Summary
The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.
Security Fix(es):
* libtiff: null pointer dereference in LZWDecode() in libtiff/tif_lzw.c (CVE-2023-2731)
* libtiff: tiffcrop: null pointer dereference in TIFFClose() (CVE-2023-3316)
* libtiff: memory leak in tiffcrop.c (CVE-2023-3576)
* libtiff: heap-based use after free via a crafted TIFF image in loadImage() in tiffcrop.c (CVE-2023-26965)
* libtiff: Buffer Overflow in uv_encode() (CVE-2023-26966)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | libtiff | 4.4.0-10.el9 |
| AlmaLinux · 9 | libtiff-devel | 4.4.0-10.el9 |
| AlmaLinux · 9 | libtiff-tools | 4.4.0-10.el9 |
Vulnerabilities 5
-
Medium 5.9
A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.
A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.
-
Medium 5.5
loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image.
-
Medium 5.5
A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file. This flaw al…
-
Medium 5.5
Libtiff: memory leak in tiffcrop.c
A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting an applicatio…
-
Unscored —
libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file an…
References
-
report
https://access.redhat.com/security/cve/CVE-2023-26965
-
report
https://access.redhat.com/security/cve/CVE-2023-26966
-
report
https://access.redhat.com/security/cve/CVE-2023-2731
-
report
https://access.redhat.com/security/cve/CVE-2023-3316
-
report
https://access.redhat.com/security/cve/CVE-2023-3576
-
report
https://bugzilla.redhat.com/2207635
-
report
https://bugzilla.redhat.com/2215206
-
report
https://bugzilla.redhat.com/2216080
-
report
https://bugzilla.redhat.com/2218749
-
report
https://bugzilla.redhat.com/2219340
-
advisory
https://errata.almalinux.org/9/ALSA-2023-6575.html