SUSE-SU-2024:0973-1

Опубликовано: 22 мар. 2024

Источник: suse-cvrf

Описание

Security update for tiff

This update for tiff fixes the following issues:

CVE-2023-41175: Fixed potential integer overflow in raw2tiff.c (bsc#1214686).
CVE-2023-38288: Fixed potential integer overflow in raw2tiff.c (bsc#1213590).
CVE-2023-40745: Fixed integer overflow in tiffcp.c (bsc#1214687).

Список пакетов

Container suse/nginx:latest

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP3-SAP-BYOS-Azure

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP3-SAP-BYOS-EC2-HVM

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP3-SAP-BYOS-GCE

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP3-SAPCAL-Azure

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP3-SAPCAL-EC2-HVM

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP3-SAPCAL-GCE

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP4-Hardened-BYOS

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP4-Hardened-BYOS-Azure

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP4-Hardened-BYOS-EC2

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP4-Hardened-BYOS-GCE

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP4-SAP

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP4-SAP-Azure

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP4-SAP-BYOS

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP4-SAP-BYOS-Azure

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP4-SAP-BYOS-EC2

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP4-SAP-BYOS-GCE

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP4-SAP-EC2

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP4-SAP-GCE

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP4-SAP-Hardened

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP4-SAP-Hardened-Azure

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP4-SAP-Hardened-BYOS

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP4-SAP-Hardened-GCE

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP4-SAPCAL

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP4-SAPCAL-Azure

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP4-SAPCAL-EC2

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP4-SAPCAL-GCE

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP5-Hardened-BYOS-Azure

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP5-Hardened-BYOS-EC2

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP5-Hardened-BYOS-GCE

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP5-SAP-Azure-3P

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP5-SAP-Azure-LI-BYOS

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP5-SAP-BYOS-Azure

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP5-SAP-BYOS-EC2

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP5-SAP-BYOS-GCE

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP5-SAP-Hardened-Azure

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP5-SAP-Hardened-GCE

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP5-SAPCAL-Azure

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP5-SAPCAL-EC2

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP5-SAPCAL-GCE

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP6-SAP-Azure-LI-BYOS

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP6-SAP-BYOS

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP6-SAP-BYOS-Azure

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP6-SAP-BYOS-EC2

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP6-SAP-BYOS-GCE

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP6-SAP-Hardened

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP6-SAP-Hardened-Azure

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP6-SAP-Hardened-BYOS

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP6-SAP-Hardened-EC2

libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP6-SAP-Hardened-GCE

libtiff5-4.0.9-150000.45.41.1

SUSE Linux Enterprise Micro 5.2

libtiff5-4.0.9-150000.45.41.1

SUSE Linux Enterprise Micro 5.3

libtiff5-4.0.9-150000.45.41.1

SUSE Linux Enterprise Micro 5.4

libtiff5-4.0.9-150000.45.41.1

SUSE Linux Enterprise Micro 5.5

libtiff5-4.0.9-150000.45.41.1

SUSE Linux Enterprise Module for Basesystem 15 SP5

libtiff-devel-4.0.9-150000.45.41.1

libtiff5-4.0.9-150000.45.41.1

libtiff5-32bit-4.0.9-150000.45.41.1

SUSE Linux Enterprise Module for Package Hub 15 SP5

tiff-4.0.9-150000.45.41.1

openSUSE Leap 15.5

libtiff-devel-4.0.9-150000.45.41.1

libtiff-devel-32bit-4.0.9-150000.45.41.1

libtiff5-4.0.9-150000.45.41.1

libtiff5-32bit-4.0.9-150000.45.41.1

tiff-4.0.9-150000.45.41.1

openSUSE Leap Micro 5.3

libtiff5-4.0.9-150000.45.41.1

openSUSE Leap Micro 5.4

libtiff5-4.0.9-150000.45.41.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20240973-1/
Link for SUSE-SU-2024:0973-1
https://lists.suse.com/pipermail/sle-security-updates/2024-March/018188.html
E-Mail link for SUSE-SU-2024:0973-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1213590
SUSE Bug 1213590
https://bugzilla.suse.com/1214686
SUSE Bug 1214686
https://bugzilla.suse.com/1214687
SUSE Bug 1214687
https://bugzilla.suse.com/1221187
SUSE Bug 1221187
https://www.suse.com/security/cve/CVE-2023-38288/
SUSE CVE CVE-2023-38288 page
https://www.suse.com/security/cve/CVE-2023-40745/
SUSE CVE CVE-2023-40745 page
https://www.suse.com/security/cve/CVE-2023-41175/
SUSE CVE CVE-2023-41175 page

Описание

** REJECT ** Not a Security Issue.

Затронутые продукты

Container suse/nginx:latest:libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-150000.45.41.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-38288.html
CVE-2023-38288
https://bugzilla.suse.com/1213590
SUSE Bug 1213590

Описание

LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.

Затронутые продукты

Container suse/nginx:latest:libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-150000.45.41.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-40745.html
CVE-2023-40745
https://bugzilla.suse.com/1214687
SUSE Bug 1214687

Описание

A vulnerability was found in libtiff due to multiple potential integer overflows in raw2tiff.c. This flaw allows remote attackers to cause a denial of service or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.

Затронутые продукты

Container suse/nginx:latest:libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-150000.45.41.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-150000.45.41.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-41175.html
CVE-2023-41175
https://bugzilla.suse.com/1214686
SUSE Bug 1214686