Debian Security Advisory
DLA-3297-1 tiff -- LTS security update
- Date Reported:
- 31 Jan 2023
- Affected Packages:
- tiff
- Vulnerable:
- Yes
- Security database references:
- In the Debian bugtracking system: Bug 1029653.
In Mitre's CVE dictionary: CVE-2022-48281. - More information:
-
processCropSelections in tools/tiffcrop.c in LibTIFF, the Tag Image File Format (TIFF) library and tools, has a heap-based buffer overflow (e.g.,
WRITE of size 307203
) via a crafted TIFF image.For Debian 10 buster, this problem has been fixed in version 4.1.0+git191117-2~deb10u6.
We recommend that you upgrade your tiff packages.
For the detailed security status of tiff please refer to its security tracker page at: https://security-tracker.debian.org/tracker/tiff
Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS