gpp_maybe Security update for tiff

SUSE-SLE-SAP-12-SP4-2022-4248

This update for tiff fixes the following issues: - CVE-2022-3597: Fixed out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (bnc#1204641). - CVE-2022-3599: Fixed out-of-bounds read in writeSingleSection in tools/tiffcrop.c (bnc#1204643). - CVE-2022-3626: Fixed out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c (bnc#1204644) - CVE-2022-3627: Fixed out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (bnc#1204645). - CVE-2022-3970: Fixed unsigned integer overflow in TIFFReadRGBATileExt() (bnc#1205392).

• Release Date
  Nov 28 2022
• References
  Bugzilla: 1205392, 1204644, 1204641, 1204643, 1204645
  CVEs: CVE-2022-3627, CVE-2022-3626, CVE-2022-3597, CVE-2022-3970, CVE-2022-3599
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.4 x86_64

• Packages
  libtiff5
  The Tiff Library (with JPEG and compression support)

  4.0.9-44.59.1 lock rpm

  libtiff5-32bit
  The Tiff Library (with JPEG and compression support)

  4.0.9-44.59.1 lock rpm

  tiff
  Tools for Converting from and to the Tagged Image File Format

  4.0.9-44.59.1 lock rpm lock src

SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le

• Packages
  libtiff5
  The Tiff Library (with JPEG and compression support)

  4.0.9-44.59.1 lock rpm

  tiff
  Tools for Converting from and to the Tagged Image File Format

  4.0.9-44.59.1 lock rpm lock src