摘要:
libtiff security update
安全等级: Medium
公告ID: KylinSec-SA-2022-2103
发布日期: 2022年9月23日
关联CVE: CVE-2022-2520
This libtiff provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.
Security Fix(es):
A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at tiffcrop.c:8621 that can cause program crash when reading a crafted input.(CVE-2022-2520)
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|---|---|---|
| CVE-2022-2520 | KY3.4-4A | libtiff | Fixed |
| CVE-2022-2520 | KY3.4-5A | libtiff | Fixed |
| CVE-2022-2520 | KY3.5.1 | libtiff | Fixed |
| 软件名称 | 架构 | 版本号 |
|---|---|---|
| libtiff-help | noarch | 4.3.0-18.kb1.ky3_5 |
| libtiff-static | x86_64 | 4.3.0-18.kb1.ky3_5 |
| libtiff | x86_64 | 4.3.0-18.kb1.ky3_5 |
| libtiff-devel | x86_64 | 4.3.0-18.kb1.ky3_5 |
| libtiff-tools | x86_64 | 4.3.0-18.kb1.ky3_5 |
| libtiff | aarch64 | 4.3.0-18.kb1.ky3_5 |
| libtiff-tools | aarch64 | 4.3.0-18.kb1.ky3_5 |
| libtiff-static | aarch64 | 4.3.0-18.kb1.ky3_5 |
| libtiff-devel | aarch64 | 4.3.0-18.kb1.ky3_5 |
| 软件名称 | 架构 | 版本号 |
|---|---|---|
| libtiff-help | noarch | 4.3.0-4.kb1.ky3_4 |
| libtiff | x86_64 | 4.3.0-4.kb1.ky3_4 |
| libtiff-devel | x86_64 | 4.3.0-4.kb1.ky3_4 |
| libtiff-devel | aarch64 | 4.3.0-4.kb1.ky3_4 |
| libtiff | aarch64 | 4.3.0-4.kb1.ky3_4 |
| 软件名称 | 架构 | 版本号 |
|---|---|---|
| libtiff-help | noarch | 4.3.0-4.kb1.ky3_4 |
| libtiff-devel | x86_64 | 4.3.0-4.kb1.ky3_4 |
| libtiff | x86_64 | 4.3.0-4.kb1.ky3_4 |
| libtiff-devel | aarch64 | 4.3.0-4.kb1.ky3_4 |
| libtiff | aarch64 | 4.3.0-4.kb1.ky3_4 |
sudo dnf udpate libtiff
