summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLars Wendler <polynomial-c@gentoo.org>2016-08-03 15:37:49 +0200
committerLars Wendler <polynomial-c@gentoo.org>2016-08-03 15:38:12 +0200
commitc833e82151f379f180b50c7dff58b8f989a9c1a9 (patch)
tree83af76db6271f937fac263b7d2cb64174c2f6280 /media-libs/tiff/files
parentsci-electronics/qucs: Add missing deps on QtSvg & QtScript, #587768 (diff)
downloadgentoo-c833e82151f379f180b50c7dff58b8f989a9c1a9.tar.gz
gentoo-c833e82151f379f180b50c7dff58b8f989a9c1a9.tar.bz2
gentoo-c833e82151f379f180b50c7dff58b8f989a9c1a9.zip
media-libs/tiff: Revbump for security bug #585274
Removing vulnerable gif2tiff (CVE-2016-5102) Upstream seems to no longer ship this tool with >=tiff-4.0.7 versions. Package-Manager: portage-2.3.0 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
Diffstat (limited to 'media-libs/tiff/files')
-rw-r--r--media-libs/tiff/files/tiff-4.0.6-gif2tiff_removal.patch37
1 files changed, 37 insertions, 0 deletions
diff --git a/media-libs/tiff/files/tiff-4.0.6-gif2tiff_removal.patch b/media-libs/tiff/files/tiff-4.0.6-gif2tiff_removal.patch
new file mode 100644
index 000000000000..9cf4ec596bf9
--- /dev/null
+++ b/media-libs/tiff/files/tiff-4.0.6-gif2tiff_removal.patch
@@ -0,0 +1,37 @@
+# Removing vulnerable gif2tiff (CVE-2016-5102)
+# Upstream seems to no longer ship this tool with >=tiff-4.0.7 versions.
+
+http://bugzilla.maptools.org/show_bug.cgi?id=2552
+https://bugzilla.redhat.com/show_bug.cgi?id=1343407
+https://bugs.gentoo.org/585274
+
+--- tiff-4.0.6/man/Makefile.am
++++ tiff-4.0.6/man/Makefile.am
+@@ -27,7 +27,6 @@
+ bmp2tiff.1 \
+ fax2ps.1 \
+ fax2tiff.1 \
+- gif2tiff.1 \
+ pal2rgb.1 \
+ ppm2tiff.1 \
+ ras2tiff.1 \
+--- tiff-4.0.6/tools/Makefile.am
++++ tiff-4.0.6/tools/Makefile.am
+@@ -34,7 +34,6 @@
+ bmp2tiff \
+ fax2ps \
+ fax2tiff \
+- gif2tiff \
+ pal2rgb \
+ ppm2tiff \
+ ras2tiff \
+@@ -73,9 +72,6 @@
+ fax2tiff_SOURCES = fax2tiff.c
+ fax2tiff_LDADD = $(LIBTIFF) $(LIBPORT)
+
+-gif2tiff_SOURCES = gif2tiff.c
+-gif2tiff_LDADD = $(LIBTIFF) $(LIBPORT)
+-
+ pal2rgb_SOURCES = pal2rgb.c
+ pal2rgb_LDADD = $(LIBTIFF) $(LIBPORT)
+