diff --git a/meta/recipes-multimedia/libtiff/tiff/CVE-2025-8177.patch b/meta/recipes-multimedia/libtiff/tiff/CVE-2025-8177.patch new file mode 100644 index 0000000000..30dbccd94f --- /dev/null +++ b/meta/recipes-multimedia/libtiff/tiff/CVE-2025-8177.patch @@ -0,0 +1,35 @@ +From e8de4dc1f923576dce9d625caeebd93f9db697e1 Mon Sep 17 00:00:00 2001 +From: Lee Howard +Date: Wed, 25 Jun 2025 17:14:18 +0000 +Subject: [PATCH] Fix for thumbnail issue #715 + +CVE: CVE-2025-8177 +Upstream-Status: Backport [https://gitlab.com/libtiff/libtiff/-/commit/e8de4dc1f923576dce9d625caeebd93f9db697e1] + +Signed-off-by: Yogita Urade +--- + tools/thumbnail.c | 8 ++++++++ + 1 file changed, 8 insertions(+) + +diff --git a/tools/thumbnail.c b/tools/thumbnail.c +index 274705d..8960d36 100644 +--- a/tools/thumbnail.c ++++ b/tools/thumbnail.c +@@ -538,7 +538,15 @@ setrow(uint8_t* row, uint32_t nrows, const uint8_t* rows[]) + } + acc += bits[*src & mask1]; + } ++ if (255 * acc / area < 256) ++ { + *row++ = cmap[(255*acc)/area]; ++ } ++ else ++ { ++ fprintf(stderr, "acc=%d, area=%d\n", acc, area); ++ *row++ = cmap[0]; ++ } + } + } + +-- +2.40.0 diff --git a/meta/recipes-multimedia/libtiff/tiff_4.3.0.bb b/meta/recipes-multimedia/libtiff/tiff_4.3.0.bb index 6ff31bd0bb..4c9c212312 100644 --- a/meta/recipes-multimedia/libtiff/tiff_4.3.0.bb +++ b/meta/recipes-multimedia/libtiff/tiff_4.3.0.bb @@ -58,6 +58,7 @@ SRC_URI = "http://download.osgeo.org/libtiff/tiff-${PV}.tar.gz \ file://CVE-2025-8176-0001.patch \ file://CVE-2025-8176-0002.patch \ file://CVE-2025-8176-0003.patch \ + file://CVE-2025-8177.patch \ " SRC_URI[sha256sum] = "0e46e5acb087ce7d1ac53cf4f56a09b221537fc86dfc5daaad1c2e89e1b37ac8"