]> code.ossystems Code Review - openembedded-core.git/commit
tiff: Security fix CVE-2016-3622
authorYi Zhao <yi.zhao@windriver.com>
Wed, 26 Oct 2016 08:26:48 +0000 (16:26 +0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Sun, 6 Nov 2016 23:35:16 +0000 (23:35 +0000)
commit0af0466f0381a72b560f4f2852e1d19be7b6a7fb
tree4fcb09a37c151589e1cba9f9b61105fef9d465f4
parentd66824eee47b7513b919ea04bdf41dc48a9d85e9
tiff: Security fix CVE-2016-3622

CVE-2016-3622 libtiff: The fpAcc function in tif_predict.c in the
tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to
cause a denial of service (divide-by-zero error) via a crafted TIFF
image.

External References:
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-3622
http://www.openwall.com/lists/oss-security/2016/04/07/4

Patch from:
https://github.com/vadz/libtiff/commit/92d966a5fcfbdca67957c8c5c47b467aa650b286

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
meta/recipes-multimedia/libtiff/files/CVE-2016-3622.patch [new file with mode: 0644]
meta/recipes-multimedia/libtiff/tiff_4.0.6.bb