2011-04-12 10:57:57 by Thomas Klausner | Files touched by this commit (9) | |
Log message:
Update to 3.9.5:
Many bugs and security issues are resolved in this stable release.
|
2011-03-31 13:05:45 by Matthias Drochner | Files touched by this commit (3) |
Log message:
add patch from upstream
(http://bugzilla.maptools.org/show_bug.cgi?id=2300)
to fix possible buffer overflow in the "thunder" decoder (CVE-2011-1167)
bump PKGREV
|
2011-03-12 17:10:43 by Matthias Scheler | Files touched by this commit (3) |
Log message:
Add fix for vulnerability reported in SA43593 taken from the
"libtiff" CVS repository.
|
2010-12-23 12:45:04 by David Sainty | Files touched by this commit (254) |
Log message:
Mechanically replace references to graphics/jpeg with the suitable
alternative from mk/jpeg.buildlink3.mk
This allows selection of an alternative jpeg library (namely the x86 MMX,
SSE, SSE2 accelerated libjpeg-turbo) via JPEG_DEFAULT=libjpeg-turbo, and
follows the current standard model for alternatives (fam, motif, fuse etc).
The mechanical edits were applied via the following script:
#!/bin/sh
for d in */*; do
[ -d "$d" ] || continue
for i in "$d/"Makefile* "$d/"*.mk; do
case "$i" in *.orig|*"*"*) continue;; esac
out="$d/x"
sed -e 's;graphics/jpeg/buildlink3\.mk;mk/jpeg.buildlink3.mk;g' \
-e 's;BUILDLINK_PREFIX\.jpeg;JPEGBASE;g' \
< "$i" > "$out"
if cmp -s "$i" "$out"; then
rm -f "$out"
else
echo "Edited $i"
mv -f "$i" "$i.orig" && mv "$out" \
"$i"
fi
done
done
|
2010-08-04 19:48:22 by Matthias Scheler | Files touched by this commit (7) |
Log message:
Add patches from either libtiff's or Red Hat's Bugzilla which fix the
following vulnerabilities:
- CVE-2010-2233
- CVE-2010-2482
- CVE-2010-2483
- CVE-2010-2595
- CVE-2010-2597
There is no patch for CVE-2010-2596 yet. But it is low risk (an assertion
gets triggered) and cannot be exploited after the above vulnerabilities
are fixed (at least if I understood correctly).
No butcher was involved in fixing this package.
|
2010-06-16 15:56:41 by Matthias Drochner | Files touched by this commit (2) | |
Log message:
update to 3.9.4
changes:
-Complete the fixes for CVE-2009-2347.
-Tiffcrop now supports custom page sizes.
+minor bugfixes
|
2010-06-15 07:57:45 by David A. Holland | Files touched by this commit (2) |
Log message:
Update to 3.9.3, fixing CVE-2010-1411. Other changes are minor bug fixes;
gory details at http://www.remotesensing.org/libtiff/v3.9.3.html.
|
2010-01-29 12:14:57 by Tobias Nygren | Files touched by this commit (1) |
Log message:
tiff seems to be a common point of failure from the jpeg fallout,
so bump the revision.
|
2010-01-18 10:59:46 by Thomas Klausner | Files touched by this commit (938) |
Log message:
Second try at jpeg-8 recursive PKGREVISION bump.
|
2009-11-15 19:12:44 by Matthias Drochner | Files touched by this commit (3) | |
Log message:
updated to 3.9.2
changes:
-bugfixes
-OJPEG support updated to work with IJG JPEG 7 release
-Tiffcrop validated for most TIFF storage subformats and sample depths
|