[Pkg-phototools-devel] Bug#882032: optipng: CVE-2017-1000229: Integer Overflow Bug while parsing TIFF input file

Markus Koschany apo at debian.org
Sun Nov 19 16:21:06 UTC 2017


Control: tags -1 fixed-upstream patch

Hi,

someone has prepared a patch candidate for review at

https://sourceforge.net/p/optipng/bugs/65/

It looks like it will prevent the integer overflow.

I'm attaching the patch for your convenience.

Regards,

Markus
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Prevent-integer-overflow-bug-65-CVE-2017-1000229.patch
Type: text/x-patch
Size: 903 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-phototools-devel/attachments/20171119/f6b9a99e/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 963 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-phototools-devel/attachments/20171119/f6b9a99e/attachment.sig>


More information about the Pkg-phototools-devel mailing list