Medium ELSA-2020-3902 2 CVEs

Moderate: libtiff security update (Oracle Linux 7)

Published Oct 6, 2020 · Updated Oct 6, 2020

Ecosystem: Oracle Linux

Summary

[4.0.3-35]
- Fix two resource leaks
Related: #1771371

[4.0.3-34]
- Fix CVE-2019-17546
Resolves: #1771371

[4.0.3-33]
- Fix CVE-2019-14973
Resolves: #1755704

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 7	libtiff	0:4.0.3-35.el7
Oracle Linux · 7	libtiff-devel	0:4.0.3-35.el7
Oracle Linux · 7	libtiff-static	0:4.0.3-35.el7
Oracle Linux · 7	libtiff-tools	0:4.0.3-35.el7

Vulnerabilities 2

Unscored —

CVE-2019-14973

_TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because…

tiff tiff tiff Debian Ubuntu Alpine

Aug 14, 2019
Unscored —

CVE-2019-17546

tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow tha…

tiff tiff openjpeg2 qtwebengine-opensource-src Debian Ubuntu Azure Linux

Oct 14, 2019