Summary
The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.
Security Fix(es):
* libtiff: Integer overflow in tif_getimage.c (CVE-2020-35523)
* libtiff: Heap-based buffer overflow in TIFF2PDF tool (CVE-2020-35524)
* libtiff: Memory allocation failure in tiff2rgba (CVE-2020-35521)
* libtiff: Memory allocation failure in tiff2rgba (CVE-2020-35522)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | libtiff | 4.0.9-20.el8 |
| AlmaLinux · 8 | libtiff-devel | 4.0.9-20.el8 |
| AlmaLinux · 8 | libtiff-tools | 4.0.9-20.el8 |
Vulnerabilities 4
-
Unscored —
A flaw was found in libtiff. Due to a memory allocation failure in tif_read.c, a crafted TIFF file can lead to an abort…
-
Unscored —
In LibTIFF, there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead to an abort, resulting…
-
Unscored —
An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. This flaw allows an attacker to i…
-
Unscored —
A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A spe…