libtiff-4.4.0-1

lib/libt/libtiff/libtiff-vl.spec

@@ -3,7 +3,7 @@
 Summary: A library of functions for manipulating TIFF format image files.
 Summary(ja): TIFF フォーマットの画像ファイルを扱うライブラリ
 Name: libtiff
-Version: 4.3.0
+Version: 4.4.0
 Release: 1%{_dist_release}
 Group: system
 Vendor: Project Vine
@@ -16,6 +16,8 @@ Source0: http://download.osgeo.org/libtiff/tiff-%{version}.tar.gz
 
 Patch0: libtiff-am-version.patch
 Patch1: libtiff-make-check.patch
+Patch2: libtiff-CVE-2022-2056_2057_2058.patch
+Patch3: libtiff-CVE-2022-34526.patch
 
 BuildRoot: %{_tmppath}/%{name}-%{version}-root
 BuildRequires: zlib-devel libjpeg-devel
@@ -114,6 +116,8 @@ install the libtiff package.
 
 %patch0 -p1
 %patch1 -p1
+%patch2 -p1
+%patch3 -p1
 
 # Use build system's libtool.m4, not the one in the package.
 rm -f libtool.m4
@@ -178,6 +182,11 @@ rm -rf $RPM_BUILD_ROOT
 
 
 %changelog
+* Sat Aug 13 2022 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 4.4.0-1
+- new upstream release.
+- imported Patch2 from rawhide to fix CVE-2022-{2056,2057,2058}.
+- imported Patch3 from rawhide to fix CVE-2022-34526.
+
 * Thu Apr 22 2021 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 4.3.0-1
 - new upstream release.
 - dropped ldconfig scriptlets.