SUSE-SU-2024:0593-1: Security update for tiff
This update for tiff fixes the following issues: CVE-2023-52356: Fixed segfault in TIFFReadRGBATileExt() (bsc#1219213).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/tiff-debuginfoto a version that resolves this vulnerability.Fixed in 4.0.9-44.77.1 - Upgrade
Upgrade
suse/tiff-debugsourceto a version that resolves this vulnerability.Fixed in 4.0.9-44.77.1 - Upgrade
Upgrade
suse/libtiff-develto a version that resolves this vulnerability.Fixed in 4.0.9-44.77.1 - Upgrade
Upgrade
suse/libtiff5-debuginfoto a version that resolves this vulnerability.Fixed in 4.0.9-44.77.1 - Upgrade
Upgrade
suse/tiffto a version that resolves this vulnerability.Fixed in 4.0.9-44.77.1 - Upgrade
Upgrade
suse/libtiff5to a version that resolves this vulnerability.Fixed in 4.0.9-44.77.1 - Upgrade
Upgrade
suse/libtiff5to a version that resolves this vulnerability.Fixed in 32bit-4.0.9-44.77.1 - Upgrade
Upgrade
suse/libtiff5-debuginfoto a version that resolves this vulnerability.Fixed in 32bit-4.0.9-44.77.1 - Upgrade
Upgrade
tiffto a version that resolves this vulnerability.Patch SUSE-SLE-SDK-12-SP5-2024-593=1 - Upgrade
Upgrade
tiffto a version that resolves this vulnerability.Patch SUSE-SLE-SERVER-12-SP5-2024-593=1
Event History
Frequently Asked Questions
Which SUSE products and architectures are covered by this update?
The update applies to SUSE Linux Enterprise Software Development Kit 12 SP5 on aarch64, ppc64le, s390x, and x86_64, and to SUSE Linux Enterprise High Performance Computing 12 SP5 on aarch64 and x86_64.
Which packages are updated?
The affected package set includes tiff, libtiff5, libtiff-devel, tiff-debuginfo, tiff-debugsource, and libtiff5-debuginfo.
What failure does the update address?
It fixes a segmentation fault in TIFFReadRGBATileExt(), tracked as CVE-2023-52356 and bsc#1219213.