SUSE-SU-2022:4259-1
SUSE-SU-2022:4259-1 · Security update for tiff
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
This update for tiff fixes the following issues: - CVE-2022-3597: Fixed out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (bnc#1204641). - CVE-2022-3599: Fixed out-of-bounds read in writeSingleSection in tools/tiffcrop.c (bnc#1204643). - CVE-2022-3626: Fixed out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c (bnc#1204644) - CVE-2022-3627: Fixed out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (bnc#1204645). - CVE-2022-3970: Fixed unsigned integer overflow in TIFFReadRGBATileExt() (bnc#1205392).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
tiff SUSE:Linux Enterprise Micro 5.3
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.19.1
Update to 4.0.9-150000.45.19.1
tiff SUSE:Linux Enterprise Module for Basesystem 15 SP3
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.19.1
Update to 4.0.9-150000.45.19.1
tiff SUSE:Linux Enterprise Module for Basesystem 15 SP4
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.19.1
Update to 4.0.9-150000.45.19.1
tiff SUSE:Linux Enterprise Module for Desktop Applications 15 SP3
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.19.1
Update to 4.0.9-150000.45.19.1
tiff SUSE:Linux Enterprise Module for Package Hub 15 SP3
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.19.1
Update to 4.0.9-150000.45.19.1
tiff SUSE:Linux Enterprise Module for Package Hub 15 SP4
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.19.1
Update to 4.0.9-150000.45.19.1
tiff SUSE:Linux Enterprise High Performance Computing 15-ESPOS
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.19.1
Update to 4.0.9-150000.45.19.1
tiff SUSE:Linux Enterprise High Performance Computing 15-LTSS
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.19.1
Update to 4.0.9-150000.45.19.1
tiff SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.19.1
Update to 4.0.9-150000.45.19.1
tiff SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.19.1
Update to 4.0.9-150000.45.19.1
tiff SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.19.1
Update to 4.0.9-150000.45.19.1
tiff SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.19.1
Update to 4.0.9-150000.45.19.1
tiff SUSE:Linux Enterprise Server 15-LTSS
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.19.1
Update to 4.0.9-150000.45.19.1
tiff SUSE:Linux Enterprise Server 15 SP1-BCL
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.19.1
Update to 4.0.9-150000.45.19.1
tiff SUSE:Linux Enterprise Server 15 SP1-LTSS
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.19.1
Update to 4.0.9-150000.45.19.1
tiff SUSE:Linux Enterprise Server 15 SP2-BCL
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.19.1
Update to 4.0.9-150000.45.19.1
tiff SUSE:Linux Enterprise Server 15 SP2-LTSS
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.19.1
Update to 4.0.9-150000.45.19.1
tiff SUSE:Linux Enterprise Server for SAP Applications 15
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.19.1
Update to 4.0.9-150000.45.19.1
tiff SUSE:Linux Enterprise Server for SAP Applications 15 SP1
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.19.1
Update to 4.0.9-150000.45.19.1
tiff SUSE:Linux Enterprise Server for SAP Applications 15 SP2
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.19.1
Update to 4.0.9-150000.45.19.1
tiff SUSE:Manager Proxy 4.1
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.19.1
Update to 4.0.9-150000.45.19.1
tiff SUSE:Manager Retail Branch Server 4.1
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.19.1
Update to 4.0.9-150000.45.19.1
tiff SUSE:Manager Server 4.1
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.19.1
Update to 4.0.9-150000.45.19.1
tiff SUSE:Linux Enterprise Micro 5.2
- Affected ranges
- ECOSYSTEM: < 4.0.9-150000.45.19.1
Update to 4.0.9-150000.45.19.1
Original sources
- https://www.suse.com/support/update/announcement/2022/suse-su-20224259-1/
- https://bugzilla.suse.com/1204641
- https://bugzilla.suse.com/1204643
- https://bugzilla.suse.com/1204644
- https://bugzilla.suse.com/1204645
- https://bugzilla.suse.com/1205392
- https://www.suse.com/security/cve/CVE-2022-3597
- https://www.suse.com/security/cve/CVE-2022-3599
- https://www.suse.com/security/cve/CVE-2022-3626
- https://www.suse.com/security/cve/CVE-2022-3627
- https://www.suse.com/security/cve/CVE-2022-3970
- https://osv.dev/vulnerability/SUSE-SU-2022:4259-1