# Fix: cherry-pick

### tiff patch for [CVE-2023-6277](https://github.com/advisories/GHSA-fq8g-55cp-756j)

In this case, a patch for the reported CVE is available:

- https://gitlab.com/libtiff/libtiff/-/merge_requests/545

The patch was merged upstream, but not yet released as an released upstream version. The patch was applied to our package: https://github.com/wolfi-dev/os/pull/9662 as we wait for the upstream project to cut a new release.
