Medium ELSA-2023-3827 1 CVE

Moderate: libtiff security update (Oracle Linux 8)

Published Jun 29, 2023 · Updated Jun 29, 2023

Ecosystem: Oracle Linux

Summary

[4.0.9-28]
- Fix CVE-2022-48281
- Resolves: CVE-2022-48281

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 8	libtiff	0:4.0.9-28.el8_8
Oracle Linux · 8	libtiff-devel	0:4.0.9-28.el8_8
Oracle Linux · 8	libtiff-tools	0:4.0.9-28.el8_8

Vulnerabilities 1

Medium 5.5

CVE-2022-48281

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of si…

tiff tiff tiff libtiff Debian Ubuntu Azure Linux Alpine

Jan 23, 2023