From 301bae2e27f652249d470c9150f1412f773a2cb8 Mon Sep 17 00:00:00 2001 From: Natanael Copa Date: Thu, 6 Dec 2012 20:37:32 +0000 Subject: main/tiff: security upgrade to 4.0.3 (CVE-2012-4447,CVE-2012-4564) fixes #1501 --- main/tiff/APKBUILD | 10 ++++------ main/tiff/CVE-2012-3401.patch | 11 ----------- 2 files changed, 4 insertions(+), 17 deletions(-) delete mode 100644 main/tiff/CVE-2012-3401.patch (limited to 'main/tiff') diff --git a/main/tiff/APKBUILD b/main/tiff/APKBUILD index f1eb30ca91..2bfdb997a8 100644 --- a/main/tiff/APKBUILD +++ b/main/tiff/APKBUILD @@ -1,18 +1,17 @@ # Contributor: Leonardo Arena # Maintainer: Michael Mason pkgname=tiff -pkgver=4.0.2 -pkgrel=1 +pkgver=4.0.3 +pkgrel=0 pkgdesc="Provides support for the Tag Image File Format or TIFF" url="http://www.libtiff.org/" arch="all" license="GPL" depends= -depends_dev="zlib-dev jpeg-dev" +depends_dev="zlib-dev libjpeg-turbo-dev" makedepends="libtool autoconf automake $depends_dev" subpackages="$pkgname-doc $pkgname-dev $pkgname-tools" source="ftp://ftp.remotesensing.org/pub/libtiff/$pkgname-$pkgver.tar.gz - CVE-2012-3401.patch " _builddir="$srcdir"/$pkgname-$pkgver @@ -51,5 +50,4 @@ tools() { mv "$pkgdir"/usr/bin "$subpkgdir"/usr/ } -md5sums="04a08fa1e07e696e820a0c3f32465a13 tiff-4.0.2.tar.gz -8c862de25b906d3fcefce2fb06c7b604 CVE-2012-3401.patch" +md5sums="051c1068e6a0627f461948c365290410 tiff-4.0.3.tar.gz" diff --git a/main/tiff/CVE-2012-3401.patch b/main/tiff/CVE-2012-3401.patch deleted file mode 100644 index 847bd0d138..0000000000 --- a/main/tiff/CVE-2012-3401.patch +++ /dev/null @@ -1,11 +0,0 @@ -diff -Naur tiff-4.0.2.orig/tools/tiff2pdf.c tiff-4.0.2/tools/tiff2pdf.c ---- tiff-4.0.2.orig/tools/tiff2pdf.c 2012-06-15 17:51:54.000000000 -0400 -+++ tiff-4.0.2/tools/tiff2pdf.c 2012-07-05 13:34:36.569691068 -0400 -@@ -1066,6 +1066,7 @@ - "Can't set directory %u of input file %s", - i, - TIFFFileName(input)); -+ t2p->t2p_error = T2P_ERR_ERROR; - return; - } - if(TIFFGetField(input, TIFFTAG_PAGENUMBER, &pagen, &paged)){ -- cgit v1.2.3