Bug 203671 - graphics/tiff: security/vuxml: denial of service bug in libtiff (CVE-2015-7313)
Summary: graphics/tiff: security/vuxml: denial of service bug in libtiff (CVE-2015-7313)
Status: Closed Feedback Timeout
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Many People
Assignee: Port Management Team
URL: http://www.openwall.com/lists/oss-sec...
Keywords: needs-patch, security
Depends on:
Blocks:
 
Reported: 2015-10-10 00:27 UTC by Jason Unovitch
Modified: 2016-04-13 11:34 UTC (History)
2 users (show)

See Also:
koobs: maintainer-feedback? (portmgr)

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Jason Unovitch freebsd_committer freebsd_triage 2015-10-10 00:27:50 UTC 
http://www.openwall.com/lists/oss-security/2015/09/21/7

There is a new release available but it predates the discovery of this issue.  I'm not seeing a fix that can be applied just yet but in the meantime let's get a PR in and start documenting progress on the issue.
Comment 1 Kubilay Kocak freebsd_committer freebsd_triage 2015-10-19 11:39:39 UTC 
Assign to maintainer