[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openbsd-ports-cvs
Subject:    CVS: cvs.openbsd.org: ports
From:       Nikolay Sturm <sturm () cvs ! openbsd ! org>
Date:       2005-03-31 22:08:47
Message-ID: 200503312208.j2VM8lIb018243 () cvs ! openbsd ! org
[Download RAW message or body]

CVSROOT:	/cvs
Module name:	ports
Changes by:	sturm@cvs.openbsd.org	2005/03/31 15:08:47

Modified files:
	graphics/tiff  : Tag: OPENBSD_3_6 Makefile 
	graphics/tiff/patches: Tag: OPENBSD_3_6 patch-libtiff_tif_fax3_c 
Added files:
	graphics/tiff/patches: Tag: OPENBSD_3_6 patch-libtiff_tif_aux_c 
	                       patch-libtiff_tif_compress_c 
	                       patch-libtiff_tif_dir_c 
	                       patch-libtiff_tif_dirinfo_c 
	                       patch-libtiff_tif_dirread_c 
	                       patch-libtiff_tif_dirwrite_c 
	                       patch-libtiff_tif_extension_c 
	                       patch-libtiff_tif_getimage_c 
	                       patch-libtiff_tif_jpeg_c 
	                       patch-libtiff_tif_luv_c 
	                       patch-libtiff_tif_next_c 
	                       patch-libtiff_tif_ojpeg_c 
	                       patch-libtiff_tif_pixarlog_c 
	                       patch-libtiff_tif_strip_c 
	                       patch-libtiff_tif_thunder_c 
	                       patch-libtiff_tif_tile_c 
	                       patch-libtiff_tif_write_c 
	                       patch-libtiff_tiffiop_h 
	                       patch-tools_tiffdump_c 

Log message:
cumulative update with patches of recent months

MFC:
fix an issue with not being able to open some valid TIFF files.

http://www.sigmasoft.com/~openbsd/archive/openbsd-ports/200503/msg00090.html

From: Bernd Ahlers <b dot ahlers at ba-net dot org>
---
Integer overflow in tif_dirread.c and tif_fax3.c for libtiff allows remote
attackers to execute arbitrary code via a TIFF file containing a TIFF_ASCII
or TIFF_UNDEFINED directory entry with a -1 entry count, which leads to a
heap-based buffer overflow.

CAN-2004-1308
---
fix an issue with alpha channels.

http://bugzilla.remotesensing.org/show_bug.cgi?id=718
---
fix MASTER_SITES; From: Bernd Ahlers <b dot ahlers at ba-net dot org>
---
Fix memory allocation problems and numerous integer overflows.

CAN-2004-0803, CAN-2004-0804, CAN-2004-0886

ok brad@

[prev in list] [next in list] [prev in thread] [next in thread]