SUSE-SU-2022:4259-1

Details

Description of the patch:

This update for tiff fixes the following issues:

CVE-2022-3597: Fixed out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (bnc#1204641).
CVE-2022-3599: Fixed out-of-bounds read in writeSingleSection in tools/tiffcrop.c (bnc#1204643).
CVE-2022-3626: Fixed out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c (bnc#1204644)
CVE-2022-3627: Fixed out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (bnc#1204645).
CVE-2022-3970: Fixed unsigned integer overflow in TIFFReadRGBATileExt() (bnc#1205392).

Affected Packages

libtiff-devel

SUSE Enterprise Storage 6SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise Desktop 15 SP3SUSE Linux Enterprise Desktop 15 SP4

Fixed in:

4.0.9-150000.45.19.1

libtiff5

SUSE Enterprise Storage 6SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise Desktop 15 SP3SUSE Linux Enterprise Desktop 15 SP4

Fixed in:

4.0.9-150000.45.19.1

libtiff5-32bit

SUSE Enterprise Storage 6SUSE Enterprise Storage 7SUSE Linux Enterprise Desktop 15 SP4SUSE Linux Enterprise High Performance Computing 15SUSE Linux Enterprise High Performance Computing 15 SP1

Fixed in:

4.0.9-150000.45.19.1

tiff

SUSE Linux Enterprise Module for Package Hub 15 SP3SUSE Linux Enterprise Module for Package Hub 15 SP4openSUSE Leap 15.3openSUSE Leap 15.4

Fixed in:

4.0.9-150000.45.19.1

libtiff-devel-32bit

openSUSE Leap 15.3openSUSE Leap 15.4

Fixed in:

4.0.9-150000.45.19.1

References

ADVISORY