Summary
The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.
Security Fix(es):
* libtiff: heap-based buffer overflow in processCropSelections() in tools/tiffcrop.c (CVE-2022-48281)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | libtiff | 4.0.9-28.el8_8 |
| AlmaLinux · 8 | libtiff-devel | 4.0.9-28.el8_8 |
| AlmaLinux · 8 | libtiff-tools | 4.0.9-28.el8_8 |
Vulnerabilities 1
-
Medium 5.5
processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of si…