From 85a98f81488914ddbdb2be56c7f44a6c37c6a513 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Sun, 5 Jul 2026 09:46:30 +0200 Subject: [PATCH] package/tiff: security bump version to 4.7.2 https://gitlab.com/libtiff/libtiff/-/releases/v4.7.2 Fixes CVE-2026-36849: https://seclists.org/oss-sec/2026/q2/952 Signed-off-by: Bernd Kuhls Signed-off-by: Julien Olivain --- package/tiff/tiff.hash | 4 ++-- package/tiff/tiff.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/tiff/tiff.hash b/package/tiff/tiff.hash index ff0b698345..5c9031bfb4 100644 --- a/package/tiff/tiff.hash +++ b/package/tiff/tiff.hash @@ -1,5 +1,5 @@ # Locally computed after checking pgp signature -# https://download.osgeo.org/libtiff/tiff-4.7.1.tar.xz.sig +# https://download.osgeo.org/libtiff/tiff-4.7.2.tar.xz.sig # with key: B1FA7D81EEB8E66399178B9733EBBFC47B3DD87D -sha256 b92017489bdc1db3a4c97191aa4b75366673cb746de0dce5d7a749d5954681ba tiff-4.7.1.tar.xz +sha256 4996f0c4f93094719b1ca5c6279b20e588773ba8a247533e486416fb662ddb88 tiff-4.7.2.tar.xz sha256 0e27c2382d7b8147972bbb746e04059a1152c8d0fda9d03ef1399d1a433c4ade LICENSE.md diff --git a/package/tiff/tiff.mk b/package/tiff/tiff.mk index e64a6baf83..b1efa5be5a 100644 --- a/package/tiff/tiff.mk +++ b/package/tiff/tiff.mk @@ -4,7 +4,7 @@ # ################################################################################ -TIFF_VERSION = 4.7.1 +TIFF_VERSION = 4.7.2 TIFF_SOURCE = tiff-$(TIFF_VERSION).tar.xz TIFF_SITE = https://download.osgeo.org/libtiff TIFF_LICENSE = tiff license