Advisories » MGASA-2024-0164

Updated libtiff packages fix security vulnerability

Publication date: 09 May 2024
Modification date: 09 May 2024
Type: security
Affected Mageia releases : 9
CVE: CVE-2023-6228

Description

An issue was found in the tiffcp utility distributed by the libtiff
package where a crafted TIFF file on processing may cause a heap-based
buffer overflow leads to an application crash. (CVE-2023-6228)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=33163
• https://lwn.net/Articles/971682/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6228

SRPMS

9/core

• libtiff-4.5.1-1.3.mga9