File tiff.changes of Package tiff.import4396
------------------------------------------------------------------- Thu Apr 14 16:45:19 CEST 2011 - pgajdos@suse.cz - fixed following vulnerabilities: * integer overflow CVE-2010-4665 [bnc#687442] * buffer overflow CVE-2009-5022 [bnc#687441] ------------------------------------------------------------------- Thu Mar 31 10:08:23 CEST 2011 - pgajdos@suse.cz - fixed regression caused by previous update [bnc#682871] * modified CVE-2011-0192.patch - fixed buffer overflow in thunder decoder [bnc#683337] * added CVE-2011-1167.patch ------------------------------------------------------------------- Thu Mar 3 09:36:49 CET 2011 - pgajdos@suse.cz - fixed buffer overflow [bnc#672510] * CVE-2011-0192.patch ------------------------------------------------------------------- Mon Sep 6 14:56:09 CEST 2010 - pgajdos@suse.cz - fixed "Possibly exploitable memory corruption issue in libtiff" (see http://bugzilla.maptools.org/show_bug.cgi?id=2228) [bnc#624215] * scanlinesize.patch - fixed crash while using libjpeg7 and higher * dont-fancy-upsampling.patch ------------------------------------------------------------------- Mon Jul 12 16:36:48 CEST 2010 - pgajdos@suse.cz - updated to 3.9.4: fixes CVE-2010-2065 -- obsoletes * integer-overflow.patch * NULL-deref.patch - fixes CVE-2010-2067 ------------------------------------------------------------------- Wed Jun 23 10:32:01 CEST 2010 - pgajdos@suse.cz - fixed CVE-2010-2065 * integer-overflow.patch * NULL-deref.patch - fixed out of bounds read * oob-read.patch - fixed CVE-2010-2233 * getimage-64bit.patch - [bnc#612879] ------------------------------------------------------------------- Mon Apr 26 15:07:09 CEST 2010 - pgajdos@suse.cz - fixed tiff2pdf output [bnc#599475] ------------------------------------------------------------------- Fri Mar 26 08:49:41 UTC 2010 - pgajdos@suse.cz - fixed typo ------------------------------------------------------------------- Tue Mar 16 13:37:23 CET 2010 - pgajdos@suse.cz - updated to 3.9.2: fixed many CVE's and obsoletes almost all our patches (see ChangeLog for details) ------------------------------------------------------------------- Tue Dec 15 19:38:18 CET 2009 - jengelh@medozas.de - add baselibs.conf as a source - enable parallel building ------------------------------------------------------------------- Thu Aug 6 14:02:07 CEST 2009 - pgajdos@suse.cz - fixed integer overflows [bnc#519796] * CVE-2009-2347.patch ------------------------------------------------------------------- Thu Jul 2 16:33:02 CEST 2009 - nadvornik@suse.cz - fixed lzw overflow CVE-2009-2285 [bnc#518698] ------------------------------------------------------------------- Wed Feb 4 15:49:04 CET 2009 - nadvornik@suse.cz - fixed an endless loop on invalid images (bnc#444079) CVE-2008-1586 ------------------------------------------------------------------- Tue Jan 13 16:19:37 CET 2009 - olh@suse.de - obsolete old libtiff-64bit on ppc64 (bnc#437293) ------------------------------------------------------------------- Wed Jan 7 12:34:56 CET 2009 - olh@suse.de - obsolete old -XXbit packages (bnc#437293) ------------------------------------------------------------------- Sun Sep 7 11:24:56 CEST 2008 - schwab@suse.de - Fix conflicting options. ------------------------------------------------------------------- Tue Aug 19 17:45:10 CEST 2008 - nadvornik@suse.cz - fixed buffer overflows in LZW code (CVE-2008-2327) [bnc#414946] ------------------------------------------------------------------- Sun May 18 10:37:18 CEST 2008 - coolo@suse.de - fix rename of xxbit packages ------------------------------------------------------------------- Thu Apr 10 12:54:45 CEST 2008 - ro@suse.de - added baselibs.conf file to build xxbit packages for multilib support ------------------------------------------------------------------- Fri Jul 27 15:58:49 CEST 2007 - ro@suse.de - add provides and obsoletes for libtiff to libtiff3 package ------------------------------------------------------------------- Thu Jul 19 15:01:40 CEST 2007 - nadvornik@suse.cz - renamed libtiff to libtiff3 - do not package static libraries - added zlib-devel to BuildRequires ------------------------------------------------------------------- Mon Jun 12 13:40:43 CEST 2006 - nadvornik@suse.cz - fixed a typo in the previous change [#179051] ------------------------------------------------------------------- Fri Jun 2 17:17:55 CEST 2006 - nadvornik@suse.cz - fixed buffer overflow in tiffsplit (CVE-2006-2656) [#179051] - fixed buffer overflow in tiff2pdf [#179587] ------------------------------------------------------------------- Wed Apr 12 11:01:27 CEST 2006 - nadvornik@suse.cz - updated to 3.8.2 [#165237] * bugfix release * fixed several segfaults caused by incorrect tiff data ------------------------------------------------------------------- Tue Feb 7 15:09:45 CET 2006 - nadvornik@suse.cz - fixed crash on certain tiff images CVE-2006-0405 [#145757] ------------------------------------------------------------------- Wed Jan 25 21:31:02 CET 2006 - mls@suse.de - converted neededforbuild to BuildRequires ------------------------------------------------------------------- Thu Jan 12 16:32:23 CET 2006 - nadvornik@suse.cz - compile with -fstack-protector ------------------------------------------------------------------- Tue Jan 3 15:01:35 CET 2006 - nadvornik@suse.cz - updated to 3.8.0: * Read-only support for custom directories (e.g. EXIF directory) * Preliminary support for MS MDI format ------------------------------------------------------------------- Mon Oct 10 15:13:48 CEST 2005 - nadvornik@suse.cz - built with -fno-strict-aliasing ------------------------------------------------------------------- Fri Jul 15 15:35:41 CEST 2005 - nadvornik@suse.cz - updated to 3.7.3 ------------------------------------------------------------------- Tue May 24 17:13:51 CEST 2005 - nadvornik@suse.cz - updated to 3.7.2 - fixed 64bit bug in ppm2tiff [#85440] - fixed buffer overflow in BitsPerSample [#82787] ------------------------------------------------------------------- Thu Feb 17 13:38:57 CET 2005 - nadvornik@suse.cz - fixed reading of alpha channel ------------------------------------------------------------------- Sun Jan 16 20:05:53 CET 2005 - ro@suse.de - added c++ to neededforbuild ------------------------------------------------------------------- Fri Jan 7 15:41:40 CET 2005 - nadvornik@suse.cz - use typedef int int32 on all architectures ------------------------------------------------------------------- Wed Jan 05 15:42:09 CET 2005 - nadvornik@suse.cz - disabled c++ API as it would add a dependency on c++ libraries ------------------------------------------------------------------- Mon Jan 03 17:50:47 CET 2005 - nadvornik@suse.cz - updated to 3.7.1: bugfix release ------------------------------------------------------------------- Wed Dec 15 21:04:47 CET 2004 - nadvornik@suse.cz - added README.SUSE pointing to the documentation [#48601] - moved man3 to devel subpackage ------------------------------------------------------------------- Fri Oct 22 18:38:53 CEST 2004 - nadvornik@suse.cz - updated to 3.7.0 - security fixes are included in mainstream ------------------------------------------------------------------- Wed Oct 20 09:59:41 CEST 2004 - meissner@suse.de - Initialize ycbcrsubsampling to be not 0 in case of bad tiffs to avoid denial of service by divison/0. ------------------------------------------------------------------- Tue Oct 12 15:20:16 CEST 2004 - nadvornik@suse.cz - do not call TIFFTileSize with uninitialized values [#44635] ------------------------------------------------------------------- Thu Oct 07 18:44:29 CEST 2004 - pmladek@suse.cz - fixed much more buffer overflows (the older tiff-alt-bound-CheckMalloc.patch is included in the new libtiff-3.6.1-alt-bound.patch now) [#44635] ------------------------------------------------------------------- Thu Sep 30 18:33:05 CEST 2004 - nadvornik@suse.cz - fixed more buffer overflows [#44635] ------------------------------------------------------------------- Tue Sep 21 17:47:00 CEST 2004 - nadvornik@suse.cz - fixed multiple buffer overflows - CAN-2004-0803 [#44635] - disabled old jpeg support because of security problems [#45116] ------------------------------------------------------------------- Tue Aug 31 16:23:04 CEST 2004 - nadvornik@suse.cz - added LZW support ------------------------------------------------------------------- Wed Aug 25 13:39:39 CEST 2004 - kukuk@suse.de - Create -devel subpackage - Add libjpeg-devel to neededforbuild - Avoid /bin/sh in PreRequires ------------------------------------------------------------------- Fri Jul 2 16:10:10 CEST 2004 - max@suse.de - port.h is needed as well. ------------------------------------------------------------------- Thu May 6 17:08:54 CEST 2004 - max@suse.de - Install private headers (tif_dir.h, tiffiop.h). ------------------------------------------------------------------- Tue Apr 27 16:42:03 CEST 2004 - nadvornik@suse.cz - fixed tif_fax3 from cvs [#39515] ------------------------------------------------------------------- Mon Feb 09 12:27:05 CET 2004 - nadvornik@suse.cz - updated to 3.6.1 - fixed dangerous compiler warnings ------------------------------------------------------------------- Sat Jan 10 20:14:17 CET 2004 - adrian@suse.de - add %defattr and %run_ldconfig ------------------------------------------------------------------- Wed May 21 01:06:35 CEST 2003 - ro@suse.de - remove cvs subdirs ------------------------------------------------------------------- Sat Jul 27 14:15:49 CEST 2002 - kukuk@suse.de - Provide libtiff-devel in libtiff [Bug #17260] ------------------------------------------------------------------- Fri Jul 26 21:37:50 CEST 2002 - adrian@suse.de - fix neededforbuild ------------------------------------------------------------------- Wed Jul 3 13:41:23 CEST 2002 - nadvornik@suse.cz - fixed segfault in fax2tiff [bug #16818] - fixed size of int32 on 64bit architectures ------------------------------------------------------------------- Wed Jun 26 01:25:38 CEST 2002 - ro@suse.de - fixed directory permissions ------------------------------------------------------------------- Wed Jun 19 12:35:20 CEST 2002 - nadvornik@suse.cz - compiled with OJPEG_SUPPORT [bug #16408] ------------------------------------------------------------------- Thu Apr 18 23:05:34 CEST 2002 - kukuk@suse.de - Fix to compile on lib64 architectures ------------------------------------------------------------------- Wed Feb 6 14:48:39 CET 2002 - coolo@suse.de - use %_libdir ------------------------------------------------------------------- Thu Jan 24 11:53:02 CET 2002 - okir@suse.de - Fixed a tempfile race in fax2ps ------------------------------------------------------------------- Tue Dec 11 12:24:47 CET 2001 - nadvornik@suse.cz - updated to 3.5.7: bugfix release ------------------------------------------------------------------- Wed May 9 22:09:18 CEST 2001 - mfabian@suse.de - bzip2 sources ------------------------------------------------------------------- Thu Mar 15 19:11:58 CET 2001 - schwab@suse.de - Fix for ia64. ------------------------------------------------------------------- Fri May 26 16:16:59 CEST 2000 - bubnikv@suse.cz - sorted ------------------------------------------------------------------- Thu May 25 10:55:25 CEST 2000 - schwab@suse.de - Fix dso configure check for ia64. ------------------------------------------------------------------- Thu May 11 09:41:12 CEST 2000 - nadvornik@suse.cz - update to 3.5.5 - added BuildRoot ------------------------------------------------------------------- Tue Jan 25 17:12:06 CET 2000 - ro@suse.de - manpages to /usr/share using macro ------------------------------------------------------------------- Mon Jan 3 15:10:55 CET 2000 - schwab@suse.de - Update to 3.5.4 (Y2K fix) ------------------------------------------------------------------- Mon Sep 13 17:23:57 CEST 1999 - bs@suse.de - ran old prepare_spec on spec file to switch to new prepare_spec. ------------------------------------------------------------------- Wed Jan 13 18:07:04 MET 1999 - ro@suse.de - respect systems where libc is libc.so.6.1 (alpha) ------------------------------------------------------------------- Wed Nov 25 17:56:05 MET 1998 - ro@suse.de - update to 3.4 (final) named 3.4.final for rpm - moved from /usr/X11R6 to /usr ------------------------------------------------------------------- Wed Jul 29 19:01:00 MEST 1998 - werner@suse.de - Link shared libs explicit with -lc ------------------------------------------------------------------- Tue May 12 18:22:27 MEST 1998 - ro@suse.de - extracted package from libgr / build from own sources
