libtiff-4.0.9-21.el8.ML.1

エラータID: AXSA:2022-3333:02

Release date: 
Friday, July 1, 2022 - 07:37
Subject: 
libtiff-4.0.9-21.el8.ML.1
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

The libtiff packages contain a library of functions for manipulating Tagged
Image File Format (TIFF) files.

Security Fix(es):

* libtiff: a buffer overflow via the "invertImage()" may lead to DoS
(CVE-2020-19131)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Asianux Server 8.6
Release Notes linked from the References section.

CVE-2020-19131
Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service
via the "invertImage()" function in the component "tiffcrop".

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. libtiff-4.0.9-21.el8.ML.1.src.rpm
    MD5: 5995ece5c77ed7b960af13895d3bf219
    SHA-256: d12cc25ec112de7ed2c7d12fd012f10aa37c7d429d1121f509c8a75556679ad7
    Size: 2.25 MB

Asianux Server 8 for x86_64
  1. libtiff-4.0.9-21.el8.ML.1.x86_64.rpm
    MD5: 555da605117305bee9cb71eac34a5c57
    SHA-256: 31de8f8956c2bd194c2916d188d36d8f7cedc44c5389dd72b711d538d0bc8e00
    Size: 187.19 kB
  2. libtiff-devel-4.0.9-21.el8.ML.1.x86_64.rpm
    MD5: 8b97ea09c59eb714e0e7d6b1655c2eac
    SHA-256: 3e12c1ae838d7ebbe99be6fd7a7d64391d9e03d2456975b871903c3c1ec87376
    Size: 510.43 kB
  3. libtiff-tools-4.0.9-21.el8.ML.1.x86_64.rpm
    MD5: 28c762586bea5090bfc367cb9a923afd
    SHA-256: 8550e79250ebf170e73ecb88ab4eb2393e533d0ef0c878e0a80bc87c46ec22cb
    Size: 252.79 kB
  4. libtiff-4.0.9-21.el8.ML.1.i686.rpm
    MD5: 0190024dba18e8d03b9c5b034ed00a3f
    SHA-256: c94f0112ab6c2be77232cd4f18c789e84e348f2c1d3ccb0f067088c458d14384
    Size: 201.59 kB
  5. libtiff-devel-4.0.9-21.el8.ML.1.i686.rpm
    MD5: 2d072c56c760b63878d630ead3403f52
    SHA-256: dd7b6a987a646ca5b093b80bfb3f3bd37c16482e030afa1f0c9714490fff6e00
    Size: 510.43 kB