Global
/
vcpkg
mirror of https://github.com/microsoft/vcpkg.git
1
0
Fork 0
Code Activity

[tiff] fix invalid memory accesses (#24121) 

* [tiff] Patch for CVE-2022-0561 (microsoft#24120)

See https://nvd.nist.gov/vuln/detail/CVE-2022-0561 for more details

* [tiff] Patch for CVE-2022-0562 (microsoft#24120)

See https://nvd.nist.gov/vuln/detail/CVE-2022-0562 for more details

* [tiff] Patch for CVE-2022-0865 (microsoft#24120)

See https://nvd.nist.gov/vuln/detail/CVE-2022-0865 for more details

* [tiff] Patch for CVE-2022-0891 (microsoft#24120)

See https://nvd.nist.gov/vuln/detail/CVE-2022-0891 for more details

* [tiff] Patch for CVE-2022-0907 (microsoft#24120)

See https://nvd.nist.gov/vuln/detail/CVE-2022-0907 for more details

* [tiff] Patch for CVE-2022-0908 (microsoft#24120)

See https://nvd.nist.gov/vuln/detail/CVE-2022-0908 for more details

* [tiff] Patch for CVE-2022-0909 (microsoft#24120)

See https://nvd.nist.gov/vuln/detail/CVE-2022-0909 for more details

* [tiff] Patch for CVE-2022-0924 (microsoft#24120)

See https://nvd.nist.gov/vuln/detail/CVE-2022-0924 for more details

* [tiff] Patch for CVE-2022-22844 (microsoft#24120)

See https://nvd.nist.gov/vuln/detail/CVE-2022-22844 for more details

* [tiff] bump portversion and regenerate registries (microsoft#24120)
This commit is contained in:
Alonso Schaich 2022-04-21 18:55:04 +00:00 committed by GitHub
parent 9db088e2b0
commit 0e1107ce62
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
4 changed files with 70 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

63
ports/tiff/portfile.cmake
View File

@ -1,5 +1,59 @@
set(LIBTIFF_VERSION 4.3.0)
vcpkg_download_distfile(CVE_2022_0561_diff
URLS https://gitlab.com/libtiff/libtiff/-/commit/eecb0712f4c3a5b449f70c57988260a667ddbdef.diff
FILENAME libtiff-CVE-2022-0561.diff
SHA512 48df4e93202723778fdb6b87bcb7e2e4118546c6deb47e9999b8818e69420ad52a4a7823c68ab74d30657adb2278641971e43db771a1796fda95d2433ad991a0
)
vcpkg_download_distfile(CVE_2022_0562_diff
URLS https://gitlab.com/libtiff/libtiff/-/commit/561599c99f987dc32ae110370cfdd7df7975586b.diff
FILENAME libtiff-CVE-2022-0562.diff
SHA512 4346098e7a2433cf15d02a7baa3d1fa4b648f58845200264ecc0a230035f15da4cf1427c4a4ff73797bc01f105bd9ff705371c2f3867be4f9103b07d4d0edea8
)
vcpkg_download_distfile(CVE_2022_0865_diff
URLS https://gitlab.com/libtiff/libtiff/-/merge_requests/306.diff
FILENAME libtiff-CVE-2022-0865.diff
SHA512 f22e0cee03716e6c6f130606c74acc7033dd61e20276e38e89a0ba485857d05a7bc22e445c52010797b7020febc30d3aca854d8a0c4ed0e2453201de550b4058
)
vcpkg_download_distfile(CVE_2022_0891_diff
URLS https://gitlab.com/libtiff/libtiff/-/merge_requests/307.diff
FILENAME libtiff-CVE-2022-0891.diff
SHA512 6a88a0423057da11121d5297e2f425199341cbc6b299a0f77dd57baddf3f6a022a6dfe1fb97caabfd6e95a40b6c95a0e6b9a80e199054c271ccb257e23671fcf
)
vcpkg_download_distfile(CVE_2022_0907_diff
URLS https://gitlab.com/libtiff/libtiff/-/merge_requests/314.diff
FILENAME libtiff-CVE-2022-0907.diff
SHA512 72455bb9698e8670b7ffcc1e6c644b9fd4d3aab46ca5940dc8130c796435a838f05555bf85293770c77b73690b137cd6931d59d61d649482b42b7b98afe88f3a
)
vcpkg_download_distfile(CVE_2022_0908_diff
URLS https://gitlab.com/libtiff/libtiff/-/commit/a95b799f65064e4ba2e2dfc206808f86faf93e85.diff
FILENAME libtiff-CVE-2022-0908.diff
SHA512 1f6bb30c00d671665870aea46898390c1545d00d80e17db07b5136f6bfb85fff8d95c2c63493066b9257d871858935497062d992cf978ca5037d8b079bfdeab1
)
vcpkg_download_distfile(CVE_2022_0909_diff
URLS https://gitlab.com/libtiff/libtiff/-/merge_requests/310.diff
FILENAME libtiff-CVE-2022-0909.diff
SHA512 d675ac09a40136bdc808ae75030f199ebcbaf38b2e904b3b26b21d18e39fe89a1c703d5ee6156b337ec9dde29ad311cb6551de984aa87d796c9af0a26d758af3
)
vcpkg_download_distfile(CVE_2022_0924_diff
URLS https://gitlab.com/libtiff/libtiff/-/merge_requests/311.diff
FILENAME libtiff-CVE-2022-0924.diff
SHA512 dcd22b4ef121128aabc8b2aadf4eac16597ee8b211bb06467c93bbccafe47a45917f07a6f4264d43f4c1596eb54d7d0a073987e6899a9f8d057632244cf75c67
)
vcpkg_download_distfile(CVE_2022_22844_diff
URLS https://gitlab.com/libtiff/libtiff/-/merge_requests/287.diff
FILENAME libtiff-CVE-2022-22844.diff
SHA512 2a3bb8ae9191794bff52a4b776a35b244a24e3b2ca963ccfd40166566fae18a2333d7db6c2e2cf17daa9fe61eaca3bd8c36d9807fd1aa0491a041ec22d65c70e
)
vcpkg_from_gitlab(
GITLAB_URL https://gitlab.com
OUT_SOURCE_PATH SOURCE_PATH
@ -10,6 +64,15 @@ vcpkg_from_gitlab(
PATCHES cmakelists.patch
fix-pkgconfig.patch
FindCMath.patch
${CVE_2022_0561_diff}
${CVE_2022_0562_diff}
${CVE_2022_0865_diff}
${CVE_2022_0891_diff}
${CVE_2022_0907_diff}
${CVE_2022_0908_diff}
${CVE_2022_0909_diff}
${CVE_2022_0924_diff}
${CVE_2022_22844_diff}
)
set(EXTRA_OPTIONS "")

2
ports/tiff/vcpkg.json
View File

@ -1,7 +1,7 @@
{
"name": "tiff",
"version": "4.3.0",
"port-version": 7,
"port-version": 8,
"description": "A library that supports the manipulation of TIFF image files",
"homepage": "https://libtiff.gitlab.io/libtiff/",
"license": null,

2
versions/baseline.json
View File

@ -6942,7 +6942,7 @@
},
"tiff": {
"baseline": "4.3.0",
"port-version": 7
"port-version": 8
},
"tinkerforge": {
"baseline": "2.1.25",

5
versions/t-/tiff.json
View File

@ -1,5 +1,10 @@
{
"versions": [
{
"git-tree": "e2cafe3465d7c00233114c75abd86ed11538c186",
"version": "4.3.0",
"port-version": 8
},
{
"git-tree": "4f05b5c8b426ce84fbc8930c8f935b792feeb1f4",
"version": "4.3.0",