SUSE-SU-2022:3690-1
SUSE-SU-2022:3690-1 · Security update for tiff
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
This update for tiff fixes the following issues: - CVE-2022-2519: Fixed a double free in rotateImage() (bsc#1202968). - CVE-2022-2520: Fixed a assertion failure in rotateImage() (bsc#1202973). - CVE-2022-2521: Fixed invalid free in TIFFClose() (bsc#1202971). - CVE-2022-2867: Fixed out of bounds read and write in tiffcrop.c (bsc#1202466). - CVE-2022-2868: Fixed out of bounds read in reverseSamples16bits() (bsc#1202467). - CVE-2022-2869: Fixed out of bounds read and write in extractContigSamples8bits() (bsc#1202468). - CVE-2022-34526: Fixed stack overflow in the _TIFFVGetField function of Tiffsplit (bsc#1202026).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
tiff SUSE:Linux Enterprise Micro 5.3
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.16.1
Update to 4.0.9-150000.45.16.1
tiff SUSE:Linux Enterprise Module for Basesystem 15 SP3
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.16.1
Update to 4.0.9-150000.45.16.1
tiff SUSE:Linux Enterprise Module for Basesystem 15 SP4
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.16.1
Update to 4.0.9-150000.45.16.1
tiff SUSE:Linux Enterprise Module for Desktop Applications 15 SP3
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.16.1
Update to 4.0.9-150000.45.16.1
tiff SUSE:Linux Enterprise Module for Package Hub 15 SP3
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.16.1
Update to 4.0.9-150000.45.16.1
tiff SUSE:Linux Enterprise Module for Package Hub 15 SP4
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.16.1
Update to 4.0.9-150000.45.16.1
tiff SUSE:Linux Enterprise High Performance Computing 15-ESPOS
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.16.1
Update to 4.0.9-150000.45.16.1
tiff SUSE:Linux Enterprise High Performance Computing 15-LTSS
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.16.1
Update to 4.0.9-150000.45.16.1
tiff SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.16.1
Update to 4.0.9-150000.45.16.1
tiff SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.16.1
Update to 4.0.9-150000.45.16.1
tiff SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.16.1
Update to 4.0.9-150000.45.16.1
tiff SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.16.1
Update to 4.0.9-150000.45.16.1
tiff SUSE:Linux Enterprise Server 15-LTSS
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.16.1
Update to 4.0.9-150000.45.16.1
tiff SUSE:Linux Enterprise Server 15 SP1-BCL
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.16.1
Update to 4.0.9-150000.45.16.1
tiff SUSE:Linux Enterprise Server 15 SP1-LTSS
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.16.1
Update to 4.0.9-150000.45.16.1
tiff SUSE:Linux Enterprise Server 15 SP2-BCL
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.16.1
Update to 4.0.9-150000.45.16.1
tiff SUSE:Linux Enterprise Server 15 SP2-LTSS
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.16.1
Update to 4.0.9-150000.45.16.1
tiff SUSE:Linux Enterprise Server for SAP Applications 15
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.16.1
Update to 4.0.9-150000.45.16.1
tiff SUSE:Linux Enterprise Server for SAP Applications 15 SP1
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.16.1
Update to 4.0.9-150000.45.16.1
tiff SUSE:Linux Enterprise Server for SAP Applications 15 SP2
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.16.1
Update to 4.0.9-150000.45.16.1
tiff SUSE:Manager Proxy 4.1
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.16.1
Update to 4.0.9-150000.45.16.1
tiff SUSE:Manager Retail Branch Server 4.1
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.16.1
Update to 4.0.9-150000.45.16.1
tiff SUSE:Manager Server 4.1
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.16.1
Update to 4.0.9-150000.45.16.1
tiff SUSE:Linux Enterprise Micro 5.2
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.16.1
Update to 4.0.9-150000.45.16.1
Original sources
- https://www.suse.com/support/update/announcement/2022/suse-su-20223690-1/
- https://bugzilla.suse.com/1201723
- https://bugzilla.suse.com/1201971
- https://bugzilla.suse.com/1202026
- https://bugzilla.suse.com/1202466
- https://bugzilla.suse.com/1202467
- https://bugzilla.suse.com/1202468
- https://bugzilla.suse.com/1202968
- https://bugzilla.suse.com/1202971
- https://bugzilla.suse.com/1202973
- https://www.suse.com/security/cve/CVE-2022-0561
- https://www.suse.com/security/cve/CVE-2022-2519
- https://www.suse.com/security/cve/CVE-2022-2520
- https://www.suse.com/security/cve/CVE-2022-2521
- https://www.suse.com/security/cve/CVE-2022-2867
- https://www.suse.com/security/cve/CVE-2022-2868
- https://www.suse.com/security/cve/CVE-2022-2869
- https://www.suse.com/security/cve/CVE-2022-34266
- https://www.suse.com/security/cve/CVE-2022-34526
- https://osv.dev/vulnerability/SUSE-SU-2022:3690-1