MGASA-2022-0267

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2022-0267.html

Import Source

https://advisories.mageia.org/MGASA-2022-0267.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2022-0267

Related

CVE-2022-2056
CVE-2022-2057
CVE-2022-2058

Published

2022-07-25T21:41:46Z

Modified

2022-07-25T20:49:59Z

Summary

Updated libtiff packages fix security vulnerability

Details

Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058)

References

https://advisories.mageia.org/MGASA-2022-0267.html
https://bugs.mageia.org/show_bug.cgi?id=30640
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/4TSS7MJ7OO7JO5BNKCRYSFU7UAYOKLA2/

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

MGASA-2022-0267

Affected packages