mirror of
https://git.yoctoproject.org/poky
synced 2026-05-07 16:59:22 +00:00
tiff: CVE patch correction for CVE-2023-3576
- The commit [https://gitlab.com/libtiff/libtiff/-/commit/881a070194783561fd209b7c789a4e75566f7f37] fixes CVE-2023-3576 - Hence, renamed the CVE-2023-3618-1.patch to CVE-2023-3576.patch - Reference: https://security-tracker.debian.org/tracker/CVE-2023-3576 https://security-tracker.debian.org/tracker/CVE-2023-3618 (From OE-Core rev: 63daa00279c0c3a8650d6e08a68cc32a2b98d843) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
This commit is contained in:
committed by
Steve Sakoman
parent
f948c66f75
commit
83d53dc031
+2
-1
@@ -4,8 +4,9 @@ Date: Tue, 7 Mar 2023 15:02:08 +0800
|
||||
Subject: [PATCH] Fix memory leak in tiffcrop.c
|
||||
|
||||
Upstream-Status: Backport [https://gitlab.com/libtiff/libtiff/-/commit/881a070194783561fd209b7c789a4e75566f7f37]
|
||||
CVE: CVE-2023-3618
|
||||
CVE: CVE-2023-3576
|
||||
Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
|
||||
Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
|
||||
---
|
||||
tools/tiffcrop.c | 7 ++++++-
|
||||
1 file changed, 6 insertions(+), 1 deletion(-)
|
||||
@@ -40,8 +40,8 @@ SRC_URI = "http://download.osgeo.org/libtiff/tiff-${PV}.tar.gz \
|
||||
file://CVE-2023-26965.patch \
|
||||
file://CVE-2023-2908.patch \
|
||||
file://CVE-2023-3316.patch \
|
||||
file://CVE-2023-3618-1.patch \
|
||||
file://CVE-2023-3618-2.patch \
|
||||
file://CVE-2023-3576.patch \
|
||||
file://CVE-2023-3618.patch \
|
||||
file://CVE-2023-26966.patch \
|
||||
file://CVE-2022-40090.patch \
|
||||
file://CVE-2023-1916.patch \
|
||||
|
||||
Reference in New Issue
Block a user