Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 369599 - media-gfx/blender-2.60a version bump
Summary: media-gfx/blender-2.60a version bump
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Luca Barbato
URL:
Whiteboard:
Keywords:
: 372787 373517 382097 (view as bug list)
Depends on:
Blocks:
 
Reported: 2011-06-01 07:39 UTC by Mike Limansky
Modified: 2012-01-23 18:33 UTC (History)
20 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
blender-2.58-bmake.patch (blender-2.58-bmake.patch,424 bytes, patch)
2011-07-29 09:58 UTC, Francesco Proietti
Details | Diff
blender-2.58-doxyfile.patch (blender-2.58-doxyfile.patch,595 bytes, patch)
2011-07-29 09:59 UTC, Francesco Proietti
Details | Diff
blender-2.58-eigen.patch (blender-2.58-eigen.patch,945 bytes, patch)
2011-07-29 09:59 UTC, Francesco Proietti
Details | Diff
blender-2.58-ffmpeg.patch (blender-2.58-ffmpeg.patch,2.30 KB, patch)
2011-07-29 09:59 UTC, Francesco Proietti
Details | Diff
blender-2.58-glew.patch (blender-2.58-glew.patch,502 bytes, patch)
2011-07-29 10:00 UTC, Francesco Proietti
Details | Diff
blender-desktop.patch (blender-desktop.patch,639 bytes, patch)
2011-07-29 10:01 UTC, Francesco Proietti
Details | Diff
blender-2.58a-r2.ebuild (blender-2.58a-r2.ebuild,11.65 KB, text/plain)
2011-07-29 10:03 UTC, Francesco Proietti
Details
blender-desktop.patch (blender-desktop.patch,641 bytes, patch)
2011-08-11 10:03 UTC, Matteo Azzali
Details | Diff
blender-2.60a-CVE-2009-3850-v3.patch (blender-2.60a-CVE-2009-3850-v3.patch,7.60 KB, patch)
2011-11-09 23:19 UTC, Anthoine Bourgeois
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Mike Limansky 2011-06-01 07:39:02 UTC
From the blender announcements news feed:

# Blender 2.57b update release
April 27, 2011

Best testing only happens after a real release! With nearly 100 great fixes in the code, we've released another update for 2.57 today.


Reproducible: Always
Comment 1 Mike Limansky 2011-06-22 21:27:07 UTC
Blender 2.58 was released on 22th of June.

Changes http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/changelog_258
Comment 2 tman 2011-06-24 20:24:22 UTC
*** Bug 372787 has been marked as a duplicate of this bug. ***
Comment 3 Agostino Sarubbo gentoo-dev 2011-06-30 09:07:10 UTC
*** Bug 373517 has been marked as a duplicate of this bug. ***
Comment 4 Mike Limansky 2011-07-05 15:38:17 UTC
Blender 2.58a released on 04 of July.

http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/changelog_258a
Comment 5 Francesco Proietti 2011-07-29 09:58:44 UTC
Created attachment 281415 [details, diff]
blender-2.58-bmake.patch
Comment 6 Francesco Proietti 2011-07-29 09:59:13 UTC
Created attachment 281417 [details, diff]
blender-2.58-doxyfile.patch
Comment 7 Francesco Proietti 2011-07-29 09:59:32 UTC
Created attachment 281419 [details, diff]
blender-2.58-eigen.patch
Comment 8 Francesco Proietti 2011-07-29 09:59:50 UTC
Created attachment 281421 [details, diff]
blender-2.58-ffmpeg.patch
Comment 9 Francesco Proietti 2011-07-29 10:00:42 UTC
Created attachment 281423 [details, diff]
blender-2.58-glew.patch
Comment 10 Francesco Proietti 2011-07-29 10:01:13 UTC
Created attachment 281427 [details, diff]
blender-desktop.patch
Comment 11 Francesco Proietti 2011-07-29 10:03:54 UTC
Created attachment 281429 [details]
blender-2.58a-r2.ebuild
Comment 12 Francesco Proietti 2011-07-29 10:06:44 UTC
New ebuild and patches for Blender 2.58a, based on 2.57 by Oicraman as reported on http://forums.gentoo.org/viewtopic-p-6761980.html. All credits to him.
Tested on ~amd64, it seems to work well.
Comment 13 Hector Martin 2011-08-03 14:50:38 UTC
I can confirm that the attached ebuild and patchset works, though with some QA notices:

 * QA Notice: The 'useq' function is deprecated (replaced by 'use')
 * QA Notice: USE Flag 'collada' not in IUSE for media-gfx/blender-2.58a-r2
Comment 14 Matteo Azzali 2011-08-11 10:03:59 UTC
Created attachment 282901 [details, diff]
blender-desktop.patch

That blender-desktop.patch didn't worked, blender executable is now blender-2.58
and russian name seems incorrect. Here's mine version, working here.

However still:

 * QA Notice: file does not exist:
 * 
 *      doexe: /var/tmp/portage/media-gfx/blender-2.58a-r2/work/blender-2.58a/release/plugins/texture/*.so does not exist
 *      doexe: /var/tmp/portage/media-gfx/blender-2.58a-r2/work/blender-2.58a/release/plugins/sequence/*.so does not exist
 *      doins: /var/tmp/portage/media-gfx/blender-2.58a-r2/work/blender-2.58a/release/plugins/include/*.h does not exist
Comment 15 Dennis Schridde 2011-08-13 17:33:07 UTC
Version 2.59 was released today.
Comment 16 Anton Kochkov 2011-08-26 13:12:07 UTC
(In reply to comment #15)
> Version 2.59 was released today.

http://www.blender.org/development/release-logs/blender-259/

Full changelog is here http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/changelog_259

Plese, update bug title too.
Comment 17 jannis 2011-09-18 21:08:51 UTC
Request for blender-2.59 is here: https://bugs.gentoo.org/show_bug.cgi?id=382097
Comment 18 Sebastian Pipping gentoo-dev 2011-10-30 14:23:01 UTC
To bump blender to 2.58 (or later) someone needs to port the patch for security issue CVE-2009-3850 (blender-2.57-CVE-2009-3850-v2.patch) to the version to bump to. If it has to be me, it may delay until January 2012 -- no time.

If you want to help with this, you are welcome.  Be prepared to dig in Blender source code (in C) though as some involved logic upstream has change after Blender 2.57.
Comment 19 Samuli Suominen (RETIRED) gentoo-dev 2011-11-08 14:51:58 UTC
*** Bug 382097 has been marked as a duplicate of this bug. ***
Comment 20 Anthoine Bourgeois 2011-11-09 23:19:46 UTC
Created attachment 292075 [details, diff]
blender-2.60a-CVE-2009-3850-v3.patch

The blender-2.60a.ebuild with all patchs in my overlay:
git://git.overlays.gentoo.org/user/aluco.git

I keep a problem on the final link with libopenjpeg but it's a start.
Comment 21 Small_Penguin 2011-11-11 13:54:02 UTC
I've tried the ebuild from the overlay, but blender-2.60a does not build.

At first, I had to use >=media-video/ffmpeg-0.7 instead of media-video/libav (also see blender bug #28414, http://projects.blender.org/tracker/?func=detail&group_id=9&aid=28414&atid=498), otherwise compilation fails.

Finally installation fails with:
!!! doexe: /var/tmp/portage/media-gfx/blender-2.60a/work/blender-2.60a/release/plugins/texture/*.so does not exist
This is because the plugins have not been compiled, as clouds2.c and tiles.c reference "plugin.h" and "math.h" which are missing in that directory. There's a plugin.h in source/blender/blenpluginapi, but no math.h.
Comment 22 Anthoine Bourgeois 2011-11-11 16:32:23 UTC
(In reply to comment #20)
> The blender-2.60a.ebuild with all patchs in my overlay:
> git://git.overlays.gentoo.org/user/aluco.git
> 
> I keep a problem on the final link with libopenjpeg but it's a start.
The problem is fixed now.

Note that a new option "WITH_PYTHON_SECURITY" seems to do something similar to blender-2.57-CVE-2009-3850-v2.patch. Maybe we can create a less intrusive patch now. I'll look closely.

Now blender needs libspnav to enable 3DMOUSE feature. This library is in my overlay too.

I look more closely to continue to integrate blender in gentoo.
Comment 23 Bernd Buschinski 2011-11-12 14:42:48 UTC
the ebuild in the aluco overlay still causes problems for me


!!! Digest verification failed:
!!! /var/lib/layman/aluco/media-gfx/blender/files/blender-desktop.patch
!!! Reason: Filesize does not match recorded size
!!! Got: 641
!!! Expected: 640
Comment 24 Christoph Brill (egore) (RESIGNED) 2011-11-12 20:31:14 UTC
A few comments from diffing the 2.60 ebuild with the 2.57-r1 in portage tree:

1.) SLOT should stay at 2.5, it's just to make it distinct from 2.4 versions
2.) opencollada does not exist in portage and not in your overlay
3.) Depend on scons 2, 0.98 is gone from the tree
4.) escons in src_compile could use a die message like 2.57-r1 does

Next to that looks as good as 2.57-r1. Sadly 2.57-r1 also carries a lot of commented lines so I cannot tell what stuff you commented out and what stuff was commented out.

I think Sebastian Pipping or Luca Barbato would need to comment on your ebuild.
Comment 25 Anthoine Bourgeois 2011-11-13 00:50:51 UTC
(In reply to comment #24)
> 1.) SLOT should stay at 2.5, it's just to make it distinct from 2.4 versions
The change of SLOT number is dictated by the ${WORK}/install/2.60 number. I follow this convention.

> 2.) opencollada does not exist in portage and not in your overlay
Yes, I removed it for now. Maybe on a -r1.

> 3.) Depend on scons 2, 0.98 is gone from the tree
Done.

> 4.) escons in src_compile could use a die message like 2.57-r1 does
Done.

> Next to that looks as good as 2.57-r1. Sadly 2.57-r1 also carries a lot of
> commented lines so I cannot tell what stuff you commented out and what stuff
> was commented out.
> 
> I think Sebastian Pipping or Luca Barbato would need to comment on your ebuild.

I'll be glad.
Comment 26 Luca Barbato gentoo-dev 2011-11-13 08:00:41 UTC
I finished hopefully messing with the legacy blender, so now I can have a look at adding a newer one in, I started looking at opencollada but seems they aren't doing source releases...
Comment 27 Sebastian Pipping gentoo-dev 2011-11-13 17:05:18 UTC
I'm a bit surprised to see version 2.60a added to the main tree while this bug is still open.

I'd be interested to hear what approach has been taken when porting the patch for CVE 2009-3850.  Also, is the patch in alpha, beta or release state from your point of view?
Comment 28 emerald 2011-11-13 17:16:27 UTC
libspnav is missing in portage and the dependency too, to blender 2.60a doesn't compile.
Comment 29 Hans Nieser 2011-11-13 17:36:01 UTC
(In reply to comment #28)
> libspnav is missing in portage and the dependency too, to blender 2.60a doesn't
> compile.

For what it's worth, I was able to take the live ebuild for libspnav from http://code.google.com/p/gentoo-vaca-overlay/source/browse/trunk/app-misc/libspnav/?r=171 and build blender-2.60a with it installed
Comment 30 Sebastian Pipping gentoo-dev 2011-11-13 17:45:57 UTC
(In reply to comment #28)
> libspnav is missing in portage and the dependency too, to blender 2.60a doesn't
> compile.

Thanks for reporting.  I have made a new bug #390427 for that.

Until it's fixed, I will package mask version 2.60a.
Comment 31 Anthoine Bourgeois 2011-11-13 20:46:12 UTC
(In reply to comment #27)
> I'm a bit surprised to see version 2.60a added to the main tree while this bug
> is still open.
> 
> I'd be interested to hear what approach has been taken when porting the patch
> for CVE 2009-3850.  Also, is the patch in alpha, beta or release state from
> your point of view?

I read the CVE-2009-3850 and I take the previous patch blender-2.57-CVE-2009-3850-v2.patch and understand how it fixes CVE.
I start to properly apply the old patch from scratch and discover that the option WITH_PYTHON_SECURITY seems to do something similar. I study this option and see that it doesn't fix enough the CVE. Then I continue to fix the CVE but keeping good things from the option and activate by default this option in my ebuild. I agree that the version 3 of the CVE patch may be need a good security audit but I code it with some understanding of the problem. In my opinion, we can qualify it as beta.
Comment 32 Samuli Suominen (RETIRED) gentoo-dev 2012-01-23 18:33:01 UTC
2.60a is in Portage, closing in favour of bug 394871