Mageia 2022-0240: libtiff security update | LinuxSecurity.com

Advisories

What Are You Looking For?

Popular Tags

Contribute

Advisories This Week: 375

MGASA-2022-0240 - Updated libtiff packages fix security vulnerability

Publication date: 24 Jun 2022
URL: https://advisories.mageia.org/MGASA-2022-0240.html
Type: security
Affected Mageia releases: 8
CVE: CVE-2022-1354,
     CVE-2022-1355,
     CVE-2022-1622,
     CVE-2022-1623

Heap-buffer-overflow in TIFFReadRawDataStriped() in tiffinfo.c.
(CVE-2022-1354)
Stack-buffer-overflow in tiffcp.c in main(). (CVE-2022-1355)
Out-of-bounds read in LZWDecode. (CVE-2022-1622, CVE-2022-1623)

References:
- https://bugs.mageia.org/show_bug.cgi?id=30571
- https://lists.fedoraproject.org/archives/list/[email protected]/thread/UXAFOP6QQRNZD3HPZ6BMCEZZOM4YIZMK/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1354
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1355
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1622
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1623

SRPMS:
- 8/core/libtiff-4.2.0-1.5.mga8

Mageia 2022-0240: libtiff security update

Heap-buffer-overflow in TIFFReadRawDataStriped() in tiffinfo.c

Summary

Heap-buffer-overflow in TIFFReadRawDataStriped() in tiffinfo.c. (CVE-2022-1354) Stack-buffer-overflow in tiffcp.c in main(). (CVE-2022-1355) Out-of-bounds read in LZWDecode. (CVE-2022-1622, CVE-2022-1623)

References

- https://bugs.mageia.org/show_bug.cgi?id=30571

- https://lists.fedoraproject.org/archives/list/[email protected]/thread/UXAFOP6QQRNZD3HPZ6BMCEZZOM4YIZMK/

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1354

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1355

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1622

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1623

Resolution

MGASA-2022-0240 - Updated libtiff packages fix security vulnerability

SRPMS

- 8/core/libtiff-4.2.0-1.5.mga8

Severity
Publication date: 24 Jun 2022
URL: https://advisories.mageia.org/MGASA-2022-0240.html
Type: security
CVE: CVE-2022-1354, CVE-2022-1355, CVE-2022-1622, CVE-2022-1623

News

Advisories

HOWTOs

Features

The Story Behind the Linux Security Quick Reference Guide
Benefits & Drawbacks of Using a VPN on Linux
How a WAF Could Improve the Security of Your Linux Web Applications
Installing SurfShark VPN On Kali Linux: The Authoritative Guide
Best Practices for PHP Security

About Us

Powered By

Footer Logo

We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy. 

Learn More About Our Cookie Policy