gpp_maybe Security update for tiff

SUSE-SUSE-MicroOS-5.2-2023-4869

This update for tiff fixes the following issues: - CVE-2023-2731: Fix null pointer deference in LZWDecode() (bsc#1211478). - CVE-2023-1916: Fix out-of-bounds read in extractImageSection() (bsc#1210231). - CVE-2023-26965: Fix heap-based use after free in loadImage() (bsc#1212398). - CVE-2022-40090: Fix infinite loop in TIFFReadDirectory() (bsc#1214680).

• Release Date
  Dec 14 2023
• References
  Bugzilla: 1212398, 1214680, 1199483, 1211478, 1210231
  CVEs: CVE-2022-40090, CVE-2023-2731, CVE-2022-1622, CVE-2023-26965, CVE-2023-1916
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Micro 5.2 s390x

• Packages
  libtiff5
  The Tiff Library (with JPEG and compression support)

  4.0.9-150000.45.35.1 lock rpm

  tiff
  Tools for Converting from and to the Tagged Image File Format

  4.0.9-150000.45.35.1 lock src

SUSE Linux Enterprise Micro for Rancher 5.2 x86_64

• Packages
  libtiff5
  The Tiff Library (with JPEG and compression support)

  4.0.9-150000.45.35.1 lock rpm

  tiff
  Tools for Converting from and to the Tagged Image File Format

  4.0.9-150000.45.35.1 lock src

SUSE Linux Enterprise Micro for Rancher 5.2 aarch64

• Packages
  libtiff5
  The Tiff Library (with JPEG and compression support)

  4.0.9-150000.45.35.1 lock rpm

  tiff
  Tools for Converting from and to the Tagged Image File Format

  4.0.9-150000.45.35.1 lock src