* Fix libtiff CVEs: 2022-2056, 2022-2057, 2022-2058
* Create separate patch files for each CVE.
Add a comment to mention that CVE-2022-2056.patch also fixes CVE-2022-2057, and CVE-2022-2058.
Co-authored-by: Pawel Winogrodzki <pawelwi@microsoft.com>
* libtiff: bump version to 4.4.0 to address CVE-2022-1622 & CVE-2022-1623
* libtiff: cgmanifest: update entry
Signed-off-by: Muhammad Falak R Wani <falakreyaz@gmail.com>
* patch all CVEs except 2022-1056
* nopatch duplicate CVE 2022-1056
* remove reference to nopatch in spec file; not needed for tooling and gets mangled when %autosetup runs
SeanDougherty
Nan Liu
Muhammad Falak R Wani
Mandeep Plaha
Cameron E Baird
Henry Li
Thomas Crain
jslobodzian
rychenf1