gpp_maybe Security update for tiff

SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-1882

This update for tiff fixes the following issues: - CVE-2022-0561: Fixed null source pointer passed as an argument to memcpy() within TIFFFetchStripThing() in tif_dirread.c (bsc#1195964). - CVE-2022-0562: Fixed null source pointer passed as an argument to memcpy() within TIFFReadDirectory() in tif_dirread.c (bsc#1195965). - CVE-2022-0865: Fixed assertion failure in TIFFReadAndRealloc (bsc#1197066). - CVE-2022-0909: Fixed divide by zero error in tiffcrop that could have led to a denial-of-service via a crafted tiff file (bsc#1197072). - CVE-2022-0924: Fixed out-of-bounds read error in tiffcp that could have led to a denial-of-service via a crafted tiff file (bsc#1197073). - CVE-2022-0908: Fixed null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() (bsc#1197074). - CVE-2022-1056: Fixed out-of-bounds read error in tiffcrop that could have led to a denial-of-service via a crafted tiff file (bsc#1197631). - CVE-2022-0891: Fixed heap buffer overflow in extractImageSection (bsc#1197068).

• Release Date
  May 30 2022
• References
  Bugzilla: 1197072, 1195965, 1197074, 1197068, 1197073, 1197631, 1197066, 1195964
  CVEs: CVE-2022-0924, CVE-2022-1056, CVE-2022-0865, CVE-2022-0891, CVE-2022-0561, CVE-2022-0562, CVE-2022-0908, CVE-2022-0909
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Package Hub 15.4 s390x

• Packages
  tiff
  Tools for Converting from and to the Tagged Image File Format

  4.0.9-150000.45.8.1 lock rpm lock src

SUSE Package Hub 15.4 x86_64

• Packages
  tiff
  Tools for Converting from and to the Tagged Image File Format

  4.0.9-150000.45.8.1 lock rpm lock src

SUSE Package Hub 15.4 aarch64

• Packages
  tiff
  Tools for Converting from and to the Tagged Image File Format

  4.0.9-150000.45.8.1 lock rpm lock src

SUSE Package Hub 15.4 ppc64le

• Packages
  tiff
  Tools for Converting from and to the Tagged Image File Format

  4.0.9-150000.45.8.1 lock rpm lock src