SUSE: 2023:4181-1 suse/nginx Security Update
Summary
Advisory ID: SUSE-SU-2023:4869-1 Released: Thu Dec 14 16:26:23 2023 Summary: Security update for tiff Type: security Severity: important
References
References : 1199483 1210231 1211478 1212398 1214680 CVE-2022-1622 CVE-2022-40090
CVE-2023-1916 CVE-2023-26965 CVE-2023-2731
1199483,1210231,1211478,1212398,1214680,CVE-2022-1622,CVE-2022-40090,CVE-2023-1916,CVE-2023-26965,CVE-2023-2731
This update for tiff fixes the following issues:
- CVE-2023-2731: Fix null pointer deference in LZWDecode() (bsc#1211478).
- CVE-2023-1916: Fix out-of-bounds read in extractImageSection() (bsc#1210231).
- CVE-2023-26965: Fix heap-based use after free in loadImage() (bsc#1212398).
- CVE-2022-40090: Fix infinite loop in TIFFReadDirectory() (bsc#1214680).
The following package changes have been done:
- libtiff5-4.0.9-150000.45.35.1 updated