SUSE-SU-2022:0480-1
SUSE-SU-2022:0480-1 · Security update for tiff
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
This update for tiff fixes the following issues: - CVE-2017-17095: Fixed DoS in tools/pal2rgb.c in pal2rgb (bsc#1071031). - CVE-2019-17546: Fixed integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image (bsc#1154365). - CVE-2020-19131: Fixed buffer overflow in tiffcrop that may cause DoS via the invertImage() function (bsc#1190312). - CVE-2020-35521: Fixed memory allocation failure in tif_read.c (bsc#1182808). - CVE-2020-35522: Fixed memory allocation failure in tif_pixarlog.c (bsc#1182809). - CVE-2020-35523: Fixed integer overflow in tif_getimage.c (bsc#1182811). - CVE-2020-35524: Fixed heap-based buffer overflow in TIFF2PDF tool (bsc#1182812). - CVE-2022-22844: Fixed out-of-bounds read in _TIFFmemcpy in tif_unix.c (bsc#1194539).
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
tiff SUSE:Linux Enterprise Module for Basesystem 15 SP3
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.0.9-45.5.1
Actualiza a 4.0.9-45.5.1
tiff SUSE:Linux Enterprise Module for Desktop Applications 15 SP3
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.0.9-45.5.1
Actualiza a 4.0.9-45.5.1
tiff SUSE:Linux Enterprise Module for Package Hub 15 SP3
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.0.9-45.5.1
Actualiza a 4.0.9-45.5.1
tiff SUSE:Linux Enterprise Module for Package Hub 15 SP4
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.0.9-45.5.1
Actualiza a 4.0.9-45.5.1
tiff SUSE:Linux Enterprise High Performance Computing 15-ESPOS
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.0.9-45.5.1
Actualiza a 4.0.9-45.5.1
tiff SUSE:Linux Enterprise High Performance Computing 15-LTSS
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.0.9-45.5.1
Actualiza a 4.0.9-45.5.1
tiff SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.0.9-45.5.1
Actualiza a 4.0.9-45.5.1
tiff SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.0.9-45.5.1
Actualiza a 4.0.9-45.5.1
tiff SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.0.9-45.5.1
Actualiza a 4.0.9-45.5.1
tiff SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.0.9-45.5.1
Actualiza a 4.0.9-45.5.1
tiff SUSE:Linux Enterprise Real Time 15 SP2
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.0.9-45.5.1
Actualiza a 4.0.9-45.5.1
tiff SUSE:Linux Enterprise Server 15-LTSS
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.0.9-45.5.1
Actualiza a 4.0.9-45.5.1
tiff SUSE:Linux Enterprise Server 15 SP1-BCL
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.0.9-45.5.1
Actualiza a 4.0.9-45.5.1
tiff SUSE:Linux Enterprise Server 15 SP1-LTSS
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.0.9-45.5.1
Actualiza a 4.0.9-45.5.1
tiff SUSE:Linux Enterprise Server 15 SP2-BCL
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.0.9-45.5.1
Actualiza a 4.0.9-45.5.1
tiff SUSE:Linux Enterprise Server 15 SP2-LTSS
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.0.9-45.5.1
Actualiza a 4.0.9-45.5.1
tiff SUSE:Linux Enterprise Server for SAP Applications 15
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.0.9-45.5.1
Actualiza a 4.0.9-45.5.1
tiff SUSE:Linux Enterprise Server for SAP Applications 15 SP1
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.0.9-45.5.1
Actualiza a 4.0.9-45.5.1
tiff SUSE:Linux Enterprise Server for SAP Applications 15 SP2
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.0.9-45.5.1
Actualiza a 4.0.9-45.5.1
tiff SUSE:Manager Proxy 4.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.0.9-45.5.1
Actualiza a 4.0.9-45.5.1
tiff SUSE:Manager Retail Branch Server 4.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.0.9-45.5.1
Actualiza a 4.0.9-45.5.1
tiff SUSE:Manager Server 4.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.0.9-45.5.1
Actualiza a 4.0.9-45.5.1
tiff SUSE:Enterprise Storage 6
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.0.9-45.5.1
Actualiza a 4.0.9-45.5.1
tiff SUSE:Enterprise Storage 7
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.0.9-45.5.1
Actualiza a 4.0.9-45.5.1
Fuentes originales
- https://www.suse.com/support/update/announcement/2022/suse-su-20220480-1/
- https://bugzilla.suse.com/1071031
- https://bugzilla.suse.com/1154365
- https://bugzilla.suse.com/1182808
- https://bugzilla.suse.com/1182809
- https://bugzilla.suse.com/1182811
- https://bugzilla.suse.com/1182812
- https://bugzilla.suse.com/1190312
- https://bugzilla.suse.com/1194539
- https://www.suse.com/security/cve/CVE-2017-17095
- https://www.suse.com/security/cve/CVE-2019-17546
- https://www.suse.com/security/cve/CVE-2020-19131
- https://www.suse.com/security/cve/CVE-2020-35521
- https://www.suse.com/security/cve/CVE-2020-35522
- https://www.suse.com/security/cve/CVE-2020-35523
- https://www.suse.com/security/cve/CVE-2020-35524
- https://www.suse.com/security/cve/CVE-2022-22844
- https://osv.dev/vulnerability/SUSE-SU-2022:0480-1