< back to search

gpp_maybe Security update for tiff

SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4869

This update for tiff fixes the following issues: - CVE-2023-2731: Fix null pointer deference in LZWDecode() (bsc#1211478). - CVE-2023-1916: Fix out-of-bounds read in extractImageSection() (bsc#1210231). - CVE-2023-26965: Fix heap-based use after free in loadImage() (bsc#1212398). - CVE-2022-40090: Fix infinite loop in TIFFReadDirectory() (bsc#1214680).

Release Date

Dec 14 2023
References

Bugzilla: 1212398, 1214680, 1199483, 1211478, 1210231
CVEs: CVE-2022-40090, CVE-2023-2731, CVE-2022-1622, CVE-2023-26965, CVE-2023-1916
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Package Hub 15.5 x86_64

Packages

tiff
Tools for Converting from and to the Tagged Image File Format

4.0.9-150000.45.35.1 lock rpm lock src

SUSE Package Hub 15.5 ppc64le

Packages

tiff
Tools for Converting from and to the Tagged Image File Format

4.0.9-150000.45.35.1 lock rpm lock src

SUSE Package Hub 15.5 s390x

Packages

tiff
Tools for Converting from and to the Tagged Image File Format

4.0.9-150000.45.35.1 lock rpm lock src

SUSE Package Hub 15.5 aarch64

Packages

tiff
Tools for Converting from and to the Tagged Image File Format

4.0.9-150000.45.35.1 lock rpm lock src