FreshPorts -- graphics/tiff: Tools and library routines for working with TIFF images

tiff
ABI	latest	quarterly
FreeBSD:11:aarch64	4.0.9_1	4.1.0
FreeBSD:11:amd64	4.2.0	4.2.0
FreeBSD:11:armv6	4.0.6_1	4.1.0
FreeBSD:11:i386	4.2.0	4.2.0
FreeBSD:11:mips	4.0.6_1	-
FreeBSD:11:mips64	4.0.6_1	-
FreeBSD:12:aarch64	4.0.9_1	4.2.0
FreeBSD:12:amd64	4.2.0	4.2.0
FreeBSD:12:armv6	4.0.9_1	4.1.0
FreeBSD:12:armv7	4.0.9_1	4.1.0
FreeBSD:12:i386	4.2.0	4.2.0
FreeBSD:12:mips	-	-
FreeBSD:12:mips64	-	-
FreeBSD:12:powerpc64	-	4.2.0
FreeBSD:13:aarch64	4.2.0	4.2.0
FreeBSD:13:amd64	4.2.0	4.2.0
FreeBSD:13:armv6	4.2.0	4.2.0
FreeBSD:13:armv7	4.2.0	4.2.0
FreeBSD:13:i386	4.2.0	4.2.0
FreeBSD:13:mips	-	-
FreeBSD:13:mips64	-	-
FreeBSD:13:powerpc64	4.2.0	4.2.0
FreeBSD:14:aarch64	4.2.0	-
FreeBSD:14:amd64	4.2.0	-
FreeBSD:14:armv6	4.2.0	-
FreeBSD:14:armv7	4.2.0	-
FreeBSD:14:i386	4.2.0	-
FreeBSD:14:mips	-	-
FreeBSD:14:mips64	-	-
FreeBSD:14:powerpc64	4.2.0	-

graphics/tiff: Patch vulnerabilities These two patches were obtained from OpenBSD. An additional CVE is not yet addressed, but upstream indicates they are removing the gif2tiff utility as the mitigation in the upcoming 4.0.7. PR: 211113 MFH: 2016Q3 Security: CVE-2016-5875 Security: CVE-2016-3186

Add fixes for CVE-2015-8665, CVE-2015-8683 and other vulnerabilities. Besides fixing the two CVEs mentioned above, this change also pulls two other commits from libtiff upstream fixing other out-of-bounds reads that do not have corresponding CVEs and were reported directly in libtiff's bug tracker. PR: 205923 Approved by: portmgr (antoine) Obtained from: libtiff CVS repository Security: b65e4914-b3bc-11e5-8255-5453ed2e2b49 Security: bd349f7a-b3b9-11e5-8255-5453ed2e2b49

tools/tiffdither.c: check memory allocations to avoid writing to NULL pointer. Also check multiplication overflow. Fixes #2501, CVE-2014-8128. Derived from patch by Petr Gajdos. Reported by: naddy Obtained from: https://github.com/vadz/libtiff/commit/147b2698c84004fe2da93c0fc7177a7c3797533d MFH: 2015Q1

Replace USES=libtool:oldver with USES=libtool or USES=libtool:keepla in the 32 ports that still use it. Bump PORTREVISION on their dependent ports except the ones that depend on these: audio/libogg audio/libvorbis devel/pcre ftp/curl graphics/jpeg graphics/libart_lgpl graphics/tiff textproc/expat2 textproc/libxslt In these cases the same trick as in the recent gettext update is used.

The FreeBSD x11@ and graphics team proudly presents a zeising, kwm production, with help from dumbbell, bdrewery: NEW XORG ON FREEBSD 9-STABLE AND 10-STABLE This update switches over to use the new xorg stack by default on FreeBSD 9 and 10 stable, on osversions where vt(9) is available. It is still possible to use the old stack by specifying WITHOUT_NEW_XORG in /etc/make.conf . FreeBSD 8-STABLE and released versions of FreeBSD still use the old version. A package repository with binary packages for new xorg will be available soon. This patch also contains updates of libxcb and related ports, pixman, as well

Switch from libglut to freeglut and retire libglut. Libglut hasn't been developed in years and has been dropped from the MESA 8.0 distribution. Freeglut is a rewrite of glut and is actively developed and is used by many linux distributions instead of libglut. Bump all ports that directly depend on libglut because of the shlib version change. There are some extra items in this patch. *) Because freeglut doesn't have the same dependancies as libglut, some ports need extra dependencies added to USE_XORG to make them build. *) Mark graphics/f90gl broken, f90gl depends on a header that is only shipped with libglut. *) Remove option for libglut/freeglut selection in games/cake, only freeglut remains now. *) While here fix a png related build issue games/vegastrike. Thanks to miwi for running the exp-run. Approved by: portmgr (miwi) Collaboration with: zeising@ Obtained from: xorg-dev staging area.

- Security update to 3.9.4 to fix tiff2rgba Security: http://www.remotesensing.org/libtiff/v3.9.4.html Security: http://www.ocert.org/advisories/ocert-2009-012.html Security: CVE-2009-2347 PR: 147900

-Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22. -Update libtool and libltdl to 2.2.6a. -Remove devel/libtool15 and devel/libltdl15. -Fix ports build with libtool22/libltdl22. -Bump ports that depend on libltdl22 due to shared library version change. -Explain what to do update in the UPDATING. It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop and applications in the runtime. With help: marcus and kwm Pointyhat-exp: a few times by pav Tested by: pgollucci, "Romain TartiÃ¨re" <romain@blogreen.org>, and a few MarcusCom CVS users. Also, I might have missed a few. Repocopy by: marcus Approved by: portmgr

- Update X.org ports to 7.4+ (few ports are more recent than the katamari). - Bump PORTREVISION for all ports depending on libglut since the shlib version number went from 4 to 3. - Bump PORTREVISION for all ports depending on libXaw as libXaw.so.8 isn't installed anymore. - Couple of ports fixes (mostly missing xorg components added to USE_XORG).

- add Security patches - fix missign macro in manpages - add regression test Security: CVE-2006-2193 Security: CVE-2006-2327 Security: CVE-2006-2656 Security: CVE-2006-3459 Security: CVE-2006-3460 Security: CVE-2006-3461 Security: CVE-2006-3462 Security: CVE-2006-3463 Security: CVE-2006-3464 Security: CVE-2006-3465 Security: CVE-2008-2327 PR: 127434 Submitted by: <bf2006a@yahoo.com> Obtained From: Gentoo,Debian Approved by: portmgr (marcus)

Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script. Specifically, newer autoconf (> 2.13) has different semantic of the configure target. In short, one should use --build=CONFIGURE_TARGET instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning and the old semantic may be removed in later autoconf releases. To workaround this issue, many ports hack the CONFIGURE_TARGET variable so that it contains the ``--build='' prefix. To solve this issue, under the fact that some ports still have configure script generated by the old autoconf, we use runtime detection in the do-configure target so that the proper argument can be used. Changes to Mk/*: - Add runtime detection magic in bsd.port.mk

Quickly -- before anyone notices -- add another hunk to the just committed patch. It is related the previous one and is discussed in the same thread http://remotesensing.org/pipermail/tiff/2004-October/000698.html

- update to 3.7.0 - honor options WITH_X11,WITHOUT_X11 - uses LIBTOOL and GNU_CONFIGURE - LZW compression enabled shared lib version not bumped, tested a few applications running it without recompilation.

- mark BROKEN for 502101 problem: configure stops waiting for stdin this happens on all architetures. sparc64-5-latest-logs 2004 Mar 5 18:17:20 tiff-3.6.1_1.log failed i386-5-latest-logs 2004 Mar 4 15:47:17 tiff-3.6.1_1.log okay alpha-5-latest-logs 2004 Feb 16 00:55:25 tiff-3.6.1_1.log.bz2 okay amd64-5-latest-logs 2004 Feb 27 09:35:09 tiff-3.6.1_1.log.bz2 okay i386-4-latest-logs 2004 Feb 21 11:58:42 tiff-3.6.1_1.log.bz2 okay ia64-5-latest-logs 2004 Feb 16 23:28:46 tiff-3.6.1_1.log.bz2 okay sparc64-5-latest-logs 2004 Feb 17 12:04:10 tiff-3.6.1_1.log.bz2 okay workaround: build package on olnder enviroment. e.G. install 5.2. release or current before 2004-02-29 in a jail. Patches welcome

Current status