- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch

• Files Changed
• Browse Source

- CVE-2023-25435 [bsc#1212607] tiffcrop is removed

• Files Changed
• Browse Source

    [bsc#1205422]
  * CVE-2022-22844 bsc#1194539
  * CVE-2022-2867 bsc#1202466
  * CVE-2022-2868 bsc#1202467
  * CVE-2022-2869 bsc#1202468
  * CVE-2022-34266 [bsc#1201723] [bsc#1201971]
  * CVE-2020-35521 bsc#1182808
  * CVE-2020-35522 bsc#1182809
  * CVE-2020-35523 bsc#1182811
  * CVE-2020-35524 bsc#1182812
  * CVE-2019-17546 bsc#1154365
  * CVE-2017-17095 bsc#1071031
  * CVE-2019-14973 bsc#1146608
  * CVE-2020-19131 bsc#1190312
  * fixes several CVEs mentioned below plus CVE-2018-18557 [bsc#1113094]
  and CVE-2018-18661 [bsc#1113672] and more
      (CVE-2017-12944, bsc#1054594)
  * CVE-2016-10092, CVE-2016-10093, CVE-2016-10094 [bsc#1017693]
      (bsc#990460, CVE-2016-6223)

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch

• Files Changed
• Browse Source

- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- security update:
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch

- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598.patch

• Files Changed
• Browse Source

- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch

• Files Changed
• Browse Source

- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch

• Files Changed
• Browse Source

- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch

• Files Changed
• Browse Source

- update to 4.4.0:
  * TIFFIsBigTiff() function added.
  * Functions TIFFFieldSetGetSize() and TIFFieldSetGetCountSize() added.
  * LZWDecode(): major speed improvements (~30% faster)
  * Predictor 2 (horizontal differenciation): support 64-bit
  * Support libjpeg 9d
  * avoid hang in TIFFRewriteDirectory() if a classic file > 4 GB is attempted
    to be created
  * tif_jbig.c: fix crash when reading a file with multiple IFD in
    memory-mapped mode and when bit reversal is needed
  * TIFFFetchNormalTag(): avoid calling memcpy() with a null source pointer and
    size of zero
  * TIFFWriteDirectoryTagData(): turn assertion on data length into a runtime
    check
  * TIFFFetchStripThing(): avoid calling memcpy() with a null source pointer
    and size of zero
  * TIFFReadDirectory(): avoid calling memcpy() with a null source pointer and
    size of zero
  * TIFFYCbCrToRGBInit(): avoid Integer-overflow
  * TIFFGetField(TIFFTAG_STRIPBYTECOUNTS/TIFFTAG_STRIPOFFSETS): return error if
    returned pointer is NULL (fixes #342)
  * OJPEG: avoid assertion when using TIFFReadScanline()
  * TIFFReadDirectory: fix OJPEG hack
  * LZW codec: fix support for strips/tiles > 2 GB on Windows
  * TIFFAppendToStrip(): fix rewrite-in-place logic
  * Fix TIFFRewriteDirectory discarding directories.
  * TIFFReadCustomDirectory(): avoid crash when reading SubjectDistance tag on
    a non EXIF directory
  * Fix Segmentation fault printing GPS directory if Altitude tag is present
  * tif_jpeg.c: do not emit progressive scans with mozjpeg. (#266)

• Files Changed
• Browse Source

- security update:
  * CVE-2022-0907 [bsc#1197070]
    + tiff-CVE-2022-0907.patch

- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch

- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch

- switch source url to https

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- version update to 4.2.0
  Major changes:
  * Optional support for using libdeflate is added.
  * Many of the tools now support a memory usage limit.
  See http://www.simplesystems.org/libtiff/v4.2.0.html for more.

• Files Changed
• Browse Source

- Drop webp support as it would introduce build cycle (forwarded request 790408 from pluskalm)

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch

- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch

- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]

- amend tiff-CVE-2018-12900.patch: fix wrong error message
  [bsc#1099257]

• Files Changed
• Browse Source

• Files Changed
• Browse Source