[Git][security-tracker-team/security-tracker][master] Add CVE-2023-3316/tiff

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ff02c4f8 by Salvatore Bonaccorso at 2023-06-20T09:24:54+02:00
Add CVE-2023-3316/tiff

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4,7 +4,10 @@ CVE-2023-3317 [wifi: mt76: mt7921: Fix use-after-free in fw features query]
 	- linux 6.3.7-1
 	NOTE: https://git.kernel.org/linus/2ceb76f734e37833824b7fab6af17c999eb48d2b (6.3-rc6)
 CVE-2023-3316 (A NULL pointer dereference in TIFFClose() is caused by a failure to op ...)
-	TODO: check
+	- tiff 4.5.1~rc3-1
+	NOTE: https://gitlab.com/libtiff/libtiff/-/issues/515
+	NOTE: https://gitlab.com/libtiff/libtiff/-/merge_requests/468
+	NOTE: https://gitlab.com/libtiff/libtiff/-/commit/d63de61b1ec3385f6383ef9a1f453e4b8b11d536 (v4.5.1rc1)
 CVE-2023-3312 (A vulnerability was found in drivers/cpufreq/qcom-cpufreq-hw.c in cpuf ...)
 	- linux <not-affected> (Vulnerable code never present in released version)
 	NOTE: https://git.kernel.org/linus/ba5e770c9698782bc203bbf5cf3b36a77720bdbe (6.4-rc1)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ff02c4f80800b6342bd2a55af1ea79816d89a264

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ff02c4f80800b6342bd2a55af1ea79816d89a264
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230620/8b65a24f/attachment.htm>