Mark 2 libtiff CVEs as mitigated [pdfium : main]

Lei Zhang (Gerrit)

unread,

Oct 11, 2023, 1:47:08 PM10/11/23

to Tom Sepez, pdfium-...@googlegroups.com, Lei Zhang

Attention is currently required from: Tom Sepez.

Lei Zhang would like Tom Sepez to review this change.

Mark 2 libtiff CVEs as mitigated

The CVEs in question are for libtiff tools, which are not in this copy
of the libtiff source.

Bug: b/304591320
Change-Id: Iff039cb3789b7e1a217dc60217c1eee2814c29aa
---
M third_party/libtiff/METADATA
1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/third_party/libtiff/METADATA b/third_party/libtiff/METADATA
index 35e01b9..7d36a06 100644
--- a/third_party/libtiff/METADATA
+++ b/third_party/libtiff/METADATA
@@ -13,5 +13,7 @@
     mitigated_security_patch: "CVE-2023-25434"
     mitigated_security_patch: "CVE-2023-25435"
     mitigated_security_patch: "CVE-2023-26965"
+    mitigated_security_patch: "CVE-2023-40745"
+    mitigated_security_patch: "CVE-2023-41175"
   }
-}
\ No newline at end of file
+}

To view, visit change 112530. To unsubscribe, or for help writing mail filters, visit settings.

Tom Sepez (Gerrit)

unread,

Oct 11, 2023, 3:22:15 PM10/11/23

to Lei Zhang, pdfium-...@googlegroups.com, Pdfium LUCI CQ

Attention is currently required from: Lei Zhang.

Patch set 1:Code-Review +1

View Change

To view, visit change 112530. To unsubscribe, or for help writing mail filters, visit settings.

Lei Zhang (Gerrit)

unread,

Oct 11, 2023, 3:50:04 PM10/11/23

to Lei Zhang, pdfium-...@googlegroups.com, Tom Sepez, Pdfium LUCI CQ

Patch set 1:Commit-Queue +2

View Change

To view, visit change 112530. To unsubscribe, or for help writing mail filters, visit settings.

Pdfium LUCI CQ (Gerrit)

unread,

Oct 11, 2023, 3:51:51 PM10/11/23

to Lei Zhang, pdfium-...@googlegroups.com, Tom Sepez

Pdfium LUCI CQ submitted this change.

View Change

Approvals:
  Tom Sepez: Looks good to me
  Lei Zhang: Commit

Mark 2 libtiff CVEs as mitigated

The CVEs in question are for libtiff tools, which are not in this copy
of the libtiff source.

Bug: b/304591320
Change-Id: Iff039cb3789b7e1a217dc60217c1eee2814c29aa

Reviewed-on: https://pdfium-review.googlesource.com/c/pdfium/+/112530
Reviewed-by: Tom Sepez <tse...@chromium.org>
Commit-Queue: Lei Zhang <the...@chromium.org>


---
M third_party/libtiff/METADATA
1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/third_party/libtiff/METADATA b/third_party/libtiff/METADATA
index 35e01b9..7d36a06 100644
--- a/third_party/libtiff/METADATA
+++ b/third_party/libtiff/METADATA
@@ -13,5 +13,7 @@
     mitigated_security_patch: "CVE-2023-25434"
     mitigated_security_patch: "CVE-2023-25435"
     mitigated_security_patch: "CVE-2023-26965"
+    mitigated_security_patch: "CVE-2023-40745"
+    mitigated_security_patch: "CVE-2023-41175"
   }
-}
\ No newline at end of file
+}

To view, visit change 112530. To unsubscribe, or for help writing mail filters, visit settings.

Reply all

Reply to author

Forward