[Lunar-commits] <moonbase> tiff: security patches

[Auke Kok]

commit 820742afbd15643961fa4b323c2b632b175dec0a
Author: Paul Bredbury <brebs at sent.com>
Date:   Mon Aug 10 08:01:15 2009 +0200

    tiff: security patches
---
 graphics/tiff/BUILD   |   15 +++++++++++++++
 graphics/tiff/DETAILS |    7 +++++--
 2 files changed, 20 insertions(+), 2 deletions(-)

diff --git a/graphics/tiff/BUILD b/graphics/tiff/BUILD
new file mode 100644
index 0000000..6660647
--- /dev/null
+++ b/graphics/tiff/BUILD
@@ -0,0 +1,15 @@
+(
+
+  # Apply all 6 patches from libtiff-3.8.2-15.fc12 - http://koji.fedoraproject.org/koji/packageinfo?packageID=328
+  # http://www.gentoo.org/security/en/glsa/glsa-200908-03.xml
+  # Patch0: tiffsplit-overflow.patch
+  # Patch1: libtiff-3.8.2-ormandy.patch
+  # Patch2: libtiff-3.8.2-CVE-2006-2193.patch
+  # Patch3: libtiff-3.8.2-mantypo.patch
+  # Patch4: libtiff-3.8.2-lzw-bugs.patch
+  # Patch5: libtiff-3.8.2-CVE-2009-2347.patch
+  patch_it $SOURCE_CACHE/$SOURCE2 1 &&
+  
+  default_build
+
+) > $C_FIFO 2>&1
diff --git a/graphics/tiff/DETAILS b/graphics/tiff/DETAILS
index 7967ee2..e5468c5 100644
--- a/graphics/tiff/DETAILS
+++ b/graphics/tiff/DETAILS
@@ -1,12 +1,15 @@
           MODULE=tiff
          VERSION=3.8.2
           SOURCE=$MODULE-$VERSION.tar.gz
+         SOURCE2=tiff-3.8.2-15fc12.patch.bz2
    SOURCE_URL[0]=ftp://ftp.remotesensing.org/pub/libtiff/
    SOURCE_URL[1]=http://dl.maptools.org/dl/libtiff/
+     SOURCE2_URL=$PATCH_URL
       SOURCE_VFY=sha1:549e67b6a15b42bfcd72fe17cda7c9a198a393eb
-        WEB_SITE=http://www.libtiff.org
+     SOURCE2_VFY=sha1:1d304f437c4dfefe056bf780e91866cd7d339c26
+        WEB_SITE=http://www.libtiff.org/
          ENTERED=20010922
-         UPDATED=20061118
+         UPDATED=20090809
            SHORT="tiff provides support for the Tag Image File Format."
 
 cat << EOF