Next | Query returned 169 messages, browsing 31 to 40 | Previous

History of commit frequency

CVS Commit History:


   2018-10-28 10:45:07 by S.P.Zeidler | Files touched by this commit (8)
Log message:
patches from upstream for
CVE-2017-11613 CVE-2017-18013 CVE-2018-5784 CVE-2018-10963
CVE-2018-17100 CVE-2018-17101
   2018-10-26 00:58:05 by Maya Rashish | Files touched by this commit (4)
Log message:
tiff: apply fix for CVE-2018-18557

From 681748ec2f5ce88da5f9fa6831e1653e46af8a66 Mon Sep 17 00:00:00 2001
From: Even Rouault <even.rouault@spatialys.com>
Date: Sun, 14 Oct 2018 16:38:29 +0200
Subject: [PATCH 1/1] JBIG: fix potential out-of-bounds write in JBIGDecode()

JBIGDecode doesn't check if the user provided buffer is large enough
to store the JBIG decoded image, which can potentially cause out-of-bounds
write in the buffer.
This issue was reported and analyzed by Thomas Dullien.

Also fixes a (harmless) potential use of uninitialized memory when
tif->tif_rawsize > tif->tif_rawcc

And in case libtiff is compiled with CHUNKY_STRIP_READ_SUPPORT, make sure
that whole strip data is provided to JBIGDecode()

The last part (CHUNKY_STRIP_READ_SUPPORT) was adapted by myself to fit
the libtiff release.

Bump PKGREVISION.
   2018-06-22 01:11:04 by Tim Zingelman | Files touched by this commit (3)
Log message:
tiff: fix for CVE-2018-8905

from \ 
https://gitlab.com/libtiff/libtiff/commit/58a898cb4459055bb488ca815c23b880c242a27d
   2018-01-17 00:52:06 by Tim Zingelman | Files touched by this commit (3)
Log message:
tiff: add patch for CVE-2017-9935 from upstream git repo
   2017-12-03 10:07:06 by Maya Rashish | Files touched by this commit (3)
Log message:
tiff: add my own patch for CVE-2017-17095.

bump PKGREVISION
   2017-11-19 17:31:04 by Havard Eidnes | Files touched by this commit (6)
Log message:
Update tiff to version 4.0.9.

Pkgsrc changes:
 * Adapt PLIST, remove patches for now-integrated bugfixes.

Upstream changes:
 * Many changes related to security & stability.
   See the source's ChangeLog for the details.
   2017-06-21 04:47:45 by Paul Goyette | Files touched by this commit (4)
Log message:
One more try to get the patches and distinfo done correctly.
   2017-06-21 04:40:27 by Paul Goyette | Files touched by this commit (1)
Log message:
Get the distinfo done right
   2017-06-21 04:38:21 by Paul Goyette | Files touched by this commit (4)
Log message:
Fixup the patches and regenerate distinfo to unbreak the build
   2017-06-21 03:08:33 by Tim Zingelman | Files touched by this commit (5)
Log message:
fix CVE-2014-8128, CVE-2016-5318, CVE-2015-7554 & CVE-2016-10095
per http://bugzilla.maptools.org/show_bug.cgi?id=2580

also CVE-2017-9147
(http://bugzilla.maptools.org/show_bug.cgi?id=2693)

Next | Query returned 169 messages, browsing 31 to 40 | Previous