Red Hat Security Advisory

RHSA-2020:4634

libtiff security update

Released 2020-11-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) libtiff-tools-4.0.9-18.el8
Red Hat Enterprise Linux AppStream (v. 8) libtiff-4.0.9-18.el8, libtiff-devel-4.0.9-18.el8

Fixes 1 record

TI-2019-13090 CVE-2019-17546 · GHSA-24m4-fmx6-c2q6

tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other…

MEDIUM 44

tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a "Negative-si…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03356 Published 2019-10-14 Partial fix CWE-190