Skip to content

fix: Fix CVE-2026-4775#8

Open
deepin-ci-robot wants to merge 1 commit intomasterfrom
fix/CVE-2026-4775
Open

fix: Fix CVE-2026-4775#8
deepin-ci-robot wants to merge 1 commit intomasterfrom
fix/CVE-2026-4775

Conversation

@deepin-ci-robot
Copy link
Copy Markdown
Contributor

@deepin-ci-robot deepin-ci-robot commented Apr 13, 2026

Prevent integer overflow and later heap overflow on images with huge width in YCbCr tile decoding functions.

Upstream: https://gitlab.com/libtiff/libtiff/-/commit/782a11d6b5b61c6dc21e714950a4af5bf89f023c

Co-Authored-By: hudeng hudeng@deepin.org

@deepin-ci-robot
Copy link
Copy Markdown
Contributor Author

deepin-ci-robot commented Apr 13, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign xzl01 for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@github-actions
Copy link
Copy Markdown

github-actions bot commented Apr 13, 2026 •
edited
Loading

TAG Bot

TAG: 4.7.1-1deepin1
EXISTED: no
DISTRIBUTION: unstable

@deepin-ci-robot
Copy link
Copy Markdown
Contributor Author

deepin-ci-robot commented Apr 13, 2026

/hold
因为该quilt包的上游版本号变更，详情见: deepin-community/infra-settings#134

@Zeno-sole
Copy link
Copy Markdown
Contributor

Zeno-sole commented Apr 13, 2026

/integrate

@github-actions
Copy link
Copy Markdown

github-actions bot commented Apr 13, 2026

AutoIntegrationPr Bot
auto integrate with pr url: deepin-community/Repository-Integration#3820
PrNumber: 3820
PrBranch: auto-integration-24344656383

@deepin-community-ci-bot deepin-community-ci-bot bot mentioned this pull request Apr 13, 2026
Open
@deepin-ci-robot @hudeng-go
tiff: Fix CVE-2026-4775
fc34107 
Prevent integer overflow and later heap overflow on images with huge
width in YCbCr tile decoding functions.

Upstream: https://gitlab.com/libtiff/libtiff/-/commit/782a11d6b5b61c6dc21e714950a4af5bf89f023c

Co-Authored-By: hudeng <hudeng@deepin.org>
@Zeno-sole
Copy link
Copy Markdown
Contributor

Zeno-sole commented Apr 14, 2026

/integrate

UTsweetyfish
UTsweetyfish requested changes Apr 14, 2026
View reviewed changes
Copy link
Copy Markdown
Contributor

@UTsweetyfish UTsweetyfish left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Co-Authored-By 无 AI 使用说明
d/changelog 未说明使用 AI

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@UTsweetyfish UTsweetyfish UTsweetyfish requested changes

@chenchongbiao chenchongbiao Awaiting requested review from chenchongbiao

Assignees

No one assigned

Labels

do-not-merge/hold

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@deepin-ci-robot @Zeno-sole @UTsweetyfish