summaryrefslogtreecommitdiffstats
path: root/source/l/libtiff/patches/CVE-2022-34526.patch (follow)
Commit message (Expand)AuthorAgeFilesLines
* Wed Dec 6 05:03:11 UTC 2023...a/aaa_libraries-15.1-x86_64-23.txz: Rebuilt. Upgraded: libelf-0.190.so, libcares.so.2.9.0, libglib-2.0.so.0.7800.2, libgmodule-2.0.so.0.7800.2, libgobject-2.0.so.0.7800.2, libgthread-2.0.so.0.7800.2. Added: libtiff.so.6.0.2, libtiffxx.so.6.0.2. a/util-linux-2.39.3-x86_64-1.txz: Upgraded. ap/cups-filters-1.28.17-x86_64-3.txz: Rebuilt. Recompiled against libtiff-4.6.0. ap/ghostscript-10.02.1-x86_64-2.txz: Rebuilt. Recompiled against libtiff-4.6.0. ap/rpm-4.19.0-x86_64-1.txz: Upgraded. Shared library .so-version bump. e/emacs-29.1-x86_64-2.txz: Rebuilt. Recompiled against libtiff-4.6.0. kde/bluedevil-5.27.10-x86_64-1.txz: Upgraded. kde/breeze-5.27.10-x86_64-1.txz: Upgraded. kde/breeze-grub-5.27.10-x86_64-1.txz: Upgraded. kde/breeze-gtk-5.27.10-x86_64-1.txz: Upgraded. kde/digikam-8.2.0-x86_64-2.txz: Rebuilt. Recompiled against libtiff-4.6.0. kde/drkonqi-5.27.10-x86_64-1.txz: Upgraded. kde/gwenview-23.08.3-x86_64-2.txz: Rebuilt. Recompiled against libtiff-4.6.0. kde/kactivitymanagerd-5.27.10-x86_64-1.txz: Upgraded. kde/kde-cli-tools-5.27.10-x86_64-1.txz: Upgraded. kde/kde-gtk-config-5.27.10-x86_64-1.txz: Upgraded. kde/kdecoration-5.27.10-x86_64-1.txz: Upgraded. kde/kdeplasma-addons-5.27.10-x86_64-1.txz: Upgraded. kde/kgamma5-5.27.10-x86_64-1.txz: Upgraded. kde/khotkeys-5.27.10-x86_64-1.txz: Upgraded. kde/kinfocenter-5.27.10-x86_64-1.txz: Upgraded. kde/kmenuedit-5.27.10-x86_64-1.txz: Upgraded. kde/kpipewire-5.27.10-x86_64-1.txz: Upgraded. kde/krita-5.2.1-x86_64-3.txz: Rebuilt. Recompiled against libtiff-4.6.0. kde/kscreen-5.27.10-x86_64-1.txz: Upgraded. kde/kscreenlocker-5.27.10-x86_64-1.txz: Upgraded. kde/ksshaskpass-5.27.10-x86_64-1.txz: Upgraded. kde/ksystemstats-5.27.10-x86_64-1.txz: Upgraded. kde/kwallet-pam-5.27.10-x86_64-1.txz: Upgraded. kde/kwayland-integration-5.27.10-x86_64-1.txz: Upgraded. kde/kwin-5.27.10-x86_64-1.txz: Upgraded. kde/kwrited-5.27.10-x86_64-1.txz: Upgraded. kde/layer-shell-qt-5.27.10-x86_64-1.txz: Upgraded. kde/libkscreen-5.27.10-x86_64-1.txz: Upgraded. kde/libksysguard-5.27.10-x86_64-1.txz: Upgraded. kde/milou-5.27.10-x86_64-1.txz: Upgraded. kde/okular-23.08.3-x86_64-2.txz: Rebuilt. Recompiled against libtiff-4.6.0. kde/oxygen-5.27.10-x86_64-1.txz: Upgraded. kde/oxygen-sounds-5.27.10-x86_64-1.txz: Upgraded. kde/plasma-browser-integration-5.27.10-x86_64-1.txz: Upgraded. kde/plasma-desktop-5.27.10-x86_64-1.txz: Upgraded. kde/plasma-disks-5.27.10-x86_64-1.txz: Upgraded. kde/plasma-firewall-5.27.10-x86_64-1.txz: Upgraded. kde/plasma-integration-5.27.10-x86_64-1.txz: Upgraded. kde/plasma-nm-5.27.10-x86_64-1.txz: Upgraded. kde/plasma-pa-5.27.10-x86_64-1.txz: Upgraded. kde/plasma-sdk-5.27.10-x86_64-1.txz: Upgraded. kde/plasma-systemmonitor-5.27.10-x86_64-1.txz: Upgraded. kde/plasma-vault-5.27.10-x86_64-1.txz: Upgraded. kde/plasma-workspace-5.27.10-x86_64-1.txz: Upgraded. kde/plasma-workspace-wallpapers-5.27.10-noarch-1.txz: Upgraded. kde/polkit-kde-agent-1-5.27.10-x86_64-1.txz: Upgraded. kde/powerdevil-5.27.10-x86_64-1.txz: Upgraded. kde/qqc2-breeze-style-5.27.10-x86_64-1.txz: Upgraded. kde/sddm-kcm-5.27.10-x86_64-1.txz: Upgraded. kde/systemsettings-5.27.10-x86_64-1.txz: Upgraded. kde/xdg-desktop-portal-kde-5.27.10-x86_64-1.txz: Upgraded. l/SDL2_image-2.6.3-x86_64-2.txz: Rebuilt. Recompiled against libtiff-4.6.0. l/djvulibre-3.5.28-x86_64-4.txz: Rebuilt. Recompiled against libtiff-4.6.0. l/gd-2.3.3-x86_64-3.txz: Rebuilt. Recompiled against libtiff-4.6.0. l/gdk-pixbuf2-2.42.10-x86_64-2.txz: Rebuilt. Recompiled against libtiff-4.6.0. l/gegl-0.4.46-x86_64-3.txz: Rebuilt. Recompiled against libtiff-4.6.0. l/glib2-2.78.2-x86_64-1.txz: Upgraded. l/gtk4-4.12.4-x86_64-2.txz: Rebuilt. Recompiled against libtiff-4.6.0. l/imagemagick-7.1.1_22-x86_64-2.txz: Rebuilt. Recompiled against libtiff-4.6.0. l/lcms-1.19-x86_64-7.txz: Rebuilt. Recompiled against libtiff-4.6.0. l/lcms2-2.16-x86_64-2.txz: Rebuilt. Recompiled against libtiff-4.6.0. l/libtiff-4.6.0-x86_64-1.txz: Upgraded. Probably best to get this one out of the way... From the release announcement: Pay attention to the following warning: This version removes a big number of utilities that have suffered from lack of maintenance over the years and were the source of various reported security issues. See "Removed functionality" below for the list of removed utilities. Starting with libtiff v4.6.0, their source code, at this time, will still be available in the source distribution, but they will no longer be built by default, and issues related to them will no longer be accepted in the libtiff bug tracker. The only remaining supported TIFF tools are tiffinfo, tiffdump, tiffcp, tiffset and tiffsplit. Shared library .so-version bump. l/libwebp-1.3.2-x86_64-2.txz: Rebuilt. Recompiled against libtiff-4.6.0. l/netpbm-11.04.04-x86_64-2.txz: Rebuilt. Recompiled against libtiff-4.6.0. l/opencv-4.8.1-x86_64-2.txz: Rebuilt. Recompiled against libtiff-4.6.0. l/poppler-23.12.0-x86_64-2.txz: Rebuilt. Recompiled against libtiff-4.6.0. l/python-pillow-8.4.0-x86_64-3.txz: Rebuilt. Recompiled against libtiff-4.6.0. l/qt5-5.15.11_20231125_4765fa1d-x86_64-1.txz: Upgraded. Compiled against libtiff-4.6.0. l/sdl-1.2.15-x86_64-15.txz: Rebuilt. Recompiled against libtiff-4.6.0. n/links-2.29-x86_64-2.txz: Rebuilt. Recompiled against libtiff-4.6.0. t/xfig-3.2.9-x86_64-2.txz: Rebuilt. Recompiled against libtiff-4.6.0. xap/geeqie-2.1-x86_64-4.txz: Rebuilt. Recompiled against libtiff-4.6.0. xap/gimp-2.10.36-x86_64-2.txz: Rebuilt. Recompiled against libtiff-4.6.0. xap/sane-1.2.1-x86_64-2.txz: Rebuilt. Recompiled against libtiff-4.6.0. xap/windowmaker-0.96.0-x86_64-2.txz: Rebuilt. Recompiled against libtiff-4.6.0. xap/xpaint-3.1.4-x86_64-2.txz: Rebuilt. Recompiled against libtiff-4.6.0. xap/xsane-0.999-x86_64-6.txz: Rebuilt. Recompiled against libtiff-4.6.0. 20231206050311 Patrick J Volkerding2023-12-061-28/+0
* Wed Jan 4 02:18:08 UTC 2023...ap/lsof-4.96.5-x86_64-1.txz: Upgraded. ap/sqlite-3.40.1-x86_64-1.txz: Upgraded. kde/bluedevil-5.26.5-x86_64-1.txz: Upgraded. kde/breeze-5.26.5-x86_64-1.txz: Upgraded. kde/breeze-grub-5.26.5-x86_64-1.txz: Upgraded. kde/breeze-gtk-5.26.5-x86_64-1.txz: Upgraded. kde/digikam-7.9.0-x86_64-2.txz: Rebuilt. Recompiled against opencv-4.7.0. kde/drkonqi-5.26.5-x86_64-1.txz: Upgraded. kde/kactivitymanagerd-5.26.5-x86_64-1.txz: Upgraded. kde/kde-cli-tools-5.26.5-x86_64-1.txz: Upgraded. kde/kde-gtk-config-5.26.5-x86_64-1.txz: Upgraded. kde/kdecoration-5.26.5-x86_64-1.txz: Upgraded. kde/kdeplasma-addons-5.26.5-x86_64-1.txz: Upgraded. kde/kgamma5-5.26.5-x86_64-1.txz: Upgraded. kde/khotkeys-5.26.5-x86_64-1.txz: Upgraded. kde/kinfocenter-5.26.5-x86_64-1.txz: Upgraded. kde/kmenuedit-5.26.5-x86_64-1.txz: Upgraded. kde/kpipewire-5.26.5-x86_64-1.txz: Upgraded. kde/kscreen-5.26.5-x86_64-1.txz: Upgraded. kde/kscreenlocker-5.26.5-x86_64-1.txz: Upgraded. kde/ksshaskpass-5.26.5-x86_64-1.txz: Upgraded. kde/ksystemstats-5.26.5-x86_64-1.txz: Upgraded. kde/kwallet-pam-5.26.5-x86_64-1.txz: Upgraded. kde/kwayland-integration-5.26.5-x86_64-1.txz: Upgraded. kde/kwin-5.26.5-x86_64-1.txz: Upgraded. kde/kwrited-5.26.5-x86_64-1.txz: Upgraded. kde/layer-shell-qt-5.26.5-x86_64-1.txz: Upgraded. kde/libkscreen-5.26.5-x86_64-1.txz: Upgraded. kde/libksysguard-5.26.5-x86_64-1.txz: Upgraded. kde/milou-5.26.5-x86_64-1.txz: Upgraded. kde/oxygen-5.26.5-x86_64-1.txz: Upgraded. kde/oxygen-sounds-5.26.5-x86_64-1.txz: Upgraded. kde/plasma-browser-integration-5.26.5-x86_64-1.txz: Upgraded. kde/plasma-desktop-5.26.5-x86_64-1.txz: Upgraded. kde/plasma-disks-5.26.5-x86_64-1.txz: Upgraded. kde/plasma-firewall-5.26.5-x86_64-1.txz: Upgraded. kde/plasma-integration-5.26.5-x86_64-1.txz: Upgraded. kde/plasma-nm-5.26.5-x86_64-1.txz: Upgraded. kde/plasma-pa-5.26.5-x86_64-1.txz: Upgraded. kde/plasma-sdk-5.26.5-x86_64-1.txz: Upgraded. kde/plasma-systemmonitor-5.26.5-x86_64-1.txz: Upgraded. kde/plasma-vault-5.26.5-x86_64-1.txz: Upgraded. kde/plasma-workspace-5.26.5-x86_64-1.txz: Upgraded. kde/plasma-workspace-wallpapers-5.26.5-x86_64-1.txz: Upgraded. kde/polkit-kde-agent-1-5.26.5-x86_64-1.txz: Upgraded. kde/powerdevil-5.26.5-x86_64-1.txz: Upgraded. kde/qqc2-breeze-style-5.26.5-x86_64-1.txz: Upgraded. kde/sddm-kcm-5.26.5-x86_64-1.txz: Upgraded. kde/systemsettings-5.26.5-x86_64-1.txz: Upgraded. kde/xdg-desktop-portal-kde-5.26.5-x86_64-1.txz: Upgraded. l/SDL2-2.26.2-x86_64-1.txz: Upgraded. l/gst-plugins-bad-free-1.20.5-x86_64-2.txz: Rebuilt. Recompiled against opencv-4.7.0. l/imagemagick-7.1.0_57-x86_64-1.txz: Upgraded. l/libpcap-1.10.2-x86_64-1.txz: Upgraded. l/libpsl-0.21.2-x86_64-1.txz: Upgraded. l/librevenge-0.0.5-x86_64-1.txz: Upgraded. l/libsndfile-1.2.0-x86_64-1.txz: Upgraded. l/libtiff-4.4.0-x86_64-2.txz: Rebuilt. Patched various security bugs. For more information, see: https://www.cve.org/CVERecord?id=CVE-2022-2056 https://www.cve.org/CVERecord?id=CVE-2022-2057 https://www.cve.org/CVERecord?id=CVE-2022-2058 https://www.cve.org/CVERecord?id=CVE-2022-3970 https://www.cve.org/CVERecord?id=CVE-2022-34526 (* Security fix *) l/netpbm-11.01.00-x86_64-1.txz: Upgraded. l/opencv-4.7.0-x86_64-1.txz: Upgraded. Shared library .so-version bump. l/poppler-23.01.0-x86_64-1.txz: Upgraded. n/getmail-6.18.11-x86_64-1.txz: Upgraded. n/tcpdump-4.99.2-x86_64-1.txz: Upgraded. n/whois-5.5.15-x86_64-1.txz: Upgraded. Updated the .bd, .nz and .tv TLD servers. Added the .llyw.cymru, .gov.scot and .gov.wales SLD servers. Updated the .ac.uk and .gov.uk SLD servers. Recursion has been enabled for whois.nic.tv. Updated the list of new gTLDs with four generic TLDs assigned in October 2013 which were missing due to a bug. Removed 4 new gTLDs which are no longer active. Added the Georgian translation, contributed by Temuri Doghonadze. Updated the Finnish translation, contributed by Lauri Nurmi. xap/pidgin-2.14.12-x86_64-1.txz: Upgraded. xap/rxvt-unicode-9.26-x86_64-4.txz: Rebuilt. When the "background" extension was loaded, an attacker able to control the data written to the terminal would be able to execute arbitrary code as the terminal's user. Thanks to David Leadbeater and Ben Collver. For more information, see: https://www.openwall.com/lists/oss-security/2022/12/05/1 https://www.cve.org/CVERecord?id=CVE-2022-4170 (* Security fix *) 20230104021808 Patrick J Volkerding2023-01-041-0/+28