pool/tiff
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

- security update:

Browse Source 
* CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/tiff?expand=0&rev=166
This commit is contained in:
Michael Vetter 2023-01-26 07:58:54 +00:00 committed by Git OBS Bridge
parent d5facc88d0
commit 8857c133f6
3 changed files with 22 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
tiff-CVE-2022-48281.patch Normal file
View File

@ -0,0 +1,13 @@
Index: tiff-4.5.0/tools/tiffcrop.c
===================================================================
--- tiff-4.5.0.orig/tools/tiffcrop.c
+++ tiff-4.5.0/tools/tiffcrop.c
@@ -8591,7 +8591,7 @@ static int processCropSelections(struct
cropsize + NUM_BUFF_OVERSIZE_BYTES);
else
{
- prev_cropsize = seg_buffs[0].size;
+ prev_cropsize = seg_buffs[i].size;
if (prev_cropsize < cropsize)
{
next_buff = _TIFFrealloc(

7
tiff.changes
View File

@ -1,3 +1,10 @@
-------------------------------------------------------------------
Thu Jan 26 07:41:55 UTC 2023 - Michael Vetter <mvetter@suse.com>
- security update:
* CVE-2022-48281 [bsc#1207413]
+ tiff-CVE-2022-48281.patch
------------------------------------------------------------------- -------------------------------------------------------------------
Wed Jan 4 08:48:13 UTC 2023 - Paolo Stivanin <info@paolostivanin.com> Wed Jan 4 08:48:13 UTC 2023 - Paolo Stivanin <info@paolostivanin.com>

2
tiff.spec
View File

@ -33,6 +33,8 @@ Source99: tiff.keyring
Patch0: tiff-4.0.3-seek.patch Patch0: tiff-4.0.3-seek.patch
# http://bugzilla.maptools.org/show_bug.cgi?id=2442 # http://bugzilla.maptools.org/show_bug.cgi?id=2442
Patch1: tiff-4.0.3-compress-warning.patch Patch1: tiff-4.0.3-compress-warning.patch
# PATCH-FIX-UPSTREAM mvetter@suse.com tiff-CVE-2022-48281.patch -- bsc#1207413
Patch2: tiff-CVE-2022-48281.patch
BuildRequires: gcc-c++ BuildRequires: gcc-c++
BuildRequires: libjbig-devel BuildRequires: libjbig-devel
BuildRequires: libjpeg-devel BuildRequires: libjpeg-devel