]> code.ossystems Code Review - openembedded-core.git/commit
Code Review / openembedded-core.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: 33864dd) | patch
libtiff: Security Advisory - libtiff - CVE-2017-5225
authorLi Zhou <li.zhou@windriver.com>
Wed, 25 Jan 2017 09:28:22 +0000 (17:28 +0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Tue, 31 Jan 2017 14:40:17 +0000 (14:40 +0000)
commit434990304bdfb70441b399ff8998dbe3fe1b1e1f
treefc2d852aeef4861ceca71a2413adb3cd0154bac1tree | snapshot
parent33864ddc1ca5326e0b2bb7443410069a8cd9f57bcommit | diff
libtiff: Security Advisory - libtiff - CVE-2017-5225

Libtiff is vulnerable to a heap buffer overflow in the tools/tiffcp
resulting in DoS or code execution via a crafted BitsPerSample value.

Porting patch from <https://github.com/vadz/libtiff/commit/
5c080298d59efa53264d7248bbe3a04660db6ef7> to solve CVE-2017-5225.

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
meta/recipes-multimedia/libtiff/files/libtiff-CVE-2017-5225.patch [new file with mode: 0644] blob
meta/recipes-multimedia/libtiff/tiff_4.0.7.bb diff | blob | history
Mirror of the official openembedded-core repository