Описание
libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| tiff | fixed | 4.7.1-1 | package |
Примечания
https://gitlab.com/libtiff/libtiff/-/issues/736
https://gitlab.com/libtiff/libtiff/-/merge_requests/753
Fixed by: https://gitlab.com/libtiff/libtiff/-/commit/0ac97aa7a5bffddd88f7cdbe517264e9db3f5bd5 (v4.7.1rc1)
Crash in CLI tool, no security impact
EPSS
Связанные уязвимости
libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.
libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.
libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.
libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.
libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.
EPSS