Per http://www.sane-project.org/, sane-backends 1.0.28 has been released. If nobody can pick it up, I'll look at some ebuilds.
Latest News 2020-02-02: SANE-Backends-1.0.29 has been released: Backends adds an escl backend (theoretically supporting all AirPrint devices with a scan unit adds support for 23 new scanner models via existing backends significantly changes genesys and pixma backends fixes bugs in canon_dr, fujitsu, hp3900, mustek_usb2, plustek and xerox_mfp backends fixes all compiler warnings on Debian 10 (#120) fixes portability issues for uClibc-ng and MacOS builds adds support to record and replay USB I/O traffic adds timestamps to debug logs Frontends fixes a 32-bit arithmetic overflow issue in scanimage Documentation updates translations for British English, Catalan, German, Ukrainian, Valencian adds scangearmp2 external backend descriptions updates hpaio and utsushi external backend descriptions adds the ChangeLogs/ directory to the source tarball (#103) Build additionally requires libcurl and libxml2 to build the escl backend requires libxml2 for USB I/O recording and replay functionality re-enables pthread support for backends that use its API directly, irrespective of the pthread_t type (#153) moves the genesys and pixma backends to a directory of their own
Latest News 2020-05-17: SANE-Backends-1.0.30 has been released. This release fixes several security related issues and a build issue. Backends epson2: fixes CVE-2020-12867 (GHSL-2020-075) and several memory management issues found while addressing that CVE epsonds: addresses out-of-bound memory access issues to fix CVE-2020-12862 (GHSL-2020-082) and CVE-2020-12863 (GHSL-2020-083), addresses a buffer overflow fixing CVE-2020-12865 (GHSL-2020-084) and disables network autodiscovery to mitigate CVE-2020-12866 (GHSL-2020-079), CVE-2020-12861 (GHSL-2020-080) and CVE-2020-12864 (GHSL-2020-081). Note that this backend does not support network scanners to begin with. magicolor: fixes a floating point exception and uninitialized data read fixes an overflow in sanei_tcp_read() Build fixes a build issue where linker flags would become link time dependencies (#239)
I have left the Gentoo project. Please open a new bump request.
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=2359950077b026cc6bbe861b1126f5d34b6eac45 commit 2359950077b026cc6bbe861b1126f5d34b6eac45 Author: Sam James (sam_c) <sam@cmpct.info> AuthorDate: 2020-06-22 21:42:47 +0000 Commit: Thomas Deutschmann <whissi@gentoo.org> CommitDate: 2020-06-26 22:34:03 +0000 media-gfx/sane-backends: security bump to 1.0.30 Closes: https://bugs.gentoo.org/691204 Bug: https://bugs.gentoo.org/729312 Package-Manager: Portage-2.3.99, Repoman-2.3.22 Signed-off-by: Sam James (sam_c) <sam@cmpct.info> Closes: https://github.com/gentoo/gentoo/pull/16384 Signed-off-by: Thomas Deutschmann <whissi@gentoo.org> media-gfx/sane-backends/Manifest | 1 + ...ne-backends-1.0.30-missing-stdint-include.patch | 14 + .../sane-backends/sane-backends-1.0.30.ebuild | 344 +++++++++++++++++++++ 3 files changed, 359 insertions(+)
