Описание
Security update for tiff
This update for tiff fixes the following issues:
- CVE-2022-2056: Fixed a division by zero denial of service (bsc#1201176).
- CVE-2022-2057: Fixed a division by zero denial of service (bsc#1201175).
- CVE-2022-2058: Fixed a division by zero denial of service (bsc#1201174).
Список пакетов
Image SLES12-SP4-SAP-Azure-LI-BYOS-Production
libtiff5-4.0.9-44.51.1
Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production
libtiff5-4.0.9-44.51.1
Image SLES12-SP5-Azure-SAP-BYOS
libtiff5-4.0.9-44.51.1
Image SLES12-SP5-Azure-SAP-On-Demand
libtiff5-4.0.9-44.51.1
Image SLES12-SP5-EC2-SAP-BYOS
libtiff5-4.0.9-44.51.1
Image SLES12-SP5-EC2-SAP-On-Demand
libtiff5-4.0.9-44.51.1
Image SLES12-SP5-GCE-SAP-BYOS
libtiff5-4.0.9-44.51.1
Image SLES12-SP5-GCE-SAP-On-Demand
libtiff5-4.0.9-44.51.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
libtiff5-4.0.9-44.51.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
libtiff5-4.0.9-44.51.1
SUSE Linux Enterprise Server 12 SP5
libtiff5-4.0.9-44.51.1
libtiff5-32bit-4.0.9-44.51.1
tiff-4.0.9-44.51.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
libtiff5-4.0.9-44.51.1
libtiff5-32bit-4.0.9-44.51.1
tiff-4.0.9-44.51.1
SUSE Linux Enterprise Software Development Kit 12 SP5
libtiff-devel-4.0.9-44.51.1
Ссылки
- Link for SUSE-SU-2022:2648-1
- E-Mail link for SUSE-SU-2022:2648-1
- SUSE Security Ratings
- SUSE Bug 1201174
- SUSE Bug 1201175
- SUSE Bug 1201176
- SUSE CVE CVE-2022-2056 page
- SUSE CVE CVE-2022-2057 page
- SUSE CVE CVE-2022-2058 page
Описание
Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010.
Затронутые продукты
Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.51.1
Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.51.1
Image SLES12-SP5-Azure-SAP-BYOS:libtiff5-4.0.9-44.51.1
Image SLES12-SP5-Azure-SAP-On-Demand:libtiff5-4.0.9-44.51.1
Ссылки
- CVE-2022-2056
- SUSE Bug 1201176
Описание
Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010.
Затронутые продукты
Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.51.1
Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.51.1
Image SLES12-SP5-Azure-SAP-BYOS:libtiff5-4.0.9-44.51.1
Image SLES12-SP5-Azure-SAP-On-Demand:libtiff5-4.0.9-44.51.1
Ссылки
- CVE-2022-2057
- SUSE Bug 1201175
Описание
Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010.
Затронутые продукты
Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.51.1
Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.51.1
Image SLES12-SP5-Azure-SAP-BYOS:libtiff5-4.0.9-44.51.1
Image SLES12-SP5-Azure-SAP-On-Demand:libtiff5-4.0.9-44.51.1
Ссылки
- CVE-2022-2058
- SUSE Bug 1201174
- SUSE Bug 1201175
- SUSE Bug 1201176