18 Commits

Author SHA256 Message Date
0dd61ca933 Accepting request 1314434 from graphics
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/1314434
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tiff?expand=0&rev=108
2025-10-29 20:06:23 +00:00
92b68ad517 OBS-URL: https://build.opensuse.org/package/show/graphics/tiff?expand=0&rev=208 2025-10-22 16:16:51 +00:00
1921867e07 Accepting request 1310990 from graphics
Mention the bsc# and CVE

OBS-URL: https://build.opensuse.org/request/show/1310990
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tiff?expand=0&rev=107
2025-10-14 16:05:03 +00:00
47654d87ac OBS-URL: https://build.opensuse.org/package/show/graphics/tiff?expand=0&rev=206 2025-10-13 05:36:12 +00:00
218e8a4f3b OBS-URL: https://build.opensuse.org/package/show/graphics/tiff?expand=0&rev=205 2025-10-13 05:34:26 +00:00
a97cdde9c0 Accepting request 1305886 from graphics
- Update to 4.7.1:
  Software configuration changes:
  * Define HAVE_JPEGTURBO_DUAL_MODE_8_12 and LERC_STATIC in tif_config.h.
  * CMake: define WORDS_BIGENDIAN via tif_config.h
  * doc/CMakeLists.txt: remove useless cmake_minimum_required()
  * CMake: fix build with LLVM/Clang 17 (fixes issue #651)
  * CMake: set CMP0074 new policy
  * Set LINKER_LANGUAGE for C targets with C deps
  * Export tiffxx cmake target (fixes issue #674)
  * autogen.sh: Enable verbose wget.
  * configure.ac: Syntax updates for Autoconf 2.71
  * autogen.sh: Re-implement based on autoreconf. Failure to update
    config.guess/config.sub does not return error (fixes issue #672)
  * CMake: fix CMake 4.0 warning when minimum required version is < 3.10.
  * CMake: Add build option tiff-static (fixes issue #709)
  Library changes:
  * Add TIFFOpenOptionsSetWarnAboutUnknownTags() for explicit control
    about emitting warnings for unknown tags. No longer emit warnings
    about unknown tags by default
  * tif_predict.c: speed-up decompression in some cases.
  Bug fixes:
  * tif_fax3: For fax group 3 data if no EOL is detected, reading is
    retried without synchronisation for EOLs. (fixes issue #54)
  * Updating TIFFMergeFieldInfo() with read_count=write_count=0 for
    FIELD_IGNORE. Updating TIFFMergeFieldInfo() with read_count=write_count=0 for
    FIELD_IGNORE. Improving handling when field_name = NULL. (fixes issue #532)
  * tiff.h: add COMPRESSION_JXL_DNG_1_7=52546 as used for JPEGXL compression in
    the DNG 1.7 specification
  * TIFFWriteDirectorySec: Increment string length for ASCII tags for codec tags
    defined with FIELD_xxx bits, as it is done for FIELD_CUSTOM tags. (fixes issue #648)

OBS-URL: https://build.opensuse.org/request/show/1305886
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tiff?expand=0&rev=106
2025-09-20 20:03:48 +00:00
4a2755aac5 - Update to 4.7.1:
Software configuration changes:
  * Define HAVE_JPEGTURBO_DUAL_MODE_8_12 and LERC_STATIC in tif_config.h.
  * CMake: define WORDS_BIGENDIAN via tif_config.h
  * doc/CMakeLists.txt: remove useless cmake_minimum_required()
  * CMake: fix build with LLVM/Clang 17 (fixes issue #651)
  * CMake: set CMP0074 new policy
  * Set LINKER_LANGUAGE for C targets with C deps
  * Export tiffxx cmake target (fixes issue #674)
  * autogen.sh: Enable verbose wget.
  * configure.ac: Syntax updates for Autoconf 2.71
  * autogen.sh: Re-implement based on autoreconf. Failure to update
    config.guess/config.sub does not return error (fixes issue #672)
  * CMake: fix CMake 4.0 warning when minimum required version is < 3.10.
  * CMake: Add build option tiff-static (fixes issue #709)
  Library changes:
  * Add TIFFOpenOptionsSetWarnAboutUnknownTags() for explicit control
    about emitting warnings for unknown tags. No longer emit warnings
    about unknown tags by default
  * tif_predict.c: speed-up decompression in some cases.
  Bug fixes:
  * tif_fax3: For fax group 3 data if no EOL is detected, reading is
    retried without synchronisation for EOLs. (fixes issue #54)
  * Updating TIFFMergeFieldInfo() with read_count=write_count=0 for
    FIELD_IGNORE. Updating TIFFMergeFieldInfo() with read_count=write_count=0 for
    FIELD_IGNORE. Improving handling when field_name = NULL. (fixes issue #532)
  * tiff.h: add COMPRESSION_JXL_DNG_1_7=52546 as used for JPEGXL compression in
    the DNG 1.7 specification
  * TIFFWriteDirectorySec: Increment string length for ASCII tags for codec tags
    defined with FIELD_xxx bits, as it is done for FIELD_CUSTOM tags. (fixes issue #648)

OBS-URL: https://build.opensuse.org/package/show/graphics/tiff?expand=0&rev=203
2025-09-18 19:24:53 +00:00
026b477952 Accepting request 1303201 from graphics
- security update:
  * CVE-2025-8961 [bsc#1248117]
    Fix segmentation fault via main function of tiffcrop utility
    + tiff-CVE-2025-8961.patch

OBS-URL: https://build.opensuse.org/request/show/1303201
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tiff?expand=0&rev=105
2025-09-10 15:29:36 +00:00
02e4749b90 - security update:
* CVE-2025-8961 [bsc#1248117]
    Fix segmentation fault via main function of tiffcrop utility
    + tiff-CVE-2025-8961.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/tiff?expand=0&rev=201
2025-09-08 12:37:09 +00:00
fc85f78877 Accepting request 1300783 from graphics
- security update:
  * CVE-2025-8534 [bsc#1247582]
    Fix null pointer dereference in function PS_Lvl2page
    + tiff-CVE-2025-8534.patch
  * CVE-2025-9165 [bsc#1248330]
    Fix local execution manipulation can lead to memory leak
    + tiff-CVE-2025-9165.patch
  * CVE-2024-13978 [bsc#1247581]
    Fix null pointer dereference in tiff2pdf
    + tiff-CVE-2024-13978.patch

OBS-URL: https://build.opensuse.org/request/show/1300783
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tiff?expand=0&rev=104
2025-08-22 15:47:06 +00:00
21ebe97d44 - security update:
* CVE-2025-8534 [bsc#1247582]
    Fix null pointer dereference in function PS_Lvl2page
    + tiff-CVE-2025-8534.patch
  * CVE-2025-9165 [bsc#1248330]
    Fix local execution manipulation can lead to memory leak
    + tiff-CVE-2025-9165.patch
  * CVE-2024-13978 [bsc#1247581]
    Fix null pointer dereference in tiff2pdf
    + tiff-CVE-2024-13978.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/tiff?expand=0&rev=199
2025-08-21 10:46:03 +00:00
a6c7dce6e2 Accepting request 1297516 from graphics
- bsc#1243503:
  Fix TIFFMergeFieldInfo() read_count=write_count=0
  + tiff-4.7.0-bsc1243503.patch

- security update:
  * CVE-2025-8176 [bsc#1247108]
    Fix heap use-after-free in tools/tiffmedian.c
    + tiff-CVE-2025-8176.patch
  * CVE-2025-8177 [bsc#1247106]
    Fix possible buffer overflow in tools/thumbnail.c:setrow() 
    + tiff-CVE-2025-8177.patch

OBS-URL: https://build.opensuse.org/request/show/1297516
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tiff?expand=0&rev=103
2025-08-06 12:31:28 +00:00
af71c91f74 - bsc#1243503:
Fix TIFFMergeFieldInfo() read_count=write_count=0
  + tiff-4.7.0-bsc1243503.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/tiff?expand=0&rev=197
2025-08-04 13:42:27 +00:00
5e872113dc - security update:
* CVE-2025-8176 [bsc#1247108]
    Fix heap use-after-free in tools/tiffmedian.c
    + tiff-CVE-2025-8176.patch
  * CVE-2025-8177 [bsc#1247106]
    Fix possible buffer overflow in tools/thumbnail.c:setrow() 
    + tiff-CVE-2025-8177.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/tiff?expand=0&rev=196
2025-08-04 10:00:23 +00:00
661d065488 Accepting request 1255508 from graphics
OBS-URL: https://build.opensuse.org/request/show/1255508
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tiff?expand=0&rev=102
2025-03-25 21:07:39 +00:00
410f55dfd6 Accepting request 1255173 from home:sfalken:branches:graphics
- Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4
- Add %check section
- Remove Group: declarations, no longer used

OBS-URL: https://build.opensuse.org/request/show/1255173
OBS-URL: https://build.opensuse.org/package/show/graphics/tiff?expand=0&rev=194
2025-03-24 07:11:00 +00:00
7546ab746c Accepting request 1248192 from graphics
OBS-URL: https://build.opensuse.org/request/show/1248192
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tiff?expand=0&rev=101
2025-02-25 15:40:06 +00:00
d1e5aee8d3 - Use python3-Sphinx instead of %{primary_python}-Sphinx
based on recommendation from python maintainers.
  * Fixes build issue of man flavor on 15.6

OBS-URL: https://build.opensuse.org/package/show/graphics/tiff?expand=0&rev=192
2025-02-24 15:25:14 +00:00

View File

@@ -33,7 +33,7 @@ Thu Sep 18 19:11:37 UTC 2025 - Michael Vetter <mvetter@suse.com>
defined with FIELD_xxx bits, as it is done for FIELD_CUSTOM tags. (fixes issue #648)
* Do not error out on a tag whose tag count value is zero, just issue a warning.
Fix parsing a private tag 0x80a6 (fixes issue #647)
* TIFFDefaultTransferFunction(): give up beyond td_bitspersample = 24
* TIFFDefaultTransferFunction(): give up beyond td_bitspersample = 24
Fixes https://github.com/OSGeo/gdal/issues/10875)
* tif_getimage.c: Remove unnecessary calls to TIFFRGBAImageOK() (fixes issue #175)
* Fix writing a Predictor=3 file with non-native endianness
@@ -104,7 +104,7 @@ Thu Sep 18 19:11:37 UTC 2025 - Michael Vetter <mvetter@suse.com>
* TIFFRGBAImage.rst note added for incorrect saving of images with TIFF orientation
from 5 (LeftTop) to 8 (LeftBottom) in the raster.
* TIFFRGBAImage.rst note added about un-associated alpha handling (fixes issue #67)
* Update "Defining New TIFF Tags" description. (fixes issue #642)
* Update "Defining New TIFF Tags" description. (fixes issue #642, bsc#1248278, CVE-2025-8851)
* Fix return type of TIFFReadEncodedTile()
* Update the documentation to reflect deprecated typedefs.
* TIFFWriteDirectory.rst: Clarify TIFFSetWriteOffset() only sets offset for image
@@ -165,7 +165,7 @@ Mon Aug 4 09:02:49 UTC 2025 - Michael Vetter <mvetter@suse.com>
Fix heap use-after-free in tools/tiffmedian.c
+ tiff-CVE-2025-8176.patch
* CVE-2025-8177 [bsc#1247106]
Fix possible buffer overflow in tools/thumbnail.c:setrow()
Fix possible buffer overflow in tools/thumbnail.c:setrow()
+ tiff-CVE-2025-8177.patch
-------------------------------------------------------------------
@@ -255,7 +255,7 @@ Wed Sep 18 08:02:11 UTC 2024 - Michael Vetter <mvetter@suse.com>
+ Add TIFFOpenOptionsSetMaxCumulatedMemAlloc(). This function complements
TIFFOpenOptionsSetMaxSingleMemAlloc() to define the maximum cumulated memory
allocations in byte, for a given TIFF handle, that libtiff internal memory
allocation functions are allowed.
allocation functions are allowed.
+ TIFFWriteDirectory(): Avoid overwriting following data if an IFD is enlarged.
+ TIFFXYZToRGB: avoid integer overflow (fixes issue #644)
+ uv_decode() and uv_encode(): avoid potential out-of-bounds array index (fixes issue #645)
@@ -372,10 +372,10 @@ Fri Sep 15 05:55:34 UTC 2023 - Paolo Stivanin <info@paolostivanin.com>
TIFF parameters to avoid use of uninitialized variable, or decoding
corrupted content without explicit error (fixes issue #581, issue #582).
* WebP codec: turn exact mode when creating lossless files to avoid
altering R,G,B values in areas where alpha=0
altering R,G,B values in areas where alpha=0
* Fix TransferFunction writing of only two transfer functions.
* TIFFReadDirectoryCheckOrder: avoid integer overflow. When it occurs,
it should be harmless in practice though
it should be harmless in practice though
* tiffcp: remove -i option (ignore errors)
* This version removes a big number of utilities that have suffered from
lack of maintenance over the years and were the source of various
@@ -432,7 +432,7 @@ Tue Jun 20 07:16:56 UTC 2023 - Martin Pluskal <mpluskal@suse.com>
- Drop no longer needed patches:
* tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
* tiff-CVE-2022-48281.patch
* tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch
* tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch
-------------------------------------------------------------------
Wed Feb 22 15:05:33 UTC 2023 - Michael Vetter <mvetter@suse.com>
@@ -483,10 +483,10 @@ Wed Jan 4 08:48:13 UTC 2023 - Paolo Stivanin <info@paolostivanin.com>
its capability of handling both 8-bit JPEG and 12-bit JPEG in a single build.
* autoconf/cmake: detect sphinx-build to build HTML and man pages
* CMakeLists.txt: fix warning with -Wdev
* CMake: correctly set default value of 'lzma' option when liblzma is detected
* CMake: correctly set default value of 'lzma' option when liblzma is detected
* CMake: Moved linking of CMath::CMath into CMath_LIBRARY check.
* Fix CMake build to be compatible with FetchContent.
* cmake: Correct duplicate definition of _CRT_SECURE_NO_WARNINGS
* cmake: Correct duplicate definition of _CRT_SECURE_NO_WARNINGS
* cmake: Fixes for Visual Studio 2022.
* Adds Requires.private generation so that pkg-config can correctly find
the dependencies of libtiff.
@@ -809,7 +809,7 @@ Mon Jun 4 12:55:54 UTC 2018 - pgajdos@suse.com
- security update
* CVE-2018-7456 [bsc#1082825]
+ tiff-CVE-2018-7456.patch
+ tiff-CVE-2018-7456.patch
-------------------------------------------------------------------
Fri May 18 09:18:26 UTC 2018 - pgajdos@suse.com
@@ -835,7 +835,7 @@ Tue Feb 20 16:18:33 UTC 2018 - mvetter@suse.com
Fri Feb 16 14:05:39 UTC 2018 - mvetter@suse.com
- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
Fix Heap-based buffer overflow in t2p_write_pdf
Fix Heap-based buffer overflow in t2p_write_pdf
-------------------------------------------------------------------
Thu Dec 21 13:03:18 UTC 2017 - dimstar@opensuse.org