diff options
| author | Peter Marko <peter.marko@siemens.com> | 2024-12-31 22:25:08 +0100 |
|---|---|---|
| committer | Steve Sakoman <steve@sakoman.com> | 2025-01-09 08:41:03 -0800 |
| commit | 08538e11df93fa1691daf9e2b92a21d2a5ff8f2a (patch) | |
| tree | e6832c070d53e51681197c1597d3bd016b56c9b1 /meta | |
| parent | bc35e810802d662a9e665864e1b0fc0752402a7f (diff) | |
| download | poky-08538e11df93fa1691daf9e2b92a21d2a5ff8f2a.tar.gz | |
tiff: ignore CVE-2023-2731
This further tweaks fix for CVE-2022-1622/CVE-2022-1623 by adding it to
one additional goto label.
Previous fix:
https://gitlab.com/libtiff/libtiff/-/commit/b4e79bfa0c7d2d08f6f1e7ec38143fc8cb11394a
Additional fix:
https://gitlab.com/libtiff/libtiff/-/commit/9be22b639ea69e102d3847dca4c53ef025e9527b
(From OE-Core rev: c7632c5a3853290292fa695a0a7b15eb06159036)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Diffstat (limited to 'meta')
| -rw-r--r-- | meta/recipes-multimedia/libtiff/tiff_4.3.0.bb | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/meta/recipes-multimedia/libtiff/tiff_4.3.0.bb b/meta/recipes-multimedia/libtiff/tiff_4.3.0.bb index 27bb306e94..a47fc4bd34 100644 --- a/meta/recipes-multimedia/libtiff/tiff_4.3.0.bb +++ b/meta/recipes-multimedia/libtiff/tiff_4.3.0.bb | |||
| @@ -65,8 +65,8 @@ UPSTREAM_CHECK_REGEX = "tiff-(?P<pver>\d+(\.\d+)+).tar" | |||
| 65 | # and 4.3.0 doesn't have the issue | 65 | # and 4.3.0 doesn't have the issue |
| 66 | CVE_CHECK_IGNORE += "CVE-2015-7313" | 66 | CVE_CHECK_IGNORE += "CVE-2015-7313" |
| 67 | # These issues only affect libtiff post-4.3.0 but before 4.4.0, | 67 | # These issues only affect libtiff post-4.3.0 but before 4.4.0, |
| 68 | # caused by 3079627e and fixed by b4e79bfa. | 68 | # caused by 3079627e and fixed by b4e79bfa and again by 9be22b63 |
| 69 | CVE_CHECK_IGNORE += "CVE-2022-1622 CVE-2022-1623" | 69 | CVE_CHECK_IGNORE += "CVE-2022-1622 CVE-2022-1623 CVE-2023-2731" |
| 70 | # Issue is in jbig which we don't enable | 70 | # Issue is in jbig which we don't enable |
| 71 | CVE_CHECK_IGNORE += "CVE-2022-1210" | 71 | CVE_CHECK_IGNORE += "CVE-2022-1210" |
| 72 | 72 | ||