On Tue, Apr 14, 2026 at 08:09:42PM +0100, Stuart Henderson wrote:
> On 2026/04/14 20:04, Stuart Henderson wrote:
> > On 2026/04/14 18:02, Christian Weisgerber wrote:
> > > Grab upstream fixes for integer overflows that lead to heap overflows.
> > > One is a fix for CVE-2026-4775.  While looking over the commit history,
> > > I also noticed another fix that looked worthwhile.  This is a game
> > > of whack-a-mole ...
> > > 
> > > OK?
> > 
> > yes.
> > 
> > when checking commits for those I noticed
> > https://gitlab.com/libtiff/libtiff/-/commit/200e5ca51e477ac439ef9514c3c3ac8c9799a5c8
> > which would be worth grabbing too, I think - I'll prepare a diff.
> 
> (bump intentionally not included in the diff, will do at commit)

ok tb