From 8e28d22c914122aa7bfb70847370d8ae0f070688 Mon Sep 17 00:00:00 2001 From: Mark H Weaver Date: Tue, 16 Jun 2015 00:59:15 -0400 Subject: gnu: libtiff: Add fixes for several CVEs. * gnu/packages/patches/libtiff-CVE-2012-4564.patch, gnu/packages/patches/libtiff-CVE-2013-1960.patch, gnu/packages/patches/libtiff-CVE-2013-1961.patch, gnu/packages/patches/libtiff-CVE-2013-4231.patch, gnu/packages/patches/libtiff-CVE-2013-4232.patch, gnu/packages/patches/libtiff-CVE-2013-4243.patch, gnu/packages/patches/libtiff-CVE-2013-4244.patch, gnu/packages/patches/libtiff-CVE-2014-8127-pt1.patch, gnu/packages/patches/libtiff-CVE-2014-8127-pt2.patch, gnu/packages/patches/libtiff-CVE-2014-8127-pt3.patch, gnu/packages/patches/libtiff-CVE-2014-8127-pt4.patch, gnu/packages/patches/libtiff-CVE-2014-8128-pt1.patch, gnu/packages/patches/libtiff-CVE-2014-8128-pt2.patch, gnu/packages/patches/libtiff-CVE-2014-8128-pt3.patch, gnu/packages/patches/libtiff-CVE-2014-8128-pt4.patch, gnu/packages/patches/libtiff-CVE-2014-8128-pt5.patch, gnu/packages/patches/libtiff-CVE-2014-8129.patch, gnu/packages/patches/libtiff-CVE-2014-9330.patch, gnu/packages/patches/libtiff-CVE-2014-9655.patch: New files. * gnu-system.am (dist_patch_DATA): Add them. * gnu/packages/image.scm (libtiff)[source]: Add patches. --- gnu/packages/patches/libtiff-CVE-2013-4243.patch | 39 ++++++++++++++++++++++++ 1 file changed, 39 insertions(+) create mode 100644 gnu/packages/patches/libtiff-CVE-2013-4243.patch (limited to 'gnu/packages/patches/libtiff-CVE-2013-4243.patch') diff --git a/gnu/packages/patches/libtiff-CVE-2013-4243.patch b/gnu/packages/patches/libtiff-CVE-2013-4243.patch new file mode 100644 index 0000000000..a10884cd89 --- /dev/null +++ b/gnu/packages/patches/libtiff-CVE-2013-4243.patch @@ -0,0 +1,39 @@ +Copied from Debian + +Index: tiff/tools/gif2tiff.c +=================================================================== +--- tiff.orig/tools/gif2tiff.c ++++ tiff/tools/gif2tiff.c +@@ -280,6 +280,10 @@ readgifimage(char* mode) + fprintf(stderr, "no colormap present for image\n"); + return (0); + } ++ if (width == 0 || height == 0) { ++ fprintf(stderr, "Invalid value of width or height\n"); ++ return(0); ++ } + if ((raster = (unsigned char*) _TIFFmalloc(width*height+EXTRAFUDGE)) == NULL) { + fprintf(stderr, "not enough memory for image\n"); + return (0); +@@ -404,6 +408,10 @@ process(register int code, unsigned char + fprintf(stderr, "bad input: code=%d is larger than clear=%d\n",code, clear); + return 0; + } ++ if (*fill >= raster + width*height) { ++ fprintf(stderr, "raster full before eoi code\n"); ++ return 0; ++ } + *(*fill)++ = suffix[code]; + firstchar = oldcode = code; + return 1; +@@ -434,6 +442,10 @@ process(register int code, unsigned char + } + oldcode = incode; + do { ++ if (*fill >= raster + width*height) { ++ fprintf(stderr, "raster full before eoi code\n"); ++ return 0; ++ } + *(*fill)++ = *--stackp; + } while (stackp > stack); + return 1; -- cgit v1.2.3 1-04-08 17:12:06 +0200'>2021-04-08etc/committer: Disable diff colors....Ricardo Wurmus 2021-04-08etc/committer: Recompute hunks before processing changes....Ricardo Wurmus 2021-04-08etc/committer: Record minimal context for hunks to avoid problems....Ricardo Wurmus 2021-04-08etc/committer: Define delay duration as a variable....Ricardo Wurmus 2021-04-08etc/committer: Handle package additions....Ricardo Wurmus 2021-04-04news: Add 'de' translation....Florian Pelz 2021-04-03news: Clarify time window for account activation vulnerability....Ludovic Courtès 2021-04-03news: Recommend upgrade for account activation vulnerability....Ludovic Courtès 2021-04-03news: Add entry for user account activation vulnerability....Maxime Devos 2021-04-01news: Add 'de' translation....Florian Pelz 2021-03-31news: Add 'fr' translation....Ludovic Courtès 2021-03-30news: Add entry announcing powerpc64le-linux support....Chris Marusich 2021-03-23Add powerpc64le-linux as a supported Guix architecture....Chris Marusich 2021-03-18news: Add ‘de’ translation....Florian Pelz 2021-03-18news: Add ‘nl’ translation....Tobias Geerinckx-Rice 2021-03-18news: Update erratum for '--keep-failed' vulnerability....Tobias Geerinckx-Rice 2021-03-18news: Add erratum for '--keep-failed' vulnerability....Tobias Geerinckx-Rice 2021-03-18news: Fix ‘nl’ typo....Tobias Geerinckx-Rice 2021-03-18news: Add ‘nl’ translation....Tobias Geerinckx-Rice 2021-03-18news: Add ‘de’ translation.Florian Pelz 2021-03-18news: Add entry for '--keep-failed' vulnerability....Ludovic Courtès 2021-03-17news: Add 'fr' translation....Julien Lepiller 2021-03-16news: Add ‘de’ translation.Florian Pelz 2021-03-15news: Add news entry about changes to the QEMU binfmt service....Maxim Cournoyer 2021-03-11news: Update copyright....Florian Pelz 2021-03-11news: Add ‘nl’ translation....Tobias Geerinckx-Rice 2021-03-11news: Add ‘de’ translation.Florian Pelz 2021-03-10news: Add entry for 'guix import go'....Ludovic Courtès 2021-03-10ci: Remove hydra support....Mathieu Othacehe