Medium ELSA-2021-4241 4 CVEs

Moderate: libtiff security and bug fix update (Oracle Linux 8)

Published Nov 16, 2021 · Updated Nov 16, 2021

Ecosystem: Oracle Linux

Summary

[4.0.9-20]
- Rebuild for fixed binutils (#1954437)

[4.0.9-19]
- Fix CVE-2020-35521 (#1945539)
- Fix CVE-2020-35522 (#1945555)
- Fix CVE-2020-35523 (#1945542)
- Fix CVE-2020-35524 (#1945546)

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 8	libtiff	0:4.0.9-20.el8
Oracle Linux · 8	libtiff-devel	0:4.0.9-20.el8
Oracle Linux · 8	libtiff-tools	0:4.0.9-20.el8

Vulnerabilities 4

Unscored —

CVE-2020-35521

A flaw was found in libtiff. Due to a memory allocation failure in tif_read.c, a crafted TIFF file can lead to an abort…

tiff tiff tiff libtiff Debian Ubuntu Azure Linux Alpine

Mar 9, 2021
Unscored —

CVE-2020-35522

In LibTIFF, there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead to an abort, resulting…

tiff tiff tiff libtiff Debian Ubuntu Azure Linux Alpine

Mar 9, 2021
Unscored —

CVE-2020-35523

An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. This flaw allows an attacker to i…

tiff tiff tiff openjpeg2 Debian Ubuntu Azure Linux Alpine

Mar 9, 2021
Unscored —

CVE-2020-35524

A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A spe…

tiff tiff tiff libtiff Debian Ubuntu Azure Linux Alpine

Mar 9, 2021