Sophie

• Search
• Distribution
• Explorer
• Source & Patches
• Chat
• Help
• About

distrib > Mageia > 6 > x86_64 > media > core-updates > by-pkgid > 9584b633985038dd31bfacb6722baf11 > changelog

lib64tiff-devel-4.0.10-1.git20190219.1.mga6.x86_64.rpm

• Info
• Deps
• Files
• Scripts
• ChangeLog
• Location
• Others versions
• Analyse

• Thu Feb 21 2019 ns80 <ns80> 4.0.10-1.git20190219.1.mga6

  + Revision: 1369028
  - update to latest git snapshot for CVE-2019-7663 (mga#24393)
  - update to latest git snapshot for CVE-2019-6128 (mga#24343)
  - add patches for CVE-2018-12900, CVE-2018-18557 and CVE-2018-19210 (mga#24053)
  - add upstream patch for CVE-2018-18661 (mga#23788)
  - add upstream patch for CVE-2018-1710[01] (mga#23753)
  - add patches for CVE-2016-5319, CVE-2017-17942 and CVE-2018-10779 (mga#23142)
  - add upstream patch for CVE-2018-8905 (mga#23021)
  - add upstream patch for CVE-2018-10963 (mga#23021)
  - add upstream patch for CVE-2018-7456 (mga#22920)
  - add upstream patches for CVE-2017-11613 and CVE-2018-5784 (mga#22799)
  - add patches for CVE-2017-17095, CVE-2017-9935 and CVE-2017-18013 (mga#22120)
  - new version 4.0.9

• Fri Jul 7 2017 ns80 <ns80> 4.0.8-3.mga6

  + Revision: 1109432
  - update to latest CVS snapshot to fix CVE-2017-9936 and CVE-2017-10688 (mga#21195)

• Fri Jun 2 2017 ns80 <ns80> 4.0.8-2.mga6

  + Revision: 1105783
  - add upstream patches for bug fixes and an unfixed remaining portion of CVE-2014-8128 (mga#20057)

• Mon May 22 2017 ns80 <ns80> 4.0.8-1.mga6

  + Revision: 1104031
  - new version 4.0.8

• Thu May 18 2017 ns80 <ns80> 4.0.7-8.mga6

  + Revision: 1102972
  - update to latest CVS snapshot to fix several security problems

• Mon May 15 2017 ns80 <ns80> 4.0.7-7.mga6

  + Revision: 1101700
  - update to latest CVS snapshot to fix several security problems

• Thu May 11 2017 ns80 <ns80> 4.0.7-6.mga6

  + Revision: 1100239
  - update to latest CVS snapshot to fix some problems related to memory management

• Tue May 2 2017 ns80 <ns80> 4.0.7-5.mga6

  + Revision: 1098415
  - update to latest CVS snapshot to fix some memory leaks

• Fri Apr 28 2017 ns80 <ns80> 4.0.7-4.mga6

  + Revision: 1097876
  - update to latest CVS snapshot that fixes some memory leaks and crashes

• Wed Apr 5 2017 ns80 <ns80> 4.0.7-3.mga6

  + Revision: 1095955
  - update to latest CVS snapshot to fix memory leaks

• Fri Jan 27 2017 ns80 <ns80> 4.0.7-2.mga6

  + Revision: 1083570
  - update to latest CVS snapshot for CVE-2016-1009[2-4], CVE-2017-5225 and other security bugs

• Mon Nov 21 2016 ns80 <ns80> 4.0.7-1.mga6

  + Revision: 1068539
  - new version 4.0.7

• Fri Nov 18 2016 ns80 <ns80> 4.0.6-11.mga6

  + Revision: 1068287
  - fix an out-of-bounds Write memcpy and less bound check in tiff2pdf (mga#19813)

• Fri Nov 18 2016 ns80 <ns80> 4.0.6-10.mga6

  + Revision: 1068153
  - fix a regression introduced by the fix for CVE-2016-9297

• Mon Nov 14 2016 ns80 <ns80> 4.0.6-9.mga6

  + Revision: 1067194
  - update to latest CVS commit to fix CVE-2016-9273 and CVE-2016-9297 (mga#19758)

• Fri Nov 4 2016 ns80 <ns80> 4.0.6-8.mga6

  + Revision: 1065252
  - update to 2016-10-31 CVS commit to fix potential buffer overflows

• Mon Oct 31 2016 ns80 <ns80> 4.0.6-7.mga6

  + Revision: 1064268
  - update to 2016-10-26 CVS commit to fix:
  * an out-of-bound read on some tiled images
  * CVE-2014-8127 (duplicate: CVE-2016-3658)
  * segfault when specifying -r without argument (fax2tiff)

• Fri Oct 21 2016 ns80 <ns80> 4.0.6-6.mga6

  + Revision: 1062886
  - update to 2016-10-14 CVS commit to fix an out-of-bound read of up to 3 bytes in readContigTilesIntoBuffer()

• Fri Oct 14 2016 ns80 <ns80> 4.0.6-5.mga6

  + Revision: 1060739
  - update to 2016-10-09 CVS commit for CVE-2016-5652 and 3 other security issues

• Wed Oct 5 2016 ns80 <ns80> 4.0.6-4.mga6

  + Revision: 1058902
  - address a long list of CVEs (mga#17480):
  * update to latest CVS commit for CVE-2015-8668, CVE-2016-3186 (gif2tiff
  tool is not provided anymore), CVE-2016-3622, CVE-2016-3623, CVE-2016-3632,
  CVE-2016-3945, CVE-2016-3990, CVE-2016-3991, CVE-2016-5314, CVE-2016-5315,
  CVE-2016-5316, CVE-2016-5317, CVE-2016-5320, CVE-2016-5321, CVE-2016-5322,
  CVE-2016-5323, CVE-2016-5875, CVE-2016-6223
  * add a patch from Redhat for CVE-2015-7554 (partial solution, it seems)
  - some programs are not provided anymore (package libtiff-progs): bmp2tiff,
  gif2tiff, ras2tiff, rgb2ycbcr and thumbnail