]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commit
tiff: Security fixes CVE-2022-1354 and CVE-2022-1355
authorYi Zhao <yi.zhao@windriver.com>
Tue, 13 Sep 2022 00:32:05 +0000 (08:32 +0800)
committerSteve Sakoman <steve@sakoman.com>
Tue, 13 Sep 2022 15:35:33 +0000 (05:35 -1000)
commit8414d39f3f89cc1176bd55c9455ad942db8ea4b1
tree11415973b6fb5daa03ffcd5206d124c94f11e77f
parent67df7488bf66183ffdb9f497f00ad291b79210d3
tiff: Security fixes CVE-2022-1354 and CVE-2022-1355

References:
https://nvd.nist.gov/vuln/detail/CVE-2022-1354
https://security-tracker.debian.org/tracker/CVE-2022-1354

https://nvd.nist.gov/vuln/detail/CVE-2022-1355
https://security-tracker.debian.org/tracker/CVE-2022-1355

Patches from:

CVE-2022-1354:
https://gitlab.com/libtiff/libtiff/-/commit/87f580f39011109b3bb5f6eca13fac543a542798

CVE-2022-1355:
https://gitlab.com/libtiff/libtiff/-/commit/c1ae29f9ebacd29b7c3e0c7db671af7db3584bc2

(From OE-Core rev: 6c373c041f1dd45458866408d1ca16d47cacbd86)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-multimedia/libtiff/tiff/CVE-2022-1354.patch [new file with mode: 0644]
meta/recipes-multimedia/libtiff/tiff/CVE-2022-1355.patch [new file with mode: 0644]
meta/recipes-multimedia/libtiff/tiff_4.1.0.bb