Commit Graph

123 Commits

Author SHA1 Message Date
Yarny0
87eabf9c4d Revert "libtiff: introduce libtiff_4_5"
This reverts commit f57a4b0ac1.

The old version libtiff_4_5 is no longer needed.
Both dependents (gscan2pdf and hylafaxplus)
have switched to the forked libtiff version 4.6.0t
which is based on the current libtiff version 4.6.0
but also contains required command line tools
missing in the original libtiff library.
2024-04-20 09:23:29 +02:00
Yarny0
6ce2532285 libtiff_t: init at 4.6.0t (fork of libtiff)
libtiff 4.6.0 dropped a bunch of helper tools,
thereby breaking packages that depend on these tools.
To fix those packages, nixpkgs started packaging libtiff_4_5
separately, see commit f57a4b0ac1.

Currently, two packages use libtiff_4_5:

* hylafaplus (cd3771c709)
* gscan2pdf (9a579e14dd)

Lee Howard (core developer of hylafaxplus)
forked libtiff 4.6.0 to provide a current version
that restores those dropped helper tools.
The library is also called "libtiff",
with current version "4.6.0t".
It is based on libtiff 4.6.0 and incorporates several fixes,
particularly for the dropped helper tools,
see https://sourceforge.net/p/hylafax/mailman/message/58751878/
and http://www.libtiff.org/releases/v4.6.0t.html .

The commit at hand packages that fork for nixpkgs.
Follow-up commits will replace libtiff_4_5 with
libtiff_t, so affected packages can
again use a current libtiff library.

The build recipe of libtiff_t is based on the libtiff recipe.
Besides adapted URLs, the only change is dropping `passthru`, as
it referred to many packages depending on the original libtiff.
The unorthodox code introduced in all-packages.nix
is needed to satisfy the automated "by-name" check;
see "Recommendation for new packages with multiple versions"
in the file `pkgs/by-name/README.md`.

Depending on how things develop in the future,
we might want to switch completely
to the forked libtiff library one day.
Or the original libtiff restores the missing tools,
making libtiff_t superfluous.
2024-04-20 09:23:21 +02:00
Yarny0
376bd1931e libtiff: fix meta.changelog url 2024-04-20 09:22:49 +02:00
Ivan Mincik
fc3aba1ff7 libtiff: adopt package under geospatial team maintenance 2024-04-09 10:24:50 +02:00
Victor Engmark
ad60aa50e2
libtiff: Add LERC support 2024-03-22 21:15:37 +13:00
Nick Cao
4645c67723 libtiff: mark available on windows 2024-03-16 20:11:57 +01:00
Eldritch Cookie
511914a5fe
libtiff: add pkgConfigModules metadata and corresponding test
do note that while the test added ran and passed there were failing
tests.
2024-02-22 13:57:15 +08:00
Alyssa Ross
411fd474e1
libtiff: drop maintainership
When I added myself as a maintainer here, I thought it would be way
less work than it turns out to be, because I didn't realise how
vulnerability-prone libtiff is.  I basically haven't been maintaining
it at all, so let's reflect reality.
2023-12-14 00:49:36 +01:00
Yarny0
f57a4b0ac1 libtiff: introduce libtiff_4_5
With the update to libtiff 4.6 in
0a74a54ac2 ,
many tiff-processing utility executables got dropped:

http://www.simplesystems.org/libtiff/releases/v4.6.0.html

Some of these executables can still be "restored" with
the configure switch `--enable-tools-unsupported`,
but unfortunatelly,
at least hylafaxplus (maybe more packages) relies on
utilities that even cannot be restored with this switch.

The commit at hand reintroduces the old libtiff
version 4.5.1 as `libtiff_4_5` into nixpkgs.
It restores the old build recipe with the following changes:

* passthru.updateScript is dropped as it is of no use here
* passthru.tests is dropped as it only contains
  packages that now build with the new libtiff version
* patches are applied for the two CVEs that are fixed in 4.6.0

As libtiff 4.5 is no longer supported by libtiff developers,
new vulnerabilities will likely go unnoticed
unless they also affect the current version.
To not disable hydra builds, we don't add
`knownVulnerabilities` *for now*, but add comments to alert
updaters of the current libtiff version so patches can
be backported or the situation be reevaluated as a whole.
2023-11-01 07:32:25 +01:00
Sergei Trofimovich
0a74a54ac2 libtiff: 4.5.1 -> 4.6.0
Changes: http://www.simplesystems.org/libtiff/releases/v4.6.0.html
2023-10-18 11:00:14 +01:00
Sergei Trofimovich
bfa7372576 libtiff: clarify the need for rename-version.patch 2023-10-18 10:54:44 +01:00
Sergei Trofimovich
37d4ad9004 libtiff: clarify the need for headers.patch 2023-10-18 10:53:20 +01:00
Thomas Gerbet
b682b96a7f libtiff: 4.5.0 -> 4.5.1
Fixes CVE-2023-25434 and CVE-2023-26965.

Changelog:
https://gitlab.com/libtiff/libtiff/-/blob/v4.5.1/ChangeLog?ref_type=tags
2023-06-24 14:04:18 +00:00
Yueh-Shun Li
6a60f11bfa libtiff: move libdeflate into propagatedBuildInputs 2023-03-22 18:27:57 +08:00
Yueh-Shun Li
878a3ff9c6 libtiff: adjust expression format (propagatedBuildInputs part) 2023-03-22 18:27:57 +08:00
Yueh-Shun Li
5ba86e5ea6 libtiff: format expression with nixpkgs-fmt 2023-03-22 18:27:57 +08:00
Robert Scott
7a8df1f02c libtiff: add patches for many related CVEs
CVE-2023-0795, CVE-2023-0796, CVE-2023-0797, CVE-2023-0798,
CVE-2023-0799, CVE-2023-0800, CVE-2023-0801, CVE-2023-0802,
CVE-2023-0803, CVE-2023-0804
2023-02-21 22:13:03 +00:00
Thomas Gerbet
c86f20cb48 libtiff: apply patch for CVE-2022-48281
Upstream issue:
https://gitlab.com/libtiff/libtiff/-/issues/488
2023-01-30 22:03:18 +01:00
Vladimír Čunát
c21cf32722
Merge branch 'master' into staging-next 2023-01-05 20:21:03 +01:00
Weijia Wang
113b3cb395 imlib: drop 2023-01-04 10:09:56 +01:00
Anthony Roussel
4d4af86db6
libtiff: 4.4 -> 4.5 2023-01-02 15:27:28 +01:00
Robert Scott
9a4cba4233 libtiff: add patch for CVE-2022-3970 2022-11-21 01:05:42 +00:00
Robert Scott
3e01fa1496 libtiff: add patches for CVE-2022-3626, CVE-2022-3627, CVE-2022-3597, CVE-2022-3598 & CVE-2022-3570 2022-10-23 00:19:46 +01:00
Robert Scott
39bcbc32f1 libtiff: add patch for CVE-2022-2953 2022-08-31 00:36:46 +01:00
Robert Scott
19c5c57e72 libtiff: add patch for CVE-2022-34526 2022-08-06 02:28:58 -04:00
Zaripov Kamil
64f69cc3eb libtiff: get rid of aarch64-darwin.nix 2022-07-30 12:22:19 +03:00
Josef Kemetmüller
1ca04aa9f1 treewide: Stop setting CMAKE_SKIP_BUILD_RPATH=OFF
This is now the new default and thus doesn't need to be set manually
anymore.
2022-07-04 03:49:01 +03:00
Kevin Mehall
25c990a60b libtiff: 4.3.0 -> 4.4.0
Changelog: http://www.simplesystems.org/libtiff/v4.4.0.html
2022-06-02 11:07:24 -07:00
Robert Scott
8d8b43cb3c libtiff: add patches for CVE-2022-1354 & CVE-2022-1355 2022-05-17 18:48:54 +01:00
Vladimír Čunát
ebf62e1f1f
Merge #165872: libtiff: add patches for multiple CVEs
...into staging
2022-04-10 11:31:09 +02:00
Sandro
2873d96dd7
Merge pull request #162110 from risicle/ris-libtiff-passthru-tests 2022-03-27 16:36:28 +02:00
Robert Scott
748dfdd1f5 libtiff: add patches for multiple CVEs
CVE-2022-0891
CVE-2022-0865
CVE-2022-0924
CVE-2022-0907
CVE-2022-0909
CVE-2022-0908
2022-03-26 19:50:34 +00:00
Robert Scott
93c5836538 libtiff: add some reverse dependencies to passthru.tests 2022-02-27 18:31:36 +00:00
Vladimír Čunát
ba2687fcfb
libtiff: standardize the patch URLs
https://github.com/NixOS/nixpkgs/pull/161295#discussion_r812233936
2022-02-22 21:12:35 +01:00
Robert Scott
7d6abd197c libtiff: add patches for CVE-2022-0561 & CVE-2022-0562 2022-02-21 19:28:24 +00:00
Robert Scott
0f049646e6 libtiff: add patch for CVE-2022-22844 2022-02-04 23:57:45 +00:00
Dmitry Kalinkin
2f8438a174
libtiff: don't depend on OpenGL on darwin
libGL is bloating the closure by depending on mesa.

0a678b450040f6cd9ca7cea2800a5a247d4d3c99 ('libtiff: Disable OpenGL entirely for Darwin')
b02908c213 ('libtiff: Reenable OpenGL support on Darwin')
2021-12-31 15:44:44 -05:00
toonn
19678c4e90 libtiff: Clarify patch comments 2021-11-24 15:17:13 -08:00
Ryan Burns
35ddc19667 libtiff: fix case-insensitive build 2021-11-24 15:17:13 -08:00
toonn
b02908c213 libtiff: Reenable OpenGL support on Darwin
I found the correct inputs to get `libtiff` to compile with OpenGL
support on Darwin. Allowing us to get rid of the ugly build system
patch.
2021-11-24 15:17:13 -08:00
toonn
d0c5ac2383 libtiff: Disable OpenGL entirely for Darwin
On the Hydra builders and with Clang 7, CMake fails to find OpenGL. With
Clang 11 it manages to find the the OpenGL and GLUT system frameworks
for me. It does not find `gl.h` however. So the tests for `tiffgt` fail
on a missing include.

Since previously OpenGL wasn't detected I've opted to disable the CMake
check for OpenGL for darwin. This means `tiffgt.c` is never built and
tested. Ideally we'd provide the proper headers so the tests can
succeed.
2021-11-24 15:17:13 -08:00
Vladimír Čunát
07b9fef470
libtiff: revert to previous version on aarch64-darwin
/cc PR #129687.  This should work; I can't see another way immediately.
2021-07-20 10:50:50 +02:00
Alyssa Ross
5df9305b60 libtiff: fix cross by switching back to autoconf
The CMake implementation seems to be very in flux, and the latest
release broke cross-compilation for us.  Autotools seems to be
upstream's recommended build system -- it's the one mentioned in the
README.
2021-07-09 11:19:02 +00:00
Alyssa Ross
666c01d977 libtiff: 4.2.0 -> 4.3.0; adopt; improve meta
Tested by viewing a TIFF file in imv.
2021-07-09 11:19:02 +00:00
Orivej Desh
91d6532179
libtiff: 4.1.0 -> 4.2.0 (#114196) 2021-03-06 19:32:55 +00:00
Ryan Burns
351b28d469 libtiff: fix build on darwin
Now that libtiff is using cmake, we need to let cmake
set the build rpath for the tests to pass on darwin.
The rpaths are rewritten at installation so
the output libraries should be unaffected.
2021-01-25 13:52:32 +01:00
zowoq
153ad8bc1e Merge staging-next into staging 2021-01-22 16:56:40 +10:00
Ben Siraphob
66e44425c6 pkgs/development/libraries: stdenv.lib -> lib 2021-01-21 19:11:02 -08:00
Jan Tojnar
fc7bd322df
Merge branch 'staging-next' into staging 2021-01-19 13:50:04 +01:00
Jonathan Ringer
9bb3fccb5b treewide: pkgs.pkgconfig -> pkgs.pkg-config, move pkgconfig to alias.nix
continuation of #109595

pkgconfig was aliased in 2018, however, it remained in
all-packages.nix due to its wide usage. This cleans
up the remaining references to pkgs.pkgsconfig and
moves the entry to aliases.nix.

python3Packages.pkgconfig remained unchanged because
it's the canonical name of the upstream package
on pypi.
2021-01-19 01:16:25 -08:00