SUSE-SU-2023:4869-1 -- SLES tiff, libtiff-devel, libtiff5| ID: oval:org.secpod.oval:def:89051252 | Date: (C)2024-01-23 (M)2024-05-22 |
| Class: PATCH | Family: unix |
This update for tiff fixes the following issues: * CVE-2023-2731: Fix null pointer deference in LZWDecode . * CVE-2023-1916: Fix out-of-bounds read in extractImageSection . * CVE-2023-26965: Fix heap-based use after free in loadImage . * CVE-2022-40090: Fix infinite loop in TIFFReadDirectory .
| Platform: |
| SUSE Linux Enterprise Desktop 15 SP4 |
| SUSE Linux Enterprise Desktop 15 SP5 |
| SUSE Linux Enterprise Server 15 SP4 |
| SUSE Linux Enterprise Server 15 SP5 |
| SUSE Linux Enterprise Server 15 SP2 |
| SUSE Linux Enterprise Server 15 SP3 |
| SUSE Linux Enterprise Server 15 SP1 |
| Product: |
| tiff |
| libtiff-devel |
| libtiff5 |
