Tried to emerge tiff following the GLSA announcement but the ebuild appears to be missing the reference to a required patch. Reproducible: Always Steps to Reproduce: 1. emerge sync (as of 9:45 MST) 2. emerge tiff 3. Actual Results: These are the packages that I would merge, in order: Calculating dependencies ...done! [ebuild U ] media-libs/tiff-3.6.1-r2 [3.5.7-r1] -lzw-tiff 1,065 kB Total size of downloads: 1,065 kB storm sdenovan # emerge tiff Calculating dependencies ...done! >>> emerge (1 of 1) media-libs/tiff-3.6.1-r2 to / >>> Downloading ftp://gentoo.agsn.ca/distfiles/libtiff-lzw-compression-kit-1.5.tar.gz --09:45:07-- ftp://gentoo.agsn.ca/distfiles/libtiff-lzw-compression-kit-1.5.tar.gz => `/usr/portage/distfiles/libtiff-lzw-compression-kit-1.5.tar.gz' Resolving gentoo.agsn.ca... 206.75.217.205, 206.75.217.180, 206.75.217.181 Connecting to gentoo.agsn.ca[206.75.217.205]:21... connected. Logging in as anonymous ... Logged in! ==> SYST ... done. ==> PWD ... done. ==> TYPE I ... done. ==> CWD /distfiles ... done. ==> PASV ... done. ==> RETR libtiff-lzw-compression-kit-1.5.tar.gz ... done. Length: 9,646 (unauthoritative) 100%[==========================================================>] 9,646 --.--K/s 09:45:08 (474.27 KB/s) - `/usr/portage/distfiles/libtiff-lzw-compression-kit-1.5.tar.gz' saved [9646] >>> Downloading ftp://gentoo.agsn.ca/distfiles/tiff-v3.6.1.tar.gz --09:45:08-- ftp://gentoo.agsn.ca/distfiles/tiff-v3.6.1.tar.gz => `/usr/portage/distfiles/tiff-v3.6.1.tar.gz' Resolving gentoo.agsn.ca... 206.75.217.180, 206.75.217.181, 206.75.217.205 Connecting to gentoo.agsn.ca[206.75.217.180]:21... connected. Logging in as anonymous ... Logged in! ==> SYST ... done. ==> PWD ... done. ==> TYPE I ... done. ==> CWD /distfiles ... done. ==> PASV ... done. ==> RETR tiff-v3.6.1.tar.gz ... done. Length: 1,072,165 (unauthoritative) 100%[==========================================================>] 1,072,165 601.36K/s 09:45:11 (600.05 KB/s) - `/usr/portage/distfiles/tiff-v3.6.1.tar.gz' saved [1072165] >>> Downloading ftp://gentoo.agsn.ca/distfiles/libtiff-3.6.1-alt-bound.patch.bz2 --09:45:11-- ftp://gentoo.agsn.ca/distfiles/libtiff-3.6.1-alt-bound.patch.bz2 => `/usr/portage/distfiles/libtiff-3.6.1-alt-bound.patch.bz2' Resolving gentoo.agsn.ca... 206.75.217.181, 206.75.217.205, 206.75.217.180 Connecting to gentoo.agsn.ca[206.75.217.181]:21... connected. Logging in as anonymous ... Logged in! ==> SYST ... done. ==> PWD ... done. ==> TYPE I ... done. ==> CWD /distfiles ... done. ==> PASV ... done. ==> RETR libtiff-3.6.1-alt-bound.patch.bz2 ... done. Length: 8,557 (unauthoritative) 100%[==========================================================>] 8,557 --.--K/s 09:45:11 (218.30 KB/s) - `/usr/portage/distfiles/libtiff-3.6.1-alt-bound.patch.bz2' saved [8557] >>> Downloading ftp://gentoo.agsn.ca/distfiles/libtiff-3.6.1-chris-bound.patch.bz2 --09:45:11-- ftp://gentoo.agsn.ca/distfiles/libtiff-3.6.1-chris-bound.patch.bz2 => `/usr/portage/distfiles/libtiff-3.6.1-chris-bound.patch.bz2' Resolving gentoo.agsn.ca... 206.75.217.205, 206.75.217.180, 206.75.217.181 Connecting to gentoo.agsn.ca[206.75.217.205]:21... connected. Logging in as anonymous ... Logged in! ==> SYST ... done. ==> PWD ... done. ==> TYPE I ... done. ==> CWD /distfiles ... done. ==> PASV ... done. ==> RETR libtiff-3.6.1-chris-bound.patch.bz2 ... done. Length: 789 (unauthoritative) 100%[==========================================================>] 789 --.--K/s 09:45:12 (936.22 KB/s) - `/usr/portage/distfiles/libtiff-3.6.1-chris-bound.patch.bz2' saved [789] >>> md5 src_uri ;-) tiff-v3.6.1.tar.gz >>> md5 src_uri ;-) libtiff-lzw-compression-kit-1.5.tar.gz >>> md5 src_uri ;-) libtiff-3.6.1-alt-bound.patch.bz2 >>> md5 src_uri ;-) libtiff-3.6.1-chris-bound.patch.bz2 >>> Unpacking source... >>> Unpacking tiff-v3.6.1.tar.gz to /var/tmp/portage/tiff-3.6.1-r2/work * Applying tiff-3.6.1-r1-man.so.patch... [ ok ] * Applying libtiff-3.6.1-alt-bound.patch.bz2... [ ok ] * Cannot find $EPATCH_SOURCE! Value for $EPATCH_SOURCE is: * * /usr/portage/distfiles/libtiff-3.6.1-alt-bound-fix2.patch.bz2 !!! ERROR: media-libs/tiff-3.6.1-r2 failed. !!! Function epatch, Line 262, Exitcode 0 !!! Cannot find $EPATCH_SOURCE! Can be fixed by doing the following: 1) Insert the following at line 15 in tiff-3.6.1-r2.ebuild mirror://gentoo/libtiff-3.6.1-alt-bound-fix2.patch.bz2 2) Run: ebuild /usr/portage/media-libs/tiff/tiff-3.6.1-r2.ebuild digest
that's already fixed in cvs `emerge sync` ;-)