Adrian Bunk pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
abb15c01 by Adrian Bunk at 2023-07-31T20:12:49+03:00
CVE-2023-25435/tiff had the same fix as CVE-2023-0795
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -27522,9 +27522,9 @@ CVE-2023-25437 (An issue was discovered in vTech VCS754
version 1.1.1.A before 1
CVE-2023-25436
RESERVED
CVE-2023-25435 (libtiff 4.5.0 is vulnerable to Buffer Overflow via
extractContigSample ...)
- - tiff 4.5.1~rc3-1
- [bookworm] - tiff <no-dsa> (Minor issue)
- [bullseye] - tiff <no-dsa> (Minor issue)
+ - tiff 4.5.0-5
+ [bookworm] - tiff 4.2.0-1+deb11u4
+ [bullseye] - tiff 4.1.0+git191117-2~deb10u7
NOTE: https://gitlab.com/libtiff/libtiff/-/issues/518
NOTE:
https://gitlab.com/libtiff/libtiff/-/commit/69818e2f2d246e6631ac2a2da692c3706b849c38
(v4.5.1rc1)
CVE-2023-25434 (libtiff 4.5.0 is vulnerable to Buffer Overflow via
extractContigSample ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/abb15c014e2e7ee5f7971b14c4f4cb6a299642c9
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/abb15c014e2e7ee5f7971b14c4f4cb6a299642c9
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
