diff --git a/libtiff-CVE-2009-2347.patch b/libtiff-CVE-2009-2347.patch index f1fd62b..0a97da2 100644 --- a/libtiff-CVE-2009-2347.patch +++ b/libtiff-CVE-2009-2347.patch @@ -1,3 +1,9 @@ +This is a portion of the patch we were carrying for CVE-2009-2347 in 3.8.2. +Unfortunately the upstream fix in 3.9.2 is incomplete, so we still need this +part. Reported upstream at +http://bugzilla.maptools.org/show_bug.cgi?id=2079 + + diff -Naur tiff-3.9.2.orig/tools/tiff2rgba.c tiff-3.9.2/tools/tiff2rgba.c --- tiff-3.9.2.orig/tools/tiff2rgba.c 2009-08-20 16:23:53.000000000 -0400 +++ tiff-3.9.2/tools/tiff2rgba.c 2009-12-03 12:19:07.000000000 -0500 diff --git a/libtiff-acversion.patch b/libtiff-acversion.patch index b188563..60920dc 100644 --- a/libtiff-acversion.patch +++ b/libtiff-acversion.patch @@ -1,3 +1,7 @@ +This patch is needed for building the package as of F-11. It can be +dropped whenever autoconf 2.63 is no longer used on any live branch. + + diff -Naur tiff-3.9.2.orig/configure.ac tiff-3.9.2/configure.ac --- tiff-3.9.2.orig/configure.ac 2009-11-04 12:11:20.000000000 -0500 +++ tiff-3.9.2/configure.ac 2009-12-03 12:52:41.000000000 -0500 diff --git a/libtiff-mantypo.patch b/libtiff-mantypo.patch index 519a871..c7e91b4 100644 --- a/libtiff-mantypo.patch +++ b/libtiff-mantypo.patch @@ -1,3 +1,8 @@ +Minor typo, reported upstream at +http://bugzilla.maptools.org/show_bug.cgi?id=2129 +This patch should not be needed as of libtiff 4.0. + + diff -Naur tiff-3.9.2.orig/man/tiffset.1 tiff-3.9.2/man/tiffset.1 --- tiff-3.9.2.orig/man/tiffset.1 2006-04-20 08:17:19.000000000 -0400 +++ tiff-3.9.2/man/tiffset.1 2009-12-03 12:11:58.000000000 -0500