SUSE-SU-2023:0342-1

Опубликовано: 10 фев. 2023

Источник: suse-cvrf

Описание

Security update for tiff

This update for tiff fixes the following issues:

CVE-2022-48281: Fixed a buffer overflow that could be triggered via a crafted image (bsc#1207413).

Список пакетов

Container suse/nginx:latest

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP2-SAP-Azure

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP2-SAP-BYOS-Azure

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP2-SAP-BYOS-EC2-HVM

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP2-SAP-BYOS-GCE

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP2-SAP-EC2-HVM

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP2-SAP-GCE

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP3-SAP-BYOS-Azure

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP3-SAP-BYOS-EC2-HVM

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP3-SAP-BYOS-GCE

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP3-SAPCAL-Azure

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP3-SAPCAL-EC2-HVM

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP3-SAPCAL-GCE

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-Hardened-BYOS

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-Hardened-BYOS-Azure

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-Hardened-BYOS-EC2

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-Hardened-BYOS-GCE

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-SAP

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-SAP-Azure

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-SAP-BYOS

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-SAP-BYOS-Azure

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-SAP-BYOS-EC2

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-SAP-BYOS-GCE

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-SAP-EC2

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-SAP-GCE

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-SAP-Hardened

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-SAP-Hardened-Azure

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-SAP-Hardened-BYOS

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-SAP-Hardened-EC2

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-SAP-Hardened-GCE

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-SAPCAL

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-SAPCAL-Azure

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-SAPCAL-EC2

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-SAPCAL-GCE

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-SUSE-Rancher-Setup-BYOS

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP5-Hardened-BYOS-Azure

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP5-Hardened-BYOS-EC2

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP5-Hardened-BYOS-GCE

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP5-SAP-Azure

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP5-SAP-Azure-3P

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP5-SAP-Azure-LI-BYOS

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP5-SAP-BYOS-Azure

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP5-SAP-BYOS-EC2

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP5-SAP-BYOS-GCE

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP5-SAP-EC2

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP5-SAP-GCE

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP5-SAP-Hardened-Azure

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP5-SAP-Hardened-EC2

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP5-SAP-Hardened-GCE

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP5-SAPCAL-Azure

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP5-SAPCAL-EC2

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP5-SAPCAL-GCE

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP6-SAP-Azure-LI-BYOS

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP6-SAP-BYOS

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP6-SAP-BYOS-Azure

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP6-SAP-BYOS-EC2

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP6-SAP-BYOS-GCE

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP6-SAP-Hardened

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP6-SAP-Hardened-Azure

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP6-SAP-Hardened-BYOS

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP6-SAP-Hardened-EC2

libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP6-SAP-Hardened-GCE

libtiff5-4.0.9-150000.45.25.1

SUSE Enterprise Storage 6

libtiff-devel-4.0.9-150000.45.25.1

libtiff5-4.0.9-150000.45.25.1

libtiff5-32bit-4.0.9-150000.45.25.1

SUSE Enterprise Storage 7

libtiff-devel-4.0.9-150000.45.25.1

libtiff5-4.0.9-150000.45.25.1

libtiff5-32bit-4.0.9-150000.45.25.1

SUSE Enterprise Storage 7.1

libtiff-devel-4.0.9-150000.45.25.1

libtiff5-4.0.9-150000.45.25.1

libtiff5-32bit-4.0.9-150000.45.25.1

SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

libtiff-devel-4.0.9-150000.45.25.1

libtiff5-4.0.9-150000.45.25.1

libtiff5-32bit-4.0.9-150000.45.25.1

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

libtiff-devel-4.0.9-150000.45.25.1

libtiff5-4.0.9-150000.45.25.1

libtiff5-32bit-4.0.9-150000.45.25.1

SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS

libtiff-devel-4.0.9-150000.45.25.1

libtiff5-4.0.9-150000.45.25.1

libtiff5-32bit-4.0.9-150000.45.25.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

libtiff-devel-4.0.9-150000.45.25.1

libtiff5-4.0.9-150000.45.25.1

libtiff5-32bit-4.0.9-150000.45.25.1

SUSE Linux Enterprise Micro 5.2

libtiff5-4.0.9-150000.45.25.1

SUSE Linux Enterprise Micro 5.3

libtiff5-4.0.9-150000.45.25.1

SUSE Linux Enterprise Module for Basesystem 15 SP4

libtiff-devel-4.0.9-150000.45.25.1

libtiff5-4.0.9-150000.45.25.1

libtiff5-32bit-4.0.9-150000.45.25.1

SUSE Linux Enterprise Module for Package Hub 15 SP4

tiff-4.0.9-150000.45.25.1

SUSE Linux Enterprise Real Time 15 SP3

libtiff-devel-4.0.9-150000.45.25.1

libtiff5-4.0.9-150000.45.25.1

libtiff5-32bit-4.0.9-150000.45.25.1

SUSE Linux Enterprise Server 15 SP1-LTSS

libtiff-devel-4.0.9-150000.45.25.1

libtiff5-4.0.9-150000.45.25.1

libtiff5-32bit-4.0.9-150000.45.25.1

SUSE Linux Enterprise Server 15 SP2-LTSS

libtiff-devel-4.0.9-150000.45.25.1

libtiff5-4.0.9-150000.45.25.1

libtiff5-32bit-4.0.9-150000.45.25.1

SUSE Linux Enterprise Server 15 SP3-LTSS

libtiff-devel-4.0.9-150000.45.25.1

libtiff5-4.0.9-150000.45.25.1

libtiff5-32bit-4.0.9-150000.45.25.1

SUSE Linux Enterprise Server for SAP Applications 15 SP1

libtiff-devel-4.0.9-150000.45.25.1

libtiff5-4.0.9-150000.45.25.1

libtiff5-32bit-4.0.9-150000.45.25.1

SUSE Linux Enterprise Server for SAP Applications 15 SP2

libtiff-devel-4.0.9-150000.45.25.1

libtiff5-4.0.9-150000.45.25.1

libtiff5-32bit-4.0.9-150000.45.25.1

SUSE Linux Enterprise Server for SAP Applications 15 SP3

libtiff-devel-4.0.9-150000.45.25.1

libtiff5-4.0.9-150000.45.25.1

libtiff5-32bit-4.0.9-150000.45.25.1

SUSE Manager Proxy 4.2

libtiff-devel-4.0.9-150000.45.25.1

libtiff5-4.0.9-150000.45.25.1

SUSE Manager Retail Branch Server 4.2

libtiff-devel-4.0.9-150000.45.25.1

libtiff5-4.0.9-150000.45.25.1

SUSE Manager Server 4.2

libtiff-devel-4.0.9-150000.45.25.1

libtiff5-4.0.9-150000.45.25.1

openSUSE Leap 15.4

libtiff-devel-4.0.9-150000.45.25.1

libtiff-devel-32bit-4.0.9-150000.45.25.1

libtiff5-4.0.9-150000.45.25.1

libtiff5-32bit-4.0.9-150000.45.25.1

tiff-4.0.9-150000.45.25.1

openSUSE Leap Micro 5.2

libtiff5-4.0.9-150000.45.25.1

openSUSE Leap Micro 5.3

libtiff5-4.0.9-150000.45.25.1

Ссылки

https://www.suse.com/support/update/announcement/2023/suse-su-20230342-1/
Link for SUSE-SU-2023:0342-1
https://lists.suse.com/pipermail/sle-security-updates/2023-February/013719.html
E-Mail link for SUSE-SU-2023:0342-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1207413
SUSE Bug 1207413
https://www.suse.com/security/cve/CVE-2022-48281/
SUSE CVE CVE-2022-48281 page

Описание

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.

Затронутые продукты

Container suse/nginx:latest:libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-150000.45.25.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-150000.45.25.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-48281.html
CVE-2022-48281
https://bugzilla.suse.com/1207413
SUSE Bug 1207413
https://bugzilla.suse.com/1208655
SUSE Bug 1208655
https://bugzilla.suse.com/1209328
SUSE Bug 1209328
https://bugzilla.suse.com/1209937
SUSE Bug 1209937