SUSE-SU-2023:2334-1: moderate: Security update for tiff
sle-security-updates at lists.suse.com
sle-security-updates at lists.suse.com
Wed May 31 08:30:03 UTC 2023
# Security update for tiff
Announcement ID: SUSE-SU-2023:2334-1
Rating: moderate
References:
* #1208226
* #1208227
* #1208228
* #1208229
* #1208230
* #1208231
* #1208232
* #1208233
* #1208234
* #1208236
Cross-References:
* CVE-2023-0795
* CVE-2023-0796
* CVE-2023-0797
* CVE-2023-0798
* CVE-2023-0799
* CVE-2023-0800
* CVE-2023-0801
* CVE-2023-0802
* CVE-2023-0803
* CVE-2023-0804
CVSS scores:
* CVE-2023-0795 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
* CVE-2023-0795 ( NVD ): 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
* CVE-2023-0796 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
* CVE-2023-0796 ( NVD ): 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
* CVE-2023-0797 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
* CVE-2023-0797 ( NVD ): 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
* CVE-2023-0798 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
* CVE-2023-0798 ( NVD ): 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
* CVE-2023-0799 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
* CVE-2023-0799 ( NVD ): 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
* CVE-2023-0800 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
* CVE-2023-0800 ( NVD ): 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
* CVE-2023-0801 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
* CVE-2023-0801 ( NVD ): 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
* CVE-2023-0802 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
* CVE-2023-0802 ( NVD ): 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
* CVE-2023-0803 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
* CVE-2023-0803 ( NVD ): 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
* CVE-2023-0804 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
* CVE-2023-0804 ( NVD ): 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Affected Products:
* Basesystem Module 15-SP4
* Basesystem Module 15-SP5
* openSUSE Leap 15.4
* openSUSE Leap 15.5
* openSUSE Leap Micro 5.3
* SUSE Linux Enterprise Desktop 15 SP4
* SUSE Linux Enterprise Desktop 15 SP5
* SUSE Linux Enterprise High Performance Computing 15 SP4
* SUSE Linux Enterprise High Performance Computing 15 SP5
* SUSE Linux Enterprise Micro 5.2
* SUSE Linux Enterprise Micro 5.3
* SUSE Linux Enterprise Micro 5.4
* SUSE Linux Enterprise Micro for Rancher 5.2
* SUSE Linux Enterprise Micro for Rancher 5.3
* SUSE Linux Enterprise Micro for Rancher 5.4
* SUSE Linux Enterprise Real Time 15 SP3
* SUSE Linux Enterprise Real Time 15 SP4
* SUSE Linux Enterprise Real Time 15 SP5
* SUSE Linux Enterprise Server 15 SP4
* SUSE Linux Enterprise Server 15 SP5
* SUSE Linux Enterprise Server for SAP Applications 15 SP4
* SUSE Linux Enterprise Server for SAP Applications 15 SP5
* SUSE Manager Proxy 4.3
* SUSE Manager Retail Branch Server 4.3
* SUSE Manager Server 4.3
* SUSE Package Hub 15 15-SP4
* SUSE Package Hub 15 15-SP5
An update that solves 10 vulnerabilities can now be installed.
## Description:
This update for tiff fixes the following issues:
Fixed multiple out of bounds read/write security issues:
CVE-2023-0795 (bsc#1208226), CVE-2023-0796 (bsc#1208227), CVE-2023-0797
(bsc#1208228), CVE-2023-0798 (bsc#1208229), CVE-2023-0799 (bsc#1208230),
CVE-2023-0800 (bsc#1208231), CVE-2023-0801 (bsc#1208232), CVE-2023-0802
(bsc#1208233), CVE-2023-0803 (bsc#1208234), CVE-2023-0804 (bsc#1208236).
## Patch Instructions:
To install this SUSE Moderate update use the SUSE recommended installation
methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* openSUSE Leap Micro 5.3
zypper in -t patch openSUSE-Leap-Micro-5.3-2023-2334=1
* openSUSE Leap 15.4
zypper in -t patch openSUSE-SLE-15.4-2023-2334=1
* openSUSE Leap 15.5
zypper in -t patch openSUSE-SLE-15.5-2023-2334=1
* SUSE Linux Enterprise Micro for Rancher 5.3
zypper in -t patch SUSE-SLE-Micro-5.3-2023-2334=1
* SUSE Linux Enterprise Micro 5.3
zypper in -t patch SUSE-SLE-Micro-5.3-2023-2334=1
* SUSE Linux Enterprise Micro for Rancher 5.4
zypper in -t patch SUSE-SLE-Micro-5.4-2023-2334=1
* SUSE Linux Enterprise Micro 5.4
zypper in -t patch SUSE-SLE-Micro-5.4-2023-2334=1
* Basesystem Module 15-SP4
zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-2334=1
* Basesystem Module 15-SP5
zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-2334=1
* SUSE Package Hub 15 15-SP4
zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-2334=1
* SUSE Package Hub 15 15-SP5
zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-2334=1
* SUSE Linux Enterprise Real Time 15 SP3
zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-2334=1
* SUSE Linux Enterprise Micro 5.2
zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-2334=1
* SUSE Linux Enterprise Micro for Rancher 5.2
zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-2334=1
## Package List:
* openSUSE Leap Micro 5.3 (aarch64 x86_64)
* tiff-debugsource-4.0.9-150000.45.28.1
* tiff-debuginfo-4.0.9-150000.45.28.1
* libtiff5-debuginfo-4.0.9-150000.45.28.1
* libtiff5-4.0.9-150000.45.28.1
* openSUSE Leap 15.4 (x86_64)
* libtiff-devel-32bit-4.0.9-150000.45.28.1
* libtiff5-32bit-4.0.9-150000.45.28.1
* libtiff5-32bit-debuginfo-4.0.9-150000.45.28.1
* openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64)
* tiff-4.0.9-150000.45.28.1
* libtiff-devel-4.0.9-150000.45.28.1
* tiff-debuginfo-4.0.9-150000.45.28.1
* libtiff5-debuginfo-4.0.9-150000.45.28.1
* libtiff5-4.0.9-150000.45.28.1
* tiff-debugsource-4.0.9-150000.45.28.1
* openSUSE Leap 15.5 (x86_64)
* libtiff-devel-32bit-4.0.9-150000.45.28.1
* libtiff5-32bit-4.0.9-150000.45.28.1
* libtiff5-32bit-debuginfo-4.0.9-150000.45.28.1
* openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64)
* tiff-4.0.9-150000.45.28.1
* libtiff-devel-4.0.9-150000.45.28.1
* tiff-debuginfo-4.0.9-150000.45.28.1
* libtiff5-debuginfo-4.0.9-150000.45.28.1
* libtiff5-4.0.9-150000.45.28.1
* tiff-debugsource-4.0.9-150000.45.28.1
* SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64)
* tiff-debugsource-4.0.9-150000.45.28.1
* tiff-debuginfo-4.0.9-150000.45.28.1
* libtiff5-debuginfo-4.0.9-150000.45.28.1
* libtiff5-4.0.9-150000.45.28.1
* SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64)
* tiff-debugsource-4.0.9-150000.45.28.1
* tiff-debuginfo-4.0.9-150000.45.28.1
* libtiff5-debuginfo-4.0.9-150000.45.28.1
* libtiff5-4.0.9-150000.45.28.1
* SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64)
* tiff-debugsource-4.0.9-150000.45.28.1
* tiff-debuginfo-4.0.9-150000.45.28.1
* libtiff5-debuginfo-4.0.9-150000.45.28.1
* libtiff5-4.0.9-150000.45.28.1
* SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64)
* tiff-debugsource-4.0.9-150000.45.28.1
* tiff-debuginfo-4.0.9-150000.45.28.1
* libtiff5-debuginfo-4.0.9-150000.45.28.1
* libtiff5-4.0.9-150000.45.28.1
* Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64)
* libtiff-devel-4.0.9-150000.45.28.1
* tiff-debuginfo-4.0.9-150000.45.28.1
* libtiff5-debuginfo-4.0.9-150000.45.28.1
* libtiff5-4.0.9-150000.45.28.1
* tiff-debugsource-4.0.9-150000.45.28.1
* Basesystem Module 15-SP4 (x86_64)
* libtiff5-32bit-4.0.9-150000.45.28.1
* libtiff5-32bit-debuginfo-4.0.9-150000.45.28.1
* Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64)
* libtiff-devel-4.0.9-150000.45.28.1
* tiff-debuginfo-4.0.9-150000.45.28.1
* libtiff5-debuginfo-4.0.9-150000.45.28.1
* libtiff5-4.0.9-150000.45.28.1
* tiff-debugsource-4.0.9-150000.45.28.1
* Basesystem Module 15-SP5 (x86_64)
* libtiff5-32bit-4.0.9-150000.45.28.1
* libtiff5-32bit-debuginfo-4.0.9-150000.45.28.1
* SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x x86_64)
* tiff-debugsource-4.0.9-150000.45.28.1
* tiff-debuginfo-4.0.9-150000.45.28.1
* tiff-4.0.9-150000.45.28.1
* SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64)
* tiff-debugsource-4.0.9-150000.45.28.1
* tiff-debuginfo-4.0.9-150000.45.28.1
* tiff-4.0.9-150000.45.28.1
* SUSE Linux Enterprise Real Time 15 SP3 (x86_64)
* libtiff-devel-4.0.9-150000.45.28.1
* libtiff5-32bit-debuginfo-4.0.9-150000.45.28.1
* tiff-debuginfo-4.0.9-150000.45.28.1
* libtiff5-debuginfo-4.0.9-150000.45.28.1
* libtiff5-4.0.9-150000.45.28.1
* tiff-debugsource-4.0.9-150000.45.28.1
* libtiff5-32bit-4.0.9-150000.45.28.1
* SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64)
* tiff-debugsource-4.0.9-150000.45.28.1
* tiff-debuginfo-4.0.9-150000.45.28.1
* libtiff5-debuginfo-4.0.9-150000.45.28.1
* libtiff5-4.0.9-150000.45.28.1
* SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64)
* tiff-debugsource-4.0.9-150000.45.28.1
* tiff-debuginfo-4.0.9-150000.45.28.1
* libtiff5-debuginfo-4.0.9-150000.45.28.1
* libtiff5-4.0.9-150000.45.28.1
## References:
* https://www.suse.com/security/cve/CVE-2023-0795.html
* https://www.suse.com/security/cve/CVE-2023-0796.html
* https://www.suse.com/security/cve/CVE-2023-0797.html
* https://www.suse.com/security/cve/CVE-2023-0798.html
* https://www.suse.com/security/cve/CVE-2023-0799.html
* https://www.suse.com/security/cve/CVE-2023-0800.html
* https://www.suse.com/security/cve/CVE-2023-0801.html
* https://www.suse.com/security/cve/CVE-2023-0802.html
* https://www.suse.com/security/cve/CVE-2023-0803.html
* https://www.suse.com/security/cve/CVE-2023-0804.html
* https://bugzilla.suse.com/show_bug.cgi?id=1208226
* https://bugzilla.suse.com/show_bug.cgi?id=1208227
* https://bugzilla.suse.com/show_bug.cgi?id=1208228
* https://bugzilla.suse.com/show_bug.cgi?id=1208229
* https://bugzilla.suse.com/show_bug.cgi?id=1208230
* https://bugzilla.suse.com/show_bug.cgi?id=1208231
* https://bugzilla.suse.com/show_bug.cgi?id=1208232
* https://bugzilla.suse.com/show_bug.cgi?id=1208233
* https://bugzilla.suse.com/show_bug.cgi?id=1208234
* https://bugzilla.suse.com/show_bug.cgi?id=1208236
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-security-updates/attachments/20230531/7be4ec16/attachment.htm>
More information about the sle-security-updates
mailing list