<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-multimedia/libtiff/tiff_4.5.1.bb, branch master</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=master</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=master'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2023-09-26T09:35:27+00:00</updated>
<entry>
<title>tiff: upgrade 4.5.1 -&gt; 4.6.0</title>
<updated>2023-09-26T09:35:27+00:00</updated>
<author>
<name>Alexander Kanavin</name>
<email>alex.kanavin@gmail.com</email>
</author>
<published>2023-09-22T07:24:27+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=8c5dd21254be4775a3b4aa9e60d852e941dfa255'/>
<id>urn:sha1:8c5dd21254be4775a3b4aa9e60d852e941dfa255</id>
<content type='text'>
(From OE-Core rev: 9e80f93ada4eae638350d86b8aa514203f757d43)

Signed-off-by: Alexander Kanavin &lt;alex@linutronix.de&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>tiff: fix CVE-2023-41175</title>
<updated>2023-09-20T07:57:26+00:00</updated>
<author>
<name>Yogita Urade</name>
<email>yogita.urade@windriver.com</email>
</author>
<published>2023-09-15T07:34:49+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=558f2e49a50e5c9daebd586b6a02b598aa1f6dd0'/>
<id>urn:sha1:558f2e49a50e5c9daebd586b6a02b598aa1f6dd0</id>
<content type='text'>
libtiff: potential integer overflow in raw2tiff.c

References:
https://bugzilla.redhat.com/show_bug.cgi?id=2235264
https://security-tracker.debian.org/tracker/CVE-2023-41175
https://gitlab.com/libtiff/libtiff/-/issues/592

(From OE-Core rev: 4ee806cbc12fbc830b09ba6222e96b1e5f24539f)

Signed-off-by: Yogita Urade &lt;yogita.urade@windriver.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>tiff: fix CVE-2023-40745</title>
<updated>2023-09-20T07:57:26+00:00</updated>
<author>
<name>Yogita Urade</name>
<email>yogita.urade@windriver.com</email>
</author>
<published>2023-09-15T07:34:48+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=1843db6ae3aa77aa1d4e68dd3b130c419df548f8'/>
<id>urn:sha1:1843db6ae3aa77aa1d4e68dd3b130c419df548f8</id>
<content type='text'>
libtiff: integer overflow in tiffcp.c

References:
https://security-tracker.debian.org/tracker/CVE-2023-40745
https://gitlab.com/libtiff/libtiff/-/issues/591
https://bugzilla.redhat.com/show_bug.cgi?id=2235265

(From OE-Core rev: c3d4fbeb51278a04a6800c894c681733ad2259ca)

Signed-off-by: Yogita Urade &lt;yogita.urade@windriver.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>cve_check: convert CVE_CHECK_IGNORE to CVE_STATUS</title>
<updated>2023-07-21T10:52:26+00:00</updated>
<author>
<name>Andrej Valek</name>
<email>andrej.valek@siemens.com</email>
</author>
<published>2023-07-20T07:19:50+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=c15e506a4674e558922c5a75512ca2b5c296cd44'/>
<id>urn:sha1:c15e506a4674e558922c5a75512ca2b5c296cd44</id>
<content type='text'>
- Try to add convert and apply statuses for old CVEs
- Drop some obsolete ignores, while they are not relevant for current
  version

(From OE-Core rev: 1634ed4048cf56788cd5c2c1bdc979b70afcdcd7)

Signed-off-by: Andrej Valek &lt;andrej.valek@siemens.com&gt;
Reviewed-by: Peter Marko &lt;peter.marko@siemens.com&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>tiff: upgrade to 4.5.1</title>
<updated>2023-07-10T10:36:34+00:00</updated>
<author>
<name>Ross Burton</name>
<email>ross.burton@arm.com</email>
</author>
<published>2023-07-03T12:19:25+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=238b4ff55e1a1c267dda5277f12b2bcb1fb2f5ea'/>
<id>urn:sha1:238b4ff55e1a1c267dda5277f12b2bcb1fb2f5ea</id>
<content type='text'>
Also remove old CVE_CHECK_IGNOREs which are no longer needed due to CPE
updates.

(From OE-Core rev: 2200fde7011c4206382150c2602b2eb17423d45e)

Signed-off-by: Ross Burton &lt;ross.burton@arm.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
