SUSE Package Hub - SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-2334

Update Info

SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-2334

Security update for tiff

Type: security

Severity: moderate

Issued: 2023-05-31

Description:

This update for tiff fixes the following issues:

Fixed multiple out of bounds read/write security issues:

  CVE-2023-0795 (bsc#1208226), CVE-2023-0796 (bsc#1208227), CVE-2023-0797 (bsc#1208228),
  CVE-2023-0798 (bsc#1208229), CVE-2023-0799 (bsc#1208230), CVE-2023-0800 (bsc#1208231),
  CVE-2023-0801 (bsc#1208232), CVE-2023-0802 (bsc#1208233), CVE-2023-0803 (bsc#1208234),
  CVE-2023-0804 (bsc#1208236).

References

CVE: CVE-2023-0804
CVE: CVE-2023-0803
CVE: CVE-2023-0802
CVE: CVE-2023-0801
CVE: CVE-2023-0800
CVE: CVE-2023-0799
CVE: CVE-2023-0798
CVE: CVE-2023-0797
CVE: CVE-2023-0796
CVE: CVE-2023-0795
Bugzilla: 1208236 VUL-1: CVE-2023-0804: tiff: out of bounds write when combining regions in composite images
Bugzilla: 1208234 VUL-1: CVE-2023-0803: tiff: out of bounds write when combining regions in composite images
Bugzilla: 1208233 VUL-1: CVE-2023-0802: tiff: out of bounds write when combining regions in composite images
Bugzilla: 1208232 VUL-1: CVE-2023-0801: tiff: out of bounds write when combining regions in composite images
Bugzilla: 1208231 VUL-1: CVE-2023-0800: tiff: out of bounds write when combining regions in composite images
Bugzilla: 1208230 VUL-1: CVE-2023-0799: tiff: out of bounds read due to incorrect image rotation
Bugzilla: 1208229 VUL-1: CVE-2023-0798: tiff: out of bounds read due to incorrect image rotation
Bugzilla: 1208228 VUL-1: CVE-2023-0797: tiff: out of bounds read due to incorrect image rotation
Bugzilla: 1208227 VUL-1: CVE-2023-0796: tiff: out of bounds read due to incorrect image rotation
Bugzilla: 1208226 VUL-1: CVE-2023-0795: tiff: out-of-bounds read due to incorrect image rotation

Packages

tiff-4.0.9-150000.45.28.1