diff options
| author |   Yi Zhao <yi.zhao@windriver.com> | 2017-09-21 11:21:39 +0800 |
|---|---|---|
| committer |   Richard Purdie <richard.purdie@linuxfoundation.org> | 2017-09-22 17:14:42 +0100 |
| commit | 8dc9d74b7e6816f59eb61dcda6a93c0753a5e4ab (patch) | |
| tree | ae715e218d7a31ae56f84ee572fd03509cc1d844 /meta/recipes-multimedia/libtiff/tiff_4.0.8.bb | |
| parent | 89ddf2516b713e6622df95ab391423b033d4271a (diff) | |
| download | openembedded-core-contrib-8dc9d74b7e6816f59eb61dcda6a93c0753a5e4ab.tar.gz | |
tiff: Security fix CVE-2017-13726 and CVE-2017-13727
References:
https://nvd.nist.gov/vuln/detail/CVE-2017-13726
https://nvd.nist.gov/vuln/detail/CVE-2017-13727
Patches from:
CVE-2017-13726:
https://github.com/vadz/libtiff/commit/f91ca83a21a6a583050e5a5755ce1441b2bf1d7e
CVE-2017-13727:
https://github.com/vadz/libtiff/commit/b6af137bf9ef852f1a48a50a5afb88f9e9da01cc
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Diffstat (limited to 'meta/recipes-multimedia/libtiff/tiff_4.0.8.bb')
| -rw-r--r-- | meta/recipes-multimedia/libtiff/tiff_4.0.8.bb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/meta/recipes-multimedia/libtiff/tiff_4.0.8.bb b/meta/recipes-multimedia/libtiff/tiff_4.0.8.bb index c8ad5d5c06..cb91baa607 100644 --- a/meta/recipes-multimedia/libtiff/tiff_4.0.8.bb +++ b/meta/recipes-multimedia/libtiff/tiff_4.0.8.bb @@ -10,6 +10,8 @@ SRC_URI = "http://download.osgeo.org/libtiff/tiff-${PV}.tar.gz \ file://CVE-2017-9936.patch \ file://CVE-2017-10688.patch \ file://CVE-2017-11335.patch \ + file://CVE-2017-13726.patch \ + file://CVE-2017-13727.patch \ " SRC_URI[md5sum] = "2a7d1c1318416ddf36d5f6fa4600069b" |