[gentoo-commits] repo/gentoo:master commit in: www-apps/piwigo/files/, www-apps/piwigo/
commit: c148419da5e4cf8c35bf706edbedbb45e17035ec
Author: Bernard Cafarelli gentoo org>
AuthorDate: Mon Dec 1 15:24:05 2025 +
Commit: Bernard Cafarelli gentoo org>
CommitDate: Tue Dec 2 14:13:14 2025 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c148419d
www-apps/piwigo: add 16.0.0
Signed-off-by: Bernard Cafarelli gentoo.org>
www-apps/piwigo/Manifest | 1 +
.../piwigo/files/piwigo-16.0.0-imagemagick.patch | 28 ++
www-apps/piwigo/piwigo-16.0.0.ebuild | 44 ++
3 files changed, 73 insertions(+)
diff --git a/www-apps/piwigo/Manifest b/www-apps/piwigo/Manifest
index a0a0bde84ac8..126ef2c90e47 100644
--- a/www-apps/piwigo/Manifest
+++ b/www-apps/piwigo/Manifest
@@ -1,2 +1,3 @@
DIST piwigo-15.6.0.zip 18698794 BLAKE2B
9f9000ac9d13b7d512aada0a9f3a9b0c123905805d3e3d89e3d644c164fc0678f638ba6e5ed1e3b7c8f8a30c815d00154545f746a4b452974cf4b5a6b29e3993
SHA512
bb26d62f373217f6087f54166046884a7ed766146e9fa8dcb65ea05920b3c395bcdc6070eb0e9616c3137f8e9002b9854784239d5082807fcdc82cabb8ccf309
DIST piwigo-15.7.0.zip 18747448 BLAKE2B
bd833d40ce1d5c8bfc49baee576a13db4aff1958c2603ca1196b0fb14d0608a48909733044b2f930016cd62cd60a1f887e5609baf9bc5fdc9bea45b90f898f9b
SHA512
8ec25812076d658d1e946afcaa1716208a43d521939d1eb899d21bc55b33a9d12fd9e90676aece1adc027a1a1ee01f944ddb4328a6f1c1d650ace1f734ee6841
+DIST piwigo-16.0.0.zip 19411149 BLAKE2B
a90dbdb3764a624ecbe1474e3d305ac653dfdc4fb4e09af4f62c9c0cc1a148e29d3a1ff718382878ef27c26d77b0ddebf2fa9b3ea7d245470b3a39966f2a618e
SHA512
74c1ffcbadf14d349125faaefcebfd27f2c84ba7e0713da1b93a92c6a627280224d9b8813e98cc0d6faff0a15bd84b4d48664c1b7b85245fe2223bec6ebb579e
diff --git a/www-apps/piwigo/files/piwigo-16.0.0-imagemagick.patch
b/www-apps/piwigo/files/piwigo-16.0.0-imagemagick.patch
new file mode 100644
index ..5d61fedc06e7
--- /dev/null
+++ b/www-apps/piwigo/files/piwigo-16.0.0-imagemagick.patch
@@ -0,0 +1,28 @@
+From 66f0ef574d2aac24b4a4b969f2df71003a2c2a8a Mon Sep 17 00:00:00 2001
+From: plegall
+Date: Mon, 1 Dec 2025 15:07:40 +0100
+Subject: [PATCH] fixes #2462 magick Vs convert: return only command name, not
+ full path
+
+---
+ admin/include/image.class.php | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/admin/include/image.class.php b/admin/include/image.class.php
+index 2b1119e3f5..67718acf2c 100644
+--- a/admin/include/image.class.php
b/admin/include/image.class.php
+@@ -380,11 +380,11 @@ static function get_ext_imagick_command()
+ exec('command -v '.$conf['ext_imagick_dir'].'magick', $cmd_out ,
$retval );
+ if (0 == $retval)
+ {
+-$page['ext_imagick_command'] = $cmd_out[0];
++$page['ext_imagick_command'] = 'magick';
+ }
+ else
+ {
+-$page['ext_imagick_command'] = $conf['ext_imagick_dir'].'convert';
++$page['ext_imagick_command'] = 'convert';
+ }
+ }
+
diff --git a/www-apps/piwigo/piwigo-16.0.0.ebuild
b/www-apps/piwigo/piwigo-16.0.0.ebuild
new file mode 100644
index ..88f40f56be2d
--- /dev/null
+++ b/www-apps/piwigo/piwigo-16.0.0.ebuild
@@ -0,0 +1,44 @@
+# Copyright 1999-2025 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+inherit webapp
+
+DESCRIPTION="a photo gallery software for the web"
+HOMEPAGE="http://piwigo.org/";
+SRC_URI="http://piwigo.org/download/dlcounter.php?code=${PV} -> ${P}.zip"
+S=${WORKDIR}/${PN}
+
+LICENSE="GPL-2"
+KEYWORDS="~amd64 ~x86"
+IUSE="+exif +gd imagemagick"
+
+RDEPEND="
+ imagemagick? ( virtual/imagemagick-tools )
+ dev-lang/php[ctype,exif?,gd?,filter,iconv,json(+),mysqli]
+ >=virtual/mysql-5.0
+ virtual/httpd-php"
+BDEPEND="app-arch/unzip"
+
+REQUIRED_USE="|| ( gd imagemagick )"
+
+PATCHES=( "${FILESDIR}"/${P}-imagemagick.patch )
+
+src_install() {
+ webapp_src_preinst
+
+ insinto "${MY_HTDOCSDIR}"
+ doins -r .
+
+ # Local configuration, and parts that can be updated
+ webapp_serverowned "${MY_HTDOCSDIR}"/_data
+ webapp_serverowned -R "${MY_HTDOCSDIR}"/galleries
+ webapp_serverowned -R "${MY_HTDOCSDIR}"/language
+ webapp_serverowned -R "${MY_HTDOCSDIR}"/local
+ webapp_serverowned -R "${MY_HTDOCSDIR}"/plugins
+ webapp_serverowned -R "${MY_HTDOCSDIR}"/template-extension
+ webapp_serverowned -R "${MY_HTDOCSDIR}"/themes
+ webapp_serverowned "${MY_HTDOCSDIR}"/upload
+
+ webapp_src_install
+}
[gentoo-commits] repo/gentoo:master commit in: www-apps/piwigo/files/, www-apps/piwigo/
commit: 2b46d37e6fd1b061384d4fe6ad46ac54afd0a775
Author: Bernard Cafarelli gentoo org>
AuthorDate: Sat Feb 29 20:53:46 2020 +
Commit: Bernard Cafarelli gentoo org>
CommitDate: Sat Feb 29 20:53:46 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=2b46d37e
www-apps/piwigo: backport fix for CVE-2020-8089
Drop old vulnerable version
Also backport some PHP 7.4 compatibility fixes
Bug: https://bugs.gentoo.org/709324
Package-Manager: Portage-2.3.89, Repoman-2.3.20
Signed-off-by: Bernard Cafarelli gentoo.org>
www-apps/piwigo/files/piwigo-2.10.1-css_vuln.patch | 94 ++
.../files/piwigo-2.10.1-php7.4_deprecation.patch | 56 +
.../piwigo/files/piwigo-2.10.1-php7.4_notice.patch | 41 ++
...iwigo-2.10.1.ebuild => piwigo-2.10.1-r1.ebuild} | 7 +-
4 files changed, 197 insertions(+), 1 deletion(-)
diff --git a/www-apps/piwigo/files/piwigo-2.10.1-css_vuln.patch
b/www-apps/piwigo/files/piwigo-2.10.1-css_vuln.patch
new file mode 100644
index 000..101777393cf
--- /dev/null
+++ b/www-apps/piwigo/files/piwigo-2.10.1-css_vuln.patch
@@ -0,0 +1,94 @@
+From 619849ff8b39f536e9ce40687c07589f8b262278 Mon Sep 17 00:00:00 2001
+From: plegall
+Date: Fri, 7 Feb 2020 17:05:56 +0100
+Subject: [PATCH] fixes #1150 prevent HTML code in group name
+
+It avoids any stored XSS between administrators and it's totally useless to
have HTML code in the group name.
+---
+ admin/group_list.php | 14 +-
+ admin/themes/default/template/group_list.tpl | 8 +++-
+ 2 files changed, 16 insertions(+), 6 deletions(-)
+
+diff --git a/admin/group_list.php b/admin/group_list.php
+index ba9c89fef..7e7a3bd9f 100644
+--- a/admin/group_list.php
b/admin/group_list.php
+@@ -45,6 +45,11 @@
+ {
+ $page['errors'][] = l10n('The name of a group must not contain " or \' or
be empty.');
+ }
++ else
++ {
++$_POST['groupname'] = strip_tags($_POST['groupname']);
++ }
++
+ if (count($page['errors']) == 0)
+ {
+ // is the group not already existing ?
+@@ -107,7 +112,7 @@
+ $group_names = array_from_query($query, 'name');
+ foreach($groups as $group)
+ {
+- $_POST['rename_'.$group] = stripslashes($_POST['rename_'.$group]);
++ $_POST['rename_'.$group] =
strip_tags(stripslashes($_POST['rename_'.$group]));
+
+ if (in_array($_POST['rename_'.$group], $group_names))
+ {
+@@ -181,6 +186,8 @@
+
+ if ($action=="merge" and count($groups) > 1)
+ {
++$_POST['merge'] = strip_tags($_POST['merge']);
++
+ // is the group not already existing ?
+ $query = '
+ SELECT COUNT(*)
+@@ -268,6 +275,11 @@
+ {
+ break;
+ }
++ else
++ {
++$_POST['duplicate_'.$group.''] =
strip_tags(stripslashes($_POST['duplicate_'.$group.'']));
++ }
++
+ // is the group not already existing ?
+ $query = '
+ SELECT COUNT(*)
+diff --git a/admin/themes/default/template/group_list.tpl
b/admin/themes/default/template/group_list.tpl
+index b14ff1725..6f0291f3c 100644
+--- a/admin/themes/default/template/group_list.tpl
b/admin/themes/default/template/group_list.tpl
+@@ -128,7 +128,7 @@ $(document).ready(function() {
+ {if not empty($groups)}
+ {foreach from=$groups item=group}
+
+-
++
+
+ {/foreach}
+ {/if}
+@@ -137,9 +137,8 @@ $(document).ready(function() {
+
+
+ {'Please select at least two
groups'|@translate}
+- {assign var='mergeDefaultValue' value='Type here the name of the
new group'|@translate}
+
+-
++
+
+
+
+@@ -150,11 +149,10 @@ $(document).ready(function() {
+
+
+
+-{assign var='duplicateDefaultValue' value='Type here the name of the
new group'|@translate}
+ {if not empty($groups)}
+ {foreach from=$groups item=group}
+
+- {$group.NAME} >
++ {$group.NAME} >
+
+ {/foreach}
+ {/if}
diff --git a/www-apps/piwigo/files/piwigo-2.10.1-php7.4_deprecation.patch
b/www-apps/piwigo/files/piwigo-2.10.1-php7.4_deprecation.patch
new file mode 100644
index 000..45d57279950
--- /dev/null
+++ b/www-apps/piwigo/files/piwigo-2.10.1-php7.4_deprecation.patch
@@ -0,0 +1,56 @@
+From 6f49712b57a4cbe362c0f3d3a1e67267d298fe8b Mon Sep 17 00:00:00 2001
+From: Tomas Krizek
+Date: Tue, 3 Dec 2019 21:56:44 +0100
+Subject: [PATCH] include/functions_cookie: use proper brackets for offset
+ access
+
+Fixes #1134
+---
+ admin/site_update.php| 6 +++---
+ include/functions_cookie.inc.php | 2 +-
+ 2 files changed, 4 insertions(+), 4 deletions(-)
+
+diff --git a/admin/site_update.php b/admin/site_update.php
+index 791a8d59e..e8fc78093 100644
+--- a/admin/site_update.php
b/admin/site_update.php
+@@ -257,7 +257,7 @@
+ else
+ {
+ $insert['uppercats'] = $insert['id'];
+-
