[Git][security-tracker-team/security-tracker][master] two more tiff non issues fixed

Moritz Muehlenhoff (@jmm) jmm at debian.org
Mon Sep 22 07:37:46 BST 2025



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5e9ffcb1 by Moritz Muehlenhoff at 2025-09-22T08:35:07+02:00
two more tiff non issues fixed

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -18540,14 +18540,18 @@ CVE-2025-50184 (DbGate is cross-platform database manager. In versions 6.4.3-pre
 CVE-2024-13507 (The GeoDirectory \u2013 WP Business Directory Plugin and Classified Li ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2025-8177 (A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as ...)
-	- tiff <unfixed> (unimportant)
+	- tiff 4.7.1-1 (unimportant)
 	NOTE: https://gitlab.com/libtiff/libtiff/-/issues/715
 	NOTE: https://gitlab.com/libtiff/libtiff/-/merge_requests/737
+	NOTE: Fixed by: https://gitlab.com/libtiff/libtiff/-/commit/e8de4dc1f923576dce9d625caeebd93f9db697e1 (v4.7.1)
 	NOTE: Crash in CLI tool, no security impact
 CVE-2025-8176 (A vulnerability was found in LibTIFF up to 4.7.0. It has been declared ...)
-	- tiff <unfixed> (unimportant)
+	- tiff 4.7.1-1 (unimportant)
 	NOTE: https://gitlab.com/libtiff/libtiff/-/issues/707
 	NOTE: https://gitlab.com/libtiff/libtiff/-/merge_requests/727
+	NOTE: Fixed by: https://gitlab.com/libtiff/libtiff/-/commit/ce46f002eca4148497363f80fab33f9396bcbeda (v4.7.1)
+	NOTE: Fixed by: https://gitlab.com/libtiff/libtiff/-/commit/ecc4ddbf1f0fed7957d1e20361e37f01907898e0 (v4.7.1)
+	NOTE: Fixed by: https://gitlab.com/libtiff/libtiff/-/commit/78397815cdf7e9ad79943e00c3f06a6df9bf45c5 (v4.7.1)
 	NOTE: Crash in CLI tool, no security impact
 CVE-2025-8197
 	REJECTED



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5e9ffcb1a147660dfa052f98ac1a61b62e83c797

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5e9ffcb1a147660dfa052f98ac1a61b62e83c797
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250922/5804d4ba/attachment.htm>


More information about the debian-security-tracker-commits mailing list