Navigation:
Browse pkgsrc
(this page)| 2012-11-05 13:41:48 by Matthias Drochner | Files touched by this commit (3) |
Log message: add patch from Redhat bug #871700 to fix a possible buffer overflow due to integer overflow in the ppm2tiff cmd line tool (CVE-2012-4564) bump PKGREV |
| 2012-10-06 16:11:27 by Aleksej Saushev | Files touched by this commit (427) |
Log message: Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days. |
| 2012-10-01 20:11:30 by Adam Ciarcinski | Files touched by this commit (5) |
Log message: Changes 4.0.3: MAJOR CHANGES: None CHANGES IN THE SOFTWARE CONFIGURATION: Updated to use Automake 1.12.4. Avoids security problem with 'make distcheck' \ (CVE-2012-3386). CHANGES IN LIBTIFF: Various memory buffer access fixes. Fix handling when writing RGBA jpeg compressed imagery \ (http://trac.osgeo.org/gdal/ticket/4732). Fix to work properly with IJG JPEG 7+. New functions TIFFFieldTag(), TIFFFieldName(), TIFFFieldDataType(), \ TIFFFieldPassCount(), TIFFFieldReadCount(), TIFFFieldWriteCount() to use as \ external accessors for the opaque type TIFFField. Fix bug rewriting image tiles in a compressed file \ (http://trac.osgeo.org/gdal/ticket/4771). Add TIFF/FX tag support in libtiff. CHANGES IN THE TOOLS: tiff2pdf: Fail when TIFFSetDirectory() fails. This prevents core dumps or \ perhaps even arbitrary code execution when processing a corrupt input file \ (CVE-2012-3401). tiff2pdf: Fix two places where t2p_error didn't get set after a malloc failure. \ No crash risk AFAICS, but the program might not report exit code 1 as desired. CHANGES IN THE CONTRIB AREA: None |
| 2012-07-19 23:41:45 by Thomas Klausner | Files touched by this commit (3) |
Log message: Fix CVE-2012-3401, buffer overflow in tiff2pdf. Bump PKGREVISION. |
| 2012-06-20 23:07:15 by Thomas Klausner | Files touched by this commit (5) |
Log message:
Update to 4.0.2 for CVE-2012-2113.
* tif_getimage.c: added support for _SEPARATED CMYK images.
* tif_getimage.c: Added support for greyscale + alpha.
* Added TIFFCreateCustomDirectory() and TIFFCreateEXIFDirectory()
functions.
* tif_print.c: Lots of fixes around printing corrupt or hostile input.
* Improve handling of corrupt ycbcrsubsampling values.
* tif_unix.c: use strerror to get meaningful error messages.
* tif_jpeg.c: fix serious bugs in JPEGDecodeRaw().
* tif_jpeg.c: Fix size overflow (zdi-can-1221,CVE-2012-1173).
|
| 2012-04-10 16:13:04 by Takahiro Kambe | Files touched by this commit (4) |
Log message: Add fix for CVE-2012-1173 from upstream. Bump PKGREVISION. |
2012-02-21 14:03:01 by Matthias Drochner | Files touched by this commit (4) |  |
Log message: -pull in xz/bl3 to avoid hidden dependency -update to 4.0.1 -- this only adds symbol versioning support to ease transition from 3.x to 4.x; this is not used in pkgsrc so the update is purely cosmetical |
| 2012-02-07 08:54:46 by Thomas Klausner | Files touched by this commit (1) |
Log message: Bump ABI depends, which was the whole cause of the PKGREVISION bump. Oops. |
| 2012-02-06 13:32:08 by Thomas Klausner | Files touched by this commit (1) |
Log message: Add patch for tiff-4.0. |
| 2012-02-06 13:30:52 by Thomas Klausner | Files touched by this commit (3) | |
Log message: Update tiff to 4.0: At long last, libtiff 4.0.0 is finally released. Libtiff 4.0.0 is the successor to the libtiff 3.9.X release series. It is intended to be largely API compatible with the 3.9.X releases, but it is definitely not ABI compatible so any software which plans to use it will need to be recompiled. With appropriate care, source code can easily compile with both the 3.9.X releases and libtiff 4.0.0. This release supports the BigTIFF TIFF format in which all offsets are unsigned 64-bit, supporting huge files. APIs which deal with tag offsets are necessarily updated to pass 64-bit values. I/O functions supporting the TIFFClientOpen() interface are updated to pass 64-bit offset values. |
New packages: