Moderate: libtiff security update (Oracle Linux 9)

Summary

Fixed packages 3

Vulnerabilities 5

• Medium 5.9
  CVE-2023-3316

  A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.

  A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.

  LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine
  Jun 19, 2023
• Medium 5.5
  CVE-2023-26965

  loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image.

  tiff tiff libtiff Debian Ubuntu Azure Linux
  Jun 14, 2023
• Medium 5.5
  CVE-2023-2731

  A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file. This flaw al…

  tiff openjpeg2 libtiff Debian Azure Linux
  May 17, 2023
• Medium 5.5
  CVE-2023-3576

  Libtiff: memory leak in tiffcrop.c

  A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting an applicatio…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Oct 4, 2023
• Unscored —
  CVE-2023-26966

  libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file an…

  tiff tiff libtiff Debian Ubuntu Azure Linux
  Jun 29, 2023