]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commitdiff
tiff: CVE-2022-3599.patch also fix CVE-2022-4645 CVE-2023-30774
authorChee Yang Lee <chee.yang.lee@intel.com>
Mon, 21 Aug 2023 01:16:31 +0000 (09:16 +0800)
committerSteve Sakoman <steve@sakoman.com>
Mon, 21 Aug 2023 17:57:54 +0000 (07:57 -1000)
The same patch also fix CVE-2022-4645 CVE-2023-30774
CVE-2022-4645 - https://gitlab.com/libtiff/libtiff/-/issues/277
CVE-2023-30774 - https://gitlab.com/libtiff/libtiff/-/issues/463

Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-multimedia/libtiff/files/CVE-2022-3599.patch

index 9689a99638164b8e3b8a90b094b533d7e5a56c89..b3232d9002ccc5353e5317d01314a5c24b19ddf9 100644 (file)
@@ -4,7 +4,7 @@ Date: Tue, 30 Aug 2022 16:56:48 +0200
 Subject: [PATCH] Revised handling of TIFFTAG_INKNAMES and related
 
 Upstream-Status: Backport [import from debian http://security.debian.org/debian-security/pool/updates/main/t/tiff/tiff_4.1.0+git191117-2~deb10u7.debian.tar.xz ]
-CVE: CVE-2022-3599
+CVE: CVE-2022-3599 CVE-2022-4645 CVE-2023-30774
 Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com>
 
 Origin: https://gitlab.com/libtiff/libtiff/-/commit/e813112545942107551433d61afd16ac094ff246