]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commit
tiff: fix multiple CVEs
authorHitendra Prajapati <hprajapati@mvista.com>
Tue, 1 Aug 2023 06:12:22 +0000 (11:42 +0530)
committerSteve Sakoman <steve@sakoman.com>
Fri, 4 Aug 2023 15:44:24 +0000 (05:44 -1000)
commit3d322227477f9e82fc22de6e896174d04513d72b
treeac38dcd2a178504b8ca228f6f16d2df3638f5491
parentc25b88fc321b7c050108b29c75c0a159e0754f84
tiff: fix multiple CVEs

Backport fixes for:
* CVE-2023-25433 - Upstream-Status: Backport from https://gitlab.com/libtiff/libtiff/-/commit/9c22495e5eeeae9e00a1596720c969656bb8d678 && https://gitlab.com/libtiff/libtiff/-/commit/688012dca2c39033aa2dc7bcea9796787cfd1b44
* CVE-2023-25434 & CVE-2023-25435 - Upstream-Status: Backport from https://gitlab.com/libtiff/libtiff/-/commit/69818e2f2d246e6631ac2a2da692c3706b849c38

* CVE-2023-26965 & CVE-2023-26966 - Upstream-Status: Backport from import from debian http://security.debian.org/debian-security/pool/updates/main/t/tiff/tiff_4.1.0+git191117-2~deb10u8.debian.tar.xz]

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-multimedia/libtiff/files/CVE-2023-25433.patch [new file with mode: 0644]
meta/recipes-multimedia/libtiff/files/CVE-2023-25434-CVE-2023-25435.patch [new file with mode: 0644]
meta/recipes-multimedia/libtiff/files/CVE-2023-26965.patch [new file with mode: 0644]
meta/recipes-multimedia/libtiff/files/CVE-2023-26966.patch [new file with mode: 0644]
meta/recipes-multimedia/libtiff/tiff_4.1.0.bb