Security update for tiff SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:0496-1 Final 1 1 2022-02-18T09:42:36Z current 2022-02-18T09:42:36Z 2022-02-18T09:42:36Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for tiff This update for tiff fixes the following issues: - CVE-2017-17095: Fixed DoS in tools/pal2rgb.c in pal2rgb (bsc#1071031). - CVE-2019-17546: Fixed integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image (bsc#1154365). - CVE-2020-19131: Fixed buffer overflow in tiffcrop that may cause DoS via the invertImage() function (bsc#1190312). - CVE-2020-35521: Fixed memory allocation failure in tif_read.c (bsc#1182808). - CVE-2020-35522: Fixed memory allocation failure in tif_pixarlog.c (bsc#1182809). - CVE-2020-35523: Fixed integer overflow in tif_getimage.c (bsc#1182811). - CVE-2020-35524: Fixed heap-based buffer overflow in TIFF2PDF tool (bsc#1182812). - CVE-2022-22844: Fixed out-of-bounds read in _TIFFmemcpy in tif_unix.c (bsc#1194539). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). HPE-Helion-OpenStack-8-2022-496,Image SLES12-SP4-SAP-Azure-BYOS-2022-496,Image SLES12-SP4-SAP-Azure-LI-BYOS-Production-2022-496,Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production-2022-496,Image SLES12-SP4-SAP-EC2-HVM-2022-496,Image SLES12-SP5-Azure-SAP-BYOS-2022-496,Image SLES12-SP5-Azure-SAP-On-Demand-2022-496,Image SLES12-SP5-EC2-SAP-BYOS-2022-496,Image SLES12-SP5-EC2-SAP-On-Demand-2022-496,Image SLES12-SP5-GCE-SAP-BYOS-2022-496,Image SLES12-SP5-GCE-SAP-On-Demand-2022-496,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2022-496,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2022-496,SUSE-2022-496,SUSE-OpenStack-Cloud-8-2022-496,SUSE-OpenStack-Cloud-9-2022-496,SUSE-OpenStack-Cloud-Crowbar-8-2022-496,SUSE-OpenStack-Cloud-Crowbar-9-2022-496,SUSE-SLE-SAP-12-SP3-2022-496,SUSE-SLE-SAP-12-SP4-2022-496,SUSE-SLE-SDK-12-SP5-2022-496,SUSE-SLE-SERVER-12-SP2-BCL-2022-496,SUSE-SLE-SERVER-12-SP3-2022-496,SUSE-SLE-SERVER-12-SP3-BCL-2022-496,SUSE-SLE-SERVER-12-SP4-LTSS-2022-496,SUSE-SLE-SERVER-12-SP5-2022-496 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20220496-1/ Link for SUSE-SU-2022:0496-1 https://lists.suse.com/pipermail/sle-security-updates/2022-February/010261.html E-Mail link for SUSE-SU-2022:0496-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1071031 SUSE Bug 1071031 https://bugzilla.suse.com/1154365 SUSE Bug 1154365 https://bugzilla.suse.com/1182808 SUSE Bug 1182808 https://bugzilla.suse.com/1182809 SUSE Bug 1182809 https://bugzilla.suse.com/1182811 SUSE Bug 1182811 https://bugzilla.suse.com/1182812 SUSE Bug 1182812 https://bugzilla.suse.com/1190312 SUSE Bug 1190312 https://bugzilla.suse.com/1194539 SUSE Bug 1194539 https://www.suse.com/security/cve/CVE-2017-17095/ SUSE CVE CVE-2017-17095 page https://www.suse.com/security/cve/CVE-2019-17546/ SUSE CVE CVE-2019-17546 page https://www.suse.com/security/cve/CVE-2020-19131/ SUSE CVE CVE-2020-19131 page https://www.suse.com/security/cve/CVE-2020-35521/ SUSE CVE CVE-2020-35521 page https://www.suse.com/security/cve/CVE-2020-35522/ SUSE CVE CVE-2020-35522 page https://www.suse.com/security/cve/CVE-2020-35523/ SUSE CVE CVE-2020-35523 page https://www.suse.com/security/cve/CVE-2020-35524/ SUSE CVE CVE-2020-35524 page https://www.suse.com/security/cve/CVE-2022-22844/ SUSE CVE CVE-2022-22844 page HPE Helion OpenStack 8 Image SLES12-SP4-SAP-Azure-BYOS Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production Image SLES12-SP4-SAP-EC2-HVM Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 libtiff5-4.0.9-44.45.1 libtiff5-32bit-4.0.9-44.45.1 tiff-4.0.9-44.45.1 libtiff-devel-4.0.9-44.45.1 libtiff-devel-32bit-4.0.9-44.45.1 libtiff-devel-64bit-4.0.9-44.45.1 libtiff5-64bit-4.0.9-44.45.1 libtiff5-4.0.9-44.45.1 as a component of HPE Helion OpenStack 8 libtiff5-32bit-4.0.9-44.45.1 as a component of HPE Helion OpenStack 8 tiff-4.0.9-44.45.1 as a component of HPE Helion OpenStack 8 libtiff5-4.0.9-44.45.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS libtiff5-4.0.9-44.45.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production libtiff5-4.0.9-44.45.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production libtiff5-4.0.9-44.45.1 as a component of Image SLES12-SP4-SAP-EC2-HVM libtiff5-4.0.9-44.45.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS libtiff5-4.0.9-44.45.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand libtiff5-4.0.9-44.45.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS libtiff5-4.0.9-44.45.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand libtiff5-4.0.9-44.45.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS libtiff5-4.0.9-44.45.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand libtiff5-4.0.9-44.45.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production libtiff5-4.0.9-44.45.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libtiff5-4.0.9-44.45.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libtiff5-32bit-4.0.9-44.45.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL tiff-4.0.9-44.45.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libtiff5-4.0.9-44.45.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL libtiff5-32bit-4.0.9-44.45.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL tiff-4.0.9-44.45.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL libtiff5-4.0.9-44.45.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS libtiff5-32bit-4.0.9-44.45.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS tiff-4.0.9-44.45.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS libtiff5-4.0.9-44.45.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libtiff5-32bit-4.0.9-44.45.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tiff-4.0.9-44.45.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libtiff5-4.0.9-44.45.1 as a component of SUSE Linux Enterprise Server 12 SP5 libtiff5-32bit-4.0.9-44.45.1 as a component of SUSE Linux Enterprise Server 12 SP5 tiff-4.0.9-44.45.1 as a component of SUSE Linux Enterprise Server 12 SP5 libtiff5-4.0.9-44.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libtiff5-32bit-4.0.9-44.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 tiff-4.0.9-44.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libtiff5-4.0.9-44.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libtiff5-32bit-4.0.9-44.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 tiff-4.0.9-44.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libtiff5-4.0.9-44.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libtiff5-32bit-4.0.9-44.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 tiff-4.0.9-44.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libtiff-devel-4.0.9-44.45.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libtiff5-4.0.9-44.45.1 as a component of SUSE OpenStack Cloud 8 libtiff5-32bit-4.0.9-44.45.1 as a component of SUSE OpenStack Cloud 8 tiff-4.0.9-44.45.1 as a component of SUSE OpenStack Cloud 8 libtiff5-4.0.9-44.45.1 as a component of SUSE OpenStack Cloud 9 libtiff5-32bit-4.0.9-44.45.1 as a component of SUSE OpenStack Cloud 9 tiff-4.0.9-44.45.1 as a component of SUSE OpenStack Cloud 9 libtiff5-4.0.9-44.45.1 as a component of SUSE OpenStack Cloud Crowbar 8 libtiff5-32bit-4.0.9-44.45.1 as a component of SUSE OpenStack Cloud Crowbar 8 tiff-4.0.9-44.45.1 as a component of SUSE OpenStack Cloud Crowbar 8 libtiff5-4.0.9-44.45.1 as a component of SUSE OpenStack Cloud Crowbar 9 libtiff5-32bit-4.0.9-44.45.1 as a component of SUSE OpenStack Cloud Crowbar 9 tiff-4.0.9-44.45.1 as a component of SUSE OpenStack Cloud Crowbar 9 tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIFF file. CVE-2017-17095 HPE Helion OpenStack 8:libtiff5-32bit-4.0.9-44.45.1 HPE Helion OpenStack 8:libtiff5-4.0.9-44.45.1 HPE Helion OpenStack 8:tiff-4.0.9-44.45.1 Image SLES12-SP4-SAP-Azure-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.45.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.45.1 Image SLES12-SP4-SAP-EC2-HVM:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-Azure-SAP-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-Azure-SAP-On-Demand:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-EC2-SAP-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-EC2-SAP-On-Demand:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-GCE-SAP-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-GCE-SAP-On-Demand:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP2-BCL:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP2-BCL:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP2-BCL:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-BCL:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-BCL:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-BCL:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-LTSS:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.45.1 SUSE OpenStack Cloud 8:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud 8:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud 8:tiff-4.0.9-44.45.1 SUSE OpenStack Cloud 9:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud 9:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud 9:tiff-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 8:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 8:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 8:tiff-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 9:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 9:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 9:tiff-4.0.9-44.45.1 important 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220496-1/ https://www.suse.com/security/cve/CVE-2017-17095.html CVE-2017-17095 https://bugzilla.suse.com/1071031 SUSE Bug 1071031 tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a "Negative-size-param" condition. CVE-2019-17546 HPE Helion OpenStack 8:libtiff5-32bit-4.0.9-44.45.1 HPE Helion OpenStack 8:libtiff5-4.0.9-44.45.1 HPE Helion OpenStack 8:tiff-4.0.9-44.45.1 Image SLES12-SP4-SAP-Azure-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.45.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.45.1 Image SLES12-SP4-SAP-EC2-HVM:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-Azure-SAP-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-Azure-SAP-On-Demand:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-EC2-SAP-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-EC2-SAP-On-Demand:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-GCE-SAP-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-GCE-SAP-On-Demand:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP2-BCL:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP2-BCL:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP2-BCL:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-BCL:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-BCL:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-BCL:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-LTSS:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.45.1 SUSE OpenStack Cloud 8:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud 8:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud 8:tiff-4.0.9-44.45.1 SUSE OpenStack Cloud 9:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud 9:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud 9:tiff-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 8:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 8:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 8:tiff-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 9:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 9:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 9:tiff-4.0.9-44.45.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220496-1/ https://www.suse.com/security/cve/CVE-2019-17546.html CVE-2019-17546 https://bugzilla.suse.com/1154365 SUSE Bug 1154365 Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the "invertImage()" function in the component "tiffcrop". CVE-2020-19131 HPE Helion OpenStack 8:libtiff5-32bit-4.0.9-44.45.1 HPE Helion OpenStack 8:libtiff5-4.0.9-44.45.1 HPE Helion OpenStack 8:tiff-4.0.9-44.45.1 Image SLES12-SP4-SAP-Azure-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.45.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.45.1 Image SLES12-SP4-SAP-EC2-HVM:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-Azure-SAP-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-Azure-SAP-On-Demand:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-EC2-SAP-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-EC2-SAP-On-Demand:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-GCE-SAP-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-GCE-SAP-On-Demand:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP2-BCL:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP2-BCL:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP2-BCL:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-BCL:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-BCL:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-BCL:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-LTSS:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.45.1 SUSE OpenStack Cloud 8:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud 8:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud 8:tiff-4.0.9-44.45.1 SUSE OpenStack Cloud 9:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud 9:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud 9:tiff-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 8:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 8:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 8:tiff-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 9:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 9:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 9:tiff-4.0.9-44.45.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220496-1/ https://www.suse.com/security/cve/CVE-2020-19131.html CVE-2020-19131 https://bugzilla.suse.com/1190312 SUSE Bug 1190312 A flaw was found in libtiff. Due to a memory allocation failure in tif_read.c, a crafted TIFF file can lead to an abort, resulting in denial of service. CVE-2020-35521 HPE Helion OpenStack 8:libtiff5-32bit-4.0.9-44.45.1 HPE Helion OpenStack 8:libtiff5-4.0.9-44.45.1 HPE Helion OpenStack 8:tiff-4.0.9-44.45.1 Image SLES12-SP4-SAP-Azure-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.45.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.45.1 Image SLES12-SP4-SAP-EC2-HVM:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-Azure-SAP-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-Azure-SAP-On-Demand:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-EC2-SAP-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-EC2-SAP-On-Demand:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-GCE-SAP-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-GCE-SAP-On-Demand:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP2-BCL:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP2-BCL:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP2-BCL:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-BCL:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-BCL:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-BCL:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-LTSS:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.45.1 SUSE OpenStack Cloud 8:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud 8:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud 8:tiff-4.0.9-44.45.1 SUSE OpenStack Cloud 9:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud 9:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud 9:tiff-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 8:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 8:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 8:tiff-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 9:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 9:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 9:tiff-4.0.9-44.45.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220496-1/ https://www.suse.com/security/cve/CVE-2020-35521.html CVE-2020-35521 https://bugzilla.suse.com/1182808 SUSE Bug 1182808 https://bugzilla.suse.com/1200195 SUSE Bug 1200195 In LibTIFF, there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead to an abort, resulting in a remote denial of service attack. CVE-2020-35522 HPE Helion OpenStack 8:libtiff5-32bit-4.0.9-44.45.1 HPE Helion OpenStack 8:libtiff5-4.0.9-44.45.1 HPE Helion OpenStack 8:tiff-4.0.9-44.45.1 Image SLES12-SP4-SAP-Azure-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.45.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.45.1 Image SLES12-SP4-SAP-EC2-HVM:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-Azure-SAP-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-Azure-SAP-On-Demand:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-EC2-SAP-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-EC2-SAP-On-Demand:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-GCE-SAP-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-GCE-SAP-On-Demand:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP2-BCL:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP2-BCL:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP2-BCL:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-BCL:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-BCL:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-BCL:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-LTSS:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.45.1 SUSE OpenStack Cloud 8:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud 8:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud 8:tiff-4.0.9-44.45.1 SUSE OpenStack Cloud 9:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud 9:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud 9:tiff-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 8:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 8:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 8:tiff-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 9:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 9:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 9:tiff-4.0.9-44.45.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220496-1/ https://www.suse.com/security/cve/CVE-2020-35522.html CVE-2020-35522 https://bugzilla.suse.com/1182809 SUSE Bug 1182809 https://bugzilla.suse.com/1200195 SUSE Bug 1200195 An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. This flaw allows an attacker to inject and execute arbitrary code when a user opens a crafted TIFF file. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. CVE-2020-35523 HPE Helion OpenStack 8:libtiff5-32bit-4.0.9-44.45.1 HPE Helion OpenStack 8:libtiff5-4.0.9-44.45.1 HPE Helion OpenStack 8:tiff-4.0.9-44.45.1 Image SLES12-SP4-SAP-Azure-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.45.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.45.1 Image SLES12-SP4-SAP-EC2-HVM:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-Azure-SAP-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-Azure-SAP-On-Demand:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-EC2-SAP-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-EC2-SAP-On-Demand:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-GCE-SAP-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-GCE-SAP-On-Demand:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP2-BCL:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP2-BCL:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP2-BCL:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-BCL:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-BCL:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-BCL:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-LTSS:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.45.1 SUSE OpenStack Cloud 8:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud 8:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud 8:tiff-4.0.9-44.45.1 SUSE OpenStack Cloud 9:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud 9:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud 9:tiff-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 8:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 8:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 8:tiff-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 9:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 9:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 9:tiff-4.0.9-44.45.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220496-1/ https://www.suse.com/security/cve/CVE-2020-35523.html CVE-2020-35523 https://bugzilla.suse.com/1182811 SUSE Bug 1182811 https://bugzilla.suse.com/1200195 SUSE Bug 1200195 A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. CVE-2020-35524 HPE Helion OpenStack 8:libtiff5-32bit-4.0.9-44.45.1 HPE Helion OpenStack 8:libtiff5-4.0.9-44.45.1 HPE Helion OpenStack 8:tiff-4.0.9-44.45.1 Image SLES12-SP4-SAP-Azure-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.45.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.45.1 Image SLES12-SP4-SAP-EC2-HVM:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-Azure-SAP-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-Azure-SAP-On-Demand:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-EC2-SAP-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-EC2-SAP-On-Demand:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-GCE-SAP-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-GCE-SAP-On-Demand:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP2-BCL:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP2-BCL:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP2-BCL:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-BCL:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-BCL:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-BCL:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-LTSS:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.45.1 SUSE OpenStack Cloud 8:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud 8:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud 8:tiff-4.0.9-44.45.1 SUSE OpenStack Cloud 9:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud 9:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud 9:tiff-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 8:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 8:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 8:tiff-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 9:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 9:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 9:tiff-4.0.9-44.45.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220496-1/ https://www.suse.com/security/cve/CVE-2020-35524.html CVE-2020-35524 https://bugzilla.suse.com/1182812 SUSE Bug 1182812 https://bugzilla.suse.com/1200195 SUSE Bug 1200195 LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field. CVE-2022-22844 HPE Helion OpenStack 8:libtiff5-32bit-4.0.9-44.45.1 HPE Helion OpenStack 8:libtiff5-4.0.9-44.45.1 HPE Helion OpenStack 8:tiff-4.0.9-44.45.1 Image SLES12-SP4-SAP-Azure-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.45.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.45.1 Image SLES12-SP4-SAP-EC2-HVM:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-Azure-SAP-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-Azure-SAP-On-Demand:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-EC2-SAP-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-EC2-SAP-On-Demand:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-GCE-SAP-BYOS:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-GCE-SAP-On-Demand:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.45.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP2-BCL:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP2-BCL:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP2-BCL:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-BCL:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-BCL:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-BCL:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP3-LTSS:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.45.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.45.1 SUSE OpenStack Cloud 8:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud 8:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud 8:tiff-4.0.9-44.45.1 SUSE OpenStack Cloud 9:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud 9:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud 9:tiff-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 8:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 8:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 8:tiff-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 9:libtiff5-32bit-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 9:libtiff5-4.0.9-44.45.1 SUSE OpenStack Cloud Crowbar 9:tiff-4.0.9-44.45.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220496-1/ https://www.suse.com/security/cve/CVE-2022-22844.html CVE-2022-22844 https://bugzilla.suse.com/1194539 SUSE Bug 1194539