<html>
<head>
<base href="https://bugzilla.rosalinux.ru/">
</head>
<body><span class="vcard"><a class="email" href="mailto:a.proklov@rosalinux.ru" title="Aleksandr Proklov <a.proklov@rosalinux.ru>"> <span class="fn">Aleksandr Proklov</span></a>
</span> changed
<a class="bz_bug_link
bz_status_RESOLVED bz_closed"
title="RESOLVED FIXED - [CVE 21] libtiff 4.1.0 CVEs found"
href="https://bugzilla.rosalinux.ru/show_bug.cgi?id=13890">bug 13890</a>
<br>
<table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>What</th>
<th>Removed</th>
<th>Added</th>
</tr>
<tr>
<td style="text-align:right;">Status</td>
<td>CONFIRMED
</td>
<td>RESOLVED
</td>
</tr>
<tr>
<td style="text-align:right;">CC</td>
<td>
</td>
<td>a.proklov@rosalinux.ru
</td>
</tr>
<tr>
<td style="text-align:right;">Resolution</td>
<td>---
</td>
<td>FIXED
</td>
</tr></table>
<p>
<div>
<b><a class="bz_bug_link
bz_status_RESOLVED bz_closed"
title="RESOLVED FIXED - [CVE 21] libtiff 4.1.0 CVEs found"
href="https://bugzilla.rosalinux.ru/show_bug.cgi?id=13890#c4">Comment # 4</a>
on <a class="bz_bug_link
bz_status_RESOLVED bz_closed"
title="RESOLVED FIXED - [CVE 21] libtiff 4.1.0 CVEs found"
href="https://bugzilla.rosalinux.ru/show_bug.cgi?id=13890">bug 13890</a>
from <span class="vcard"><a class="email" href="mailto:a.proklov@rosalinux.ru" title="Aleksandr Proklov <a.proklov@rosalinux.ru>"> <span class="fn">Aleksandr Proklov</span></a>
</span></b>
<pre>CVE-2023-2731 - неприменимо к нашей версии, это для 4.5.0
CVE-2023-40745 и CVE-2023-41175 одна и таже проблема видимо, патч есть только
такой <a href="https://gitlab.com/libtiff/libtiff/-/merge_requests/516/diffs">https://gitlab.com/libtiff/libtiff/-/merge_requests/516/diffs</a>
больше апстрим еще ничего не исправил.
Остальные уязвимости закрыты патчами
libtiff 4.1.0-5
<a href="https://abf.io/build_lists/4819895">https://abf.io/build_lists/4819895</a>
<a href="https://abf.io/build_lists/4819896">https://abf.io/build_lists/4819896</a> (x64)
<a href="https://abf.io/build_lists/4819897">https://abf.io/build_lists/4819897</a>
<a href="https://abf.io/build_lists/4819898">https://abf.io/build_lists/4819898</a>
<a href="https://abf.io/build_lists/4819899">https://abf.io/build_lists/4819899</a></pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the QA Contact for the bug.</li>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>