]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commit
tiff: Security fix for CVE-2024-13978, CVE-2025-8176, CVE-2025-8177
authorSiddharth Doshi <sdoshi@mvista.com>
Fri, 22 Aug 2025 15:14:50 +0000 (20:44 +0530)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Mon, 25 Aug 2025 16:46:38 +0000 (17:46 +0100)
commit16d8a873c57b174e4d6581b58d890f2157aa2f2c
treeec391e0578f38f52c4bf5f3dc65641ebe42113ec
parent59c9aa2411514f448cec23c0ceefeada2a103d85
tiff: Security fix for CVE-2024-13978, CVE-2025-8176, CVE-2025-8177

Upstream-Status: Backport from [https://gitlab.com/libtiff/libtiff/-/commit/7be20ccaab97455f192de0ac561ceda7cd9e12d1, https://gitlab.com/libtiff/libtiff/-/commit/2ebfffb0e8836bfb1cd7d85c059cd285c59761a4, https://gitlab.com/libtiff/libtiff/-/commit/3994cf3b3bc6b54c32f240ca5a412cffa11633fa, https://gitlab.com/libtiff/libtiff/-/commit/ce46f002eca4148497363f80fab33f9396bcbeda, https://gitlab.com/libtiff/libtiff/-/commit/ecc4ddbf1f0fed7957d1e20361e37f01907898e0, https://gitlab.com/libtiff/libtiff/-/commit/75d8eca6f106c01aadf76b8500a7d062b12f2d82, https://gitlab.com/libtiff/libtiff/-/commit/e8c9d6c616b19438695fd829e58ae4fde5bfbc22]

CVE's Fixed:
CVE-2024-13978 libtiff: LibTIFF Null Pointer Dereference
CVE-2025-8176 libtiff: LibTIFF Use-After-Free Vulnerability
CVE-2025-8177 libtiff: LibTIFF Buffer Overflow

Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
meta/recipes-multimedia/libtiff/tiff/CVE-2024-13978_1.patch [new file with mode: 0644]
meta/recipes-multimedia/libtiff/tiff/CVE-2024-13978_2.patch [new file with mode: 0644]
meta/recipes-multimedia/libtiff/tiff/CVE-2025-8176_1.patch [new file with mode: 0644]
meta/recipes-multimedia/libtiff/tiff/CVE-2025-8176_2.patch [new file with mode: 0644]
meta/recipes-multimedia/libtiff/tiff/CVE-2025-8176_3.patch [new file with mode: 0644]
meta/recipes-multimedia/libtiff/tiff/CVE-2025-8177_1.patch [new file with mode: 0644]
meta/recipes-multimedia/libtiff/tiff/CVE-2025-8177_2.patch [new file with mode: 0644]
meta/recipes-multimedia/libtiff/tiff_4.7.0.bb