Fix for CVE-2013-4231 (and CVE-2013-4232) from upstream. See security bug #480466. The -r4 is for stabilization without multilib-minimal.eclass usage.

(Portage version: 2.2.0/cvs/Linux x86_64, signed Manifest commit with key 4868F14D)

1 files changed, 12 insertions, 8 deletions

diff --git a/media-libs/tiff/Manifest b/media-libs/tiff/Manifest
index 22a692a0114b..1afaee5eb635 100644
--- a/media-libs/tiff/Manifest
+++ b/media-libs/tiff/Manifest
@@ -13,6 +13,8 @@ AUX tiff-4.0.3-CVE-2012-4447.patch 1263 SHA256 917187494cd3f80929e4919951637683a
 AUX tiff-4.0.3-CVE-2012-4564.patch 2203 SHA256 0ef1f4055930c8b38246a4f6ed66e393bb2f2a3d5238f5c5f5d57d1f4b230d3e SHA512 d8e9ffaefd9ce9f38c117faa6368fd858422b870d1afa3e9ce7b05218f35c29a84e23a1da00879aedade4c1d1d578c06be08aa51ed4e2e7d2a3ca819614be8e8 WHIRLPOOL 71df3a8962b2455594c72881ab0d48a13c0d55ac0db34bbb45ae05c5e6449875511dbf66e9ffcbe2c0a6d5157d2095cc63e4f68ffe45a56e3057ff1f648b3c10
 AUX tiff-4.0.3-CVE-2013-1960.patch 4144 SHA256 688e577d3266b1cd7df5321b5e63fed82d088407a447a022eea2188d643b5a5b SHA512 db160c93453db8f4b611028bca48622eebfa54b320b780b7491bdc9c3385d227928a7e9016073a64cdd85388284aa2bb0f0af04daa235d45cdb28e4e6fcf82fa WHIRLPOOL 947b53eab1b5f90f890dc3d00114a761fdc73cd819511360f917cdfd94db7901b24e61cab975809a55892bf9aca3c797d80862c651df88489f5d972c512d46d1
 AUX tiff-4.0.3-CVE-2013-1961.patch 32378 SHA256 2f0a1cf4826416d248ff5288db7702b80245d02c624c415836053a762c1e3fd4 SHA512 c9870c7b85d2a3c666e2c9f932c815a1b4c9fb0bf2485c7cfff3ab3435222214fa7900adc0ded0f49866f28db2124121012bac7186b675955613fa983dbf45d7 WHIRLPOOL b498557ef061c99c3862bb5b417912ea73d9bcadb09c6b05b8fbf79194200eb4ecc65672b1ed7ceec004ccd8e660989c661028c506e7a3561b082dd407ec6d91
+AUX tiff-4.0.3-CVE-2013-4231.patch 366 SHA256 a56b5397f736fd07188433dc5f228adc1f050eb93965e05ba788cbdee8e19e4c SHA512 d530a651172e2756e2ae8b51b565562742b52c7beca251a6dc09aea629f76275f1b3b417559560f663cf902c4f826ee47d9e9b9216fe55e789972581248563c1 WHIRLPOOL 2a890dd353bcfff52d5e1cee581b40e86cc81d7b88341a7958745755f983146cc4dba5a3aaa6334115d016a7d068efce1dd25fb74f92dc17e359b0a79a132170
+AUX tiff-4.0.3-CVE-2013-4232.patch 446 SHA256 766279d79885e1132c89fd0e1e786641c48d1bbe04888704b455baf52b7ccd04 SHA512 bef35509c24e47c948cd81eafb0c2afb24333dcb5e413e5ac694b6053fe145d008a1f65ec9ddfeb961181f70d34e3552ddd4f63e9b28e40b9ccbbad6d6680dc0 WHIRLPOOL ac96e9c343cce50b6fb2ad3ff7025b8d00ea2e89dda422b97a329391db1dea17c894a083b53dc1110dca9c7d0e2f7e638cd277f92f93db00df5057dd03ef28a7
 AUX tiff-4.0.3-libjpeg-turbo.patch 5054 SHA256 fd31eb80f5eaf37d689bc3d3dc3f40e050bb99ebfe5eb575e9f9e25281037740 SHA512 7cab63b47b2f67412dd8fa1a65231be17516e5f2a27820b3232b4f49c08be10c0899d3a238eedd9b8781d0304fc285202fc4e41726d8b99009cfc575af298cf9 WHIRLPOOL 93c25fc707e3776e802f0c65db1f9c710ecdfee039be5a10361772773b143c4f1790159c9a7f606e43287564770aecbe6d2bf16f24799693d2ea14f772d10103
 AUX tiff-4.0.3-tiff2pdf-colors.patch 529 SHA256 18c1446e15383bdb94884bc140002719c8ebffba5e43ae90c12f9de7041d456c SHA512 8de845a18412db883177753b5deef70e4ad9c2eecf72ce47df0383e3007a26ae1d9798d676c6f3d92e2a48c5074fbca6b19f7620bd9620e9f93e8d662062d925 WHIRLPOOL 14834eeb94307e0eaa4f34061d53f6b2b07d995285072bae7ad4dda116e963f1f4b87b08fe796a6c146e6d623f90cb10858a5be4dd8c466174f1bb00e3208037
 DIST tiff-3.9.5.tar.gz 1455502 SHA256 ecf2e30582698dbc61d269203bbd1e701a1a50fb26c87d709e10d89669badb33 SHA512 814d5b2b488c8332ab1e17095004d42d44717a530ab2675740ef4256050971fb5feb35f804001e1bc5081f4a02c38922555fdc4c947b041876c96a32385da094 WHIRLPOOL 24e348c6d7c754f70706faab72956dc85b48225c4e31a10f4a16536f434fd269a20aa3beed9bddff6a0af2fb67fc73fd946c9e0397f4a6d8599d20b79c2215aa
@@ -26,17 +28,19 @@ EBUILD tiff-4.0.2-r1.ebuild 1446 SHA256 4301e356a342b75d9425d94ca7fc0f29eb956265
 EBUILD tiff-4.0.3-r1.ebuild 1429 SHA256 2fc720bbe56409b73d782a68bd2476caf5e0eb4449f5df775088cb24e989ada0 SHA512 d53620a858fbd774b36723d33f0c129edd634ef4913647319d76e60d3a87edb3cbe52c42b1e2e7a7155c9ce14540e158a3d1081f2046f6677c03570dae121ee4 WHIRLPOOL 021e573bc100640b1efceac2f42635645bb79bd729d113dd200676decaa863febb45bca37c721575043e23e60aa203419927c7aae7736f01e946ecb35fe10e00
 EBUILD tiff-4.0.3-r2.ebuild 1602 SHA256 745db9df119c066bf90f0dad327600ce575324272e9adb688a939be0d50e8320 SHA512 b1565cd640e3d30bcc5ac3df9516889a72152b7f36850d71c2fc1d2014d3c9e5103f27f6d2b607d0845eb9554af0f453aaab8d134d8b8609e61a7604d3fe7346 WHIRLPOOL f006d4e7770615e663c27013dbc65fc8c9608964dcdb011a6140e1f1b0041562472685a46a84836f81e780ab838713ec7ed079a8aef924edfcbccb137387b26c
 EBUILD tiff-4.0.3-r3.ebuild 2223 SHA256 b20e62cfc132093ae0a8fec6ab7ef8bbc21ce6c626572d259895f8818dbf4f55 SHA512 e0142b19b1ccf2a64f92c5a8d07cb6332ecb2cd742bef686dac21ba3435ac75f3d6a6e58c0f2b60f721734d11f0f5a7a04824db4289a25697cec911fbdbdf870 WHIRLPOOL a96667e99a31ef0c5583655b5b21a624baf294da15a3d909d9f2854a3f053d5af35b2be83f58f33479a8fdb4aa5a25af9b64028981b1a3c8bc56b19b5597e305
+EBUILD tiff-4.0.3-r4.ebuild 1674 SHA256 298c8f754201c45b4501e92c7d3b26807d313d9c24c3b69f0b6a810f75efecb5 SHA512 372a00de2ba1ca3fa217b708b2453197598304221db55c388d31f171c5684d13c68dac363afcb100c58bf30dfb8d1c486d34e4a610c43209f184e1809368484a WHIRLPOOL 7a22821c3beb9d9a6745a0fbf50d99a7ef294c999d87f099c7ac839adaf0f127007e5a701afaefe124e7d3aa5c20020b5c5d164cd5fcfb8a9784c48f5d78665e
+EBUILD tiff-4.0.3-r5.ebuild 2286 SHA256 5c8728077f2f47c950643c0719110cceb9d834f00e3ea6068bbd98f1c5d54557 SHA512 863488f94656ea77a574dd15dab51f4089ab5ba3dfaa9b5797994b041c10d749f5288492e1c3af47fdcd310b5b6fac351c9b8d84f50c43577ea1ab04f5872508 WHIRLPOOL cb6a341f46e54d17edd1758321d905d29c3ad2f429043c758c1823882e27ef68d2e39b91f8124b6d71a9f792073d6d2eaf5706ad1b8d9e55a1688d346a8bf7ab
 EBUILD tiff-4.0.3.ebuild 1353 SHA256 ae60d4451163f8fde953b0ba1120f3a10d01601a23d457ecf05f2ea0007c477f SHA512 a5aabfa782dc9c97e9a93e7f1a224152d7a561d0c8131042ca24e5ab40744125be8fc1e1a892a4f6f808003bd2d8c881ccaafd1165522f829adf15956d9d3689 WHIRLPOOL 4841ce497247a05952c1b83f718983422b819642a133acea9ab5daa6daeccc2ceb6f6faa2b26957fa9f965751d99ed533575c550e93205386d0c427965745eb2
-MISC ChangeLog 33650 SHA256 41603b07e182585a134beaab92aa812c0db6544b36bd5a330a985656ba742868 SHA512 da25e27f309100a6b347515d1333ebe452075c12cf9d33a8fd74ca4eb2983be0e8b69126715bed62ea01443409da2e0025093c52439dff600c87cd6005190351 WHIRLPOOL 5897d4783ec49c0e0226cf6c42c2a1cfe768ffcdf17c75a993209c6903e0327a80d4b4dd8b122e7016cce149e49758e69e0bb6b0ed7c225e690eca5b5e3cfcfa
+MISC ChangeLog 34047 SHA256 9c57fca017916cdc611b30a2659016e912362feb28a111578bb0037ad156b0a4 SHA512 6a88c8d5989fa51fb3733830a509e900d364710da8febff1e6152f7cd87ef905ac33ef919bd063ce77f0288b8554aa17ed7a60892a4f5d8cfbf74ca93dc5007b WHIRLPOOL 9aff315345f2cda865f1f785a73366e85d5d74d64e93558e4fffbd38fc910dd88582989638c04c1c852d20836ffcb2d8cbaff6e639d743ca972baa4588797acc
 MISC metadata.xml 309 SHA256 c1893fd7aaa763da14257353ceca7356500d8c8112f635f587c4ef407bd6ca51 SHA512 435eddb4a4280b37dd5948f305f88c5b3c8d193d50776a4c608132addcff03016fb00b218ad8be93a59dfdde28b57fc9d1327b18dc772344057147a5d3826f4b WHIRLPOOL b3323fa861535082bd475896c3cd5490c584cfe0262ffa25288bcda76e36ee58c42c825811ccc34078ed624e48467842012750cd650cf91398313cf4c6b60892
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.20 (GNU/Linux)
 
-iQEcBAEBCAAGBQJSEiOtAAoJEEdUh39IaPFNP0YIAJkA5nAQgGcPpHRkOM2pCJ9k
-a+ucznyKVrazOgcklDSa6kHf3Z7pFe5ULyMUVPLmLIvBllPx7Lb2DUW5/Hmn2y9K
-vjXs5sEChFcZqlhAlF/u09b+7AjVHgwHOIWwXuusOTqYVGZMkt7WamaxqgsV06gf
-K4SQTCOeKATv25bokbnrDKww82E/VLUlX/6vDN470DaWNGL9SG+MpR+vjCKUxqAC
-sdF3L4YKFUblqrASnaaKl6GOATyw/u7iGyaMxu3n9wmHXORVvcXN8zh31NCTX4mn
-siwG4xJko3hssn30Dir5sjqxI9tm+gu5q+lymYasyoYs8kG12zPaDzlPNopYt0c=
-=WPKc
+iQEcBAEBCAAGBQJSF3e1AAoJEEdUh39IaPFN+RYH/3ME88EkN3bR3ZQpe1KH/B3O
+zHBLQSorMhcy/war+yiIP7ckwMca08tQpm+ueRTXrPagiJbIz1UKJH0TyZsfZQrZ
+9Z66sTEk10A4NGKH4OCjI9fwsoGGSe8cUN7StUKTtNrw0zWoZoaJzsWd7pVALC+z
+sWuHguoNRX4u6ZCuTR/3JmtmhlVNycI2MgHC5sMl1zJ12EnRzCsBUlei2ZNt2eik
+XIHkwx9C5/dYEhqE6RKRQsKuHbaQPysNyWrVSPtucOJdl3ATuYezh84RoYenLZJi
+RdiJY/XhItibO3q/yvnLqms57EZmmy0JekV0rFO4EIdvmPmgzcEZHkIMZGPhmOM=
+=L7/9
 -----END PGP SIGNATURE-----