linux/poky.git/meta/recipes-multimedia/libtiff, branch yocto-3.1.18

tiff: Add patches to fix multiple CVEs

2022-05-20T09:08:00+00:00

Add patches to fix below CVE issues CVE-2022-0865 CVE-2022-0907 CVE-2022-0908 CVE-2022-0909 CVE-2022-0924 (From OE-Core rev: 7c71434832caf6a15f8fb884d028a8c1bf4090a9) Signed-off-by: Ranjitsinh Rathod Signed-off-by: Ranjitsinh Rathod Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

tiff: Fix CVE-2022-0891

2022-05-03T16:50:06+00:00

Fix CVE-2022-0891 for tiff Link: https://sources.debian.org/src/tiff/4.1.0+git191117-2%7Edeb10u4/debian/patches/CVE-2022-0891.patch/ (From OE-Core rev: 512a8b30c816d2c9d85af7d7a1850b0450f1b6f4) Signed-off-by: Sana Kazi Signed-off-by: Sana Kazi Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

tiff: Add backports for two CVEs from upstream

2022-03-11T23:44:42+00:00

Based on commit from master (From OE-Core rev: a5bb7cc568d5da3633f3854295b0ebe46a2dd863) Signed-off-by: Richard Purdie (cherry picked from commit 6ae14b4ff7a655b48c6d99ac565d12bf8825414f) Signed-off-by: Sana Kazi Signed-off-by: Sana Kazi Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

tiff: fix for CVE-2022-22844

2022-03-02T00:21:36+00:00

Backport patch from: https://gitlab.com/libtiff/libtiff/-/commit/03047a26952a82daaa0792957ce211e0aa51bc64 (From OE-Core rev: 68b59e37d25ead5aaf68d24c6a55b7d1864203fa) Signed-off-by: Purushottam Choudhary Signed-off-by: Purushottam Choudhary Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

tiff: Add fix for CVE-2020-35521 and CVE-2020-35522

2021-06-03T15:30:55+00:00

Added fix for CVE-2020-35521 and CVE-2020-35522 Link: https://gitlab.com/libtiff/libtiff/-/commit/b5a935d96b21cda0f434230cdf8ca958cd8b4eef.patch Added below support patches for CVE-2020-35521 and CVE-2020-35522 1. 001_support_patch_for_CVE-2020-35521_and_CVE-2020-35522.patch Link: https://gitlab.com/libtiff/libtiff/-/commit/02875964eba5c4a2ea98c41562835428214adfe7.patch 2. 002_support_patch_for_CVE-2020-35521_and_CVE-2020-35522.patch Link: https://gitlab.com/libtiff/libtiff/-/commit/ca70b5e702b9f503333344b2d46691de9feae84e.patch (From OE-Core rev: 03a65159093e0b2df4bc867c873b5c43721b9a9c) Signed-off-by: akash hadke Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

tiff: Exclude CVE-2015-7313 from cve-check

2021-05-20T11:36:41+00:00

Some fix upstream addresses the issue, it isn't clear which change this was. Our current version doesn't have issues with the test image though so we can exclude. (From OE-Core rev: 256f6be93eed82c7db8a76b1038e105331c0009f) Signed-off-by: Richard Purdie (cherry picked from commit 3874da694ae1d9de06dd003bd80705205e2b033b) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

tiff: fix CVE-2020-35523 CVE-2020-35524

2021-05-20T11:36:41+00:00

(From OE-Core rev: 84239e11227bc0b0e2e6d3b2faa7a9ee63025dd1) Signed-off-by: Lee Chee Yang Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

recipes-multimedia: Add missing HOMEPAGE and DESCRIPTION for recipes.

2021-03-18T21:20:24+00:00

Fixes: [YOCTO #13471] (From OE-Core rev: 70d05a262924979403d5c70ba8dc5a5f65dfcac3) Signed-off-by: Ida Delphine Signed-off-by: Richard Purdie (cherry picked from commit 312994268bb68a012a61c99e1c3697e8de60a2ce) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

tiff: update to 4.1.0

2019-11-21T23:08:19+00:00

Drop backported patches. (From OE-Core rev: e5ecf2604e5b8c957eb3bae21fb3c9b2b1b7e12f) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

libtiff: fix CVE-2019-17546

2019-10-31T16:09:35+00:00

Apply unmodified patch from upstream. (From OE-Core rev: 844e7aa217f5ecf46766a07d46f9d7f083668e8e) Signed-off-by: Joe Slater Signed-off-by: Ross Burton Signed-off-by: Richard Purdie