Received: from mail.netbsd.org (mail.netbsd.org [149.20.53.66]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "mail.NetBSD.org", Issuer "Postmaster NetBSD.org" (verified OK)) by mollari.NetBSD.org (Postfix) with ESMTPS id 5D1B07105D for ; Thu, 15 Aug 2013 14:58:50 +0000 (UTC) Received: by mail.netbsd.org (Postfix, from userid 605) id B8D2B14A2AF; Thu, 15 Aug 2013 14:58:49 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 1A65F14A2AE for ; Thu, 15 Aug 2013 14:58:47 +0000 (UTC) X-Virus-Scanned: amavisd-new at NetBSD.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.NetBSD.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id IDBv911EPNg6 for ; Thu, 15 Aug 2013 14:58:46 +0000 (UTC) Received: from cvs.netbsd.org (cvs.NetBSD.org [IPv6:2001:4f8:3:7:2e0:81ff:fe30:95bd]) by mail.netbsd.org (Postfix) with ESMTP id 8B43714A2AC for ; Thu, 15 Aug 2013 14:58:46 +0000 (UTC) Received: by cvs.netbsd.org (Postfix, from userid 500) id 8919496; Thu, 15 Aug 2013 14:58:46 +0000 (UTC) Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" MIME-Version: 1.0 Date: Thu, 15 Aug 2013 14:58:46 +0000 From: "Matthias Drochner" Subject: CVS commit: pkgsrc/graphics/tiff To: pkgsrc-changes@NetBSD.org Reply-To: drochner@netbsd.org X-Mailer: log_accum Message-Id: <20130815145846.8919496@cvs.netbsd.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk Module Name: pkgsrc Committed By: drochner Date: Thu Aug 15 14:58:46 UTC 2013 Modified Files: pkgsrc/graphics/tiff: Makefile distinfo pkgsrc/graphics/tiff/patches: patch-CVE-2013-1960_1961 Added Files: pkgsrc/graphics/tiff/patches: patch-CVE-2013-4231 Log Message: add patches from upstream CVS and Redhat bugzilla to fix buffer overflow and use-after-free problems in the "gif2tiff" and "tiff2pdf" command line tools (the library is not affected) (CVE-2013-4231, CVE-2013-4232, CVE-2013-4244) bump PKGREV To generate a diff of this commit: cvs rdiff -u -r1.112 -r1.113 pkgsrc/graphics/tiff/Makefile cvs rdiff -u -r1.60 -r1.61 pkgsrc/graphics/tiff/distinfo cvs rdiff -u -r1.1 -r1.2 \ pkgsrc/graphics/tiff/patches/patch-CVE-2013-1960_1961 cvs rdiff -u -r0 -r1.1 pkgsrc/graphics/tiff/patches/patch-CVE-2013-4231 Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.