All ProjectsArch LinuxCommunity PackagesPacmanRelease Engineering Switch

Show Task #

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!

Tasklist

FS#77437 - [libtiff] CVE-2022-48281

Task Type Bug Report Category Packages: Extra Status Closed Assigned To David Runge (dvzrv) Levente Polyak (anthraxx) Architecture All Severity High Priority Normal Reported Version Due in Version Undecided Due Date Undecided Percent Complete Votes 0 Private No

Details Description: Attached diff adds the upstream libtiff fix for CVE-2022-48281 Additional info: Other patches to consider but didn't seem important enough to me: https://sources.debian.org/src/tiff/4.5.0-4/debian/patches/TIFFSetDirectory_avoid_harmless_unsigned-integer-overflow.patch/ https://sources.debian.org/src/tiff/4.5.0-4/debian/patches/TIFFWriteDirectorySec_avoid_harmless_unsigned-integer-overflow.patch/    libtiff.diff (1.5 KiB)