[ubuntu/bionic-security] tiff 4.0.9-5ubuntu0.10 (Accepted)
Fabian Toepfer
fabian.toepfer at canonical.com
Mon Mar 6 15:51:34 UTC 2023
tiff (4.0.9-5ubuntu0.10) bionic-security; urgency=medium
* SECURITY UPDATE: out-of-bounds reads
- debian/patches/CVE-2023-0795.patch: Amend rotateImage() not to toggle the
input image width and length parameters when only cropped image sections
are rotated in tiffcrop.c.
- CVE-2023-0795
- CVE-2023-0796
- CVE-2023-0797
- CVE-2023-0798
- CVE-2023-0799
* SECURITY UPDATE: out-of-bounds writes
- debian/patches/CVE-2023-0800.patch: added check for assumption on
composite images in tiffcrop.c.
- CVE-2023-0800
- CVE-2023-0801
- CVE-2023-0802
- CVE-2023-0803
- CVE-2023-0804
Date: 2023-03-03 17:37:08.737665+00:00
Changed-By: Fabian Toepfer <fabian.toepfer at canonical.com>
https://launchpad.net/ubuntu/+source/tiff/4.0.9-5ubuntu0.10
-------------- next part --------------
Sorry, changesfile not available.
More information about the Bionic-changes
mailing list