[Git][security-tracker-team/security-tracker][master] Add some new tiff issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e8e66d02 by Salvatore Bonaccorso at 2022-10-21T23:27:12+02:00
Add some new tiff issues

Those need more inspection for severity.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -385,9 +385,13 @@ CVE-2022-3629 (A vulnerability was found in Linux Kernel. It has been declared a
 CVE-2022-3628
 	RESERVED
 CVE-2022-3627 (LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif ...)
-	TODO: check
+	- tiff <unfixed>
+	NOTE: https://gitlab.com/libtiff/libtiff/-/commit/236b7191f04c60d09ee836ae13b50f812c841047
+	NOTE: https://gitlab.com/libtiff/libtiff/-/issues/411
 CVE-2022-3626 (LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif ...)
-	TODO: check
+	- tiff <unfixed>
+	NOTE: https://gitlab.com/libtiff/libtiff/-/commit/236b7191f04c60d09ee836ae13b50f812c841047
+	NOTE: https://gitlab.com/libtiff/libtiff/-/issues/426
 CVE-2022-3625 (A vulnerability was found in Linux Kernel. It has been classified as c ...)
 	TODO: check
 CVE-2022-3624 (A vulnerability was found in Linux Kernel and classified as problemati ...)
@@ -441,11 +445,17 @@ CVE-2022-3601
 CVE-2022-3600
 	RESERVED
 CVE-2022-3599 (LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools ...)
-	TODO: check
+	- tiff <unfixed>
+	NOTE: https://gitlab.com/libtiff/libtiff/-/commit/e813112545942107551433d61afd16ac094ff246
+	NOTE: https://gitlab.com/libtiff/libtiff/-/issues/398
 CVE-2022-3598 (LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifte ...)
-	TODO: check
+	- tiff <unfixed>
+	NOTE: https://gitlab.com/libtiff/libtiff/-/commit/cfbb883bf6ea7bedcb04177cc4e52d304522fdff
+	NOTE: https://gitlab.com/libtiff/libtiff/-/issues/435
 CVE-2022-3597 (LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif ...)
-	TODO: check
+	- tiff <unfixed>
+	NOTE: https://gitlab.com/libtiff/libtiff/-/commit/236b7191f04c60d09ee836ae13b50f812c841047
+	NOTE: https://gitlab.com/libtiff/libtiff/-/issues/413
 CVE-2021-46846
 	RESERVED
 CVE-2020-36607
@@ -636,7 +646,10 @@ CVE-2022-3572
 CVE-2022-3571
 	RESERVED
 CVE-2022-3570 (Multiple heap buffer overflows in tiffcrop.c utility in libtiff librar ...)
-	TODO: check
+	- tiff <unfixed>
+	NOTE: https://gitlab.com/libtiff/libtiff/-/commit/bd94a9b383d8755a27b5a1bc27660b8ad10b094c
+	NOTE: https://gitlab.com/libtiff/libtiff/-/issues/381
+	NOTE: https://gitlab.com/libtiff/libtiff/-/issues/386
 CVE-2022-3569 (Due to an issue with incorrect sudo permissions, Zimbra Collaboration  ...)
 	NOT-FOR-US: Zimbra
 CVE-2022-3568



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e8e66d02b0e90c1268f55b319148faf4dbaacf6d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e8e66d02b0e90c1268f55b319148faf4dbaacf6d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20221021/bce70316/attachment-0001.htm>