B/BU/BURAK/"
 | 
						|
                           "GD-SecurityImage-" version ".tar.gz"))
 | 
						|
       (sha256
 | 
						|
        (base32
 | 
						|
         "1kaxs67rfd4w46lxgcg3pa05a596l0h1k8n4zk2gwrrar4022wpx"))))
 | 
						|
    (build-system perl-build-system)
 | 
						|
    (native-inputs
 | 
						|
     `(("perl-module-build" ,perl-module-build)))
 | 
						|
    (propagated-inputs
 | 
						|
     `(("perl-gd" ,perl-gd)
 | 
						|
       ("perl-image-magick" ,perl-image-magick)))
 | 
						|
    (home-page "http://search.cpan.org/dist/GD-SecurityImage")
 | 
						|
    (synopsis "Security image generator")
 | 
						|
    (description "This module provides a basic interface to create
 | 
						|
security (captcha) images.  The final output is the actual graphic data, the
 | 
						|
mime type of the graphic, and the created random string.  The module also has
 | 
						|
some \"styles\" that are used to create the background (or foreground) of the
 | 
						|
image.")
 | 
						|
    (license (package-license perl))))
 |