Bug 25853 - libtiff possible new security issue CVE-2019-14973
Summary: libtiff possible new security issue CVE-2019-14973
Status: RESOLVED DUPLICATE of bug 25777
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 7
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: Nicolas Salguero
QA Contact: Sec team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2019-12-10 23:55 CET by David Walser
Modified: 2019-12-11 14:45 CET (History)
0 users

See Also:
Source RPM: libtiff-4.1.0-2.git20191120.1.mga7.src.rpm
CVE: CVE-2019-14973
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description David Walser 2019-12-10 23:55:33 CET 
SUSE has issued an advisory on November 25:
http://lists.suse.com/pipermail/sle-security-updates/2019-November/006177.html
Comment 1 Nicolas Salguero 2019-12-11 09:43:47 CET 
Hi,

That CVE is already fixed in libtiff-4.1.0-2.git20191120.1.mga7 which was pushed to updates.

Best regards,

Nico.

Status: NEW => RESOLVED
Resolution: (none) => FIXED
CVE: (none) => CVE-2019-14973
Source RPM: libtiff-4.0.10-6.git20190508.1.mga7.src.rpm => libtiff-4.1.0-2.git20191120.1.mga7.src.rpm

Comment 2 David Walser 2019-12-11 14:45:45 CET 
Thanks.

*** This bug has been marked as a duplicate of bug 25777 ***

Resolution: FIXED => DUPLICATE
Note You need to log in before you can comment on or make changes to this bug.