Red Hat Security Advisory

RHSA-2024:8914

libtiff security update

Released 2024-11-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) libtiff-4.4.0-12.el9_4.1, libtiff-devel-4.4.0-12.el9_4.1
Red Hat Enterprise Linux CRB (v. 9) libtiff-tools-4.4.0-12.el9_4.1

TI-2024-06501 CVE-2024-7006 · GHSA-r7x8-hv2q-v9r7

MEDIUM 42

A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01516 Published 2024-08-08 Partial fix · 4.4.0, 4.0.9 +3 CWE-476