USN-5705-1: LibTIFF vulnerabilities
27 October 2022
Several security issues were fixed in LibTIFF.
Releases
Packages
- tiff - Tag Image File Format (TIFF) library
Details
Chintan Shah discovered that LibTIFF incorrectly handled memory in
certain conditions. An attacker could trick a user into processing a specially
crafted image file and potentially use this issue to allow for information
disclosure or to cause the application to crash. (CVE-2022-3570)
It was discovered that LibTIFF incorrectly handled memory in certain
conditions. An attacker could trick a user into processing a specially
crafted tiff file and potentially use this issue to cause a denial of service.
(CVE-2022-3598)
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 16.04
-
libtiff-tools
-
4.0.6-1ubuntu0.8+esm6
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References
Related notices
- USN-5714-1: tiff, libtiff-opengl, libtiffxx5, libtiff-tools, libtiff5-dev, libtiff-doc, libtiff-dev, libtiff4-dev, libtiff5-alt-dev, libtiff5