Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | libtiff | 0:4.0.9-29.el8_8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | libtiff-debuginfo | 0:4.0.9-29.el8_8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | libtiff-debugsource | 0:4.0.9-29.el8_8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | libtiff-devel | 0:4.0.9-29.el8_8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | libtiff-tools-debuginfo | 0:4.0.9-29.el8_8 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | libtiff-debuginfo | 0:4.0.9-29.el8_8 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | libtiff-debugsource | 0:4.0.9-29.el8_8 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | libtiff-tools | 0:4.0.9-29.el8_8 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | libtiff-tools-debuginfo | 0:4.0.9-29.el8_8 |
Vulnerabilities 5
-
Medium 6.8
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-…
-
Medium 6.8
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and to…
-
Medium 6.8
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-…
-
Medium 6.8
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-…
-
Medium 6.8
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2170167
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2170172
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2170178
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2170187
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2170192
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5353.json
-
report
https://access.redhat.com/security/cve/CVE-2023-0800
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-0800
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-0800
-
report
https://access.redhat.com/security/cve/CVE-2023-0801
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-0801
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-0801
-
report
https://access.redhat.com/security/cve/CVE-2023-0802
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-0802
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-0802
-
report
https://access.redhat.com/security/cve/CVE-2023-0803
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-0803
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-0803
-
report
https://access.redhat.com/security/cve/CVE-2023-0804
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-0804
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-0804