Security update for tiff SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:1667-1 Final 1 1 2022-05-16T08:03:21Z current 2022-05-16T08:03:21Z 2022-05-16T08:03:21Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for tiff This update for tiff fixes the following issues: - CVE-2022-0561: Fixed null source pointer passed as an argument to memcpy() within TIFFFetchStripThing() in tif_dirread.c (bsc#1195964). - CVE-2022-0562: Fixed null source pointer passed as an argument to memcpy() within TIFFReadDirectory() in tif_dirread.c (bsc#1195965). - CVE-2022-0865: Fixed assertion failure in TIFFReadAndRealloc (bsc#1197066). - CVE-2022-0909: Fixed divide by zero error in tiffcrop that could have led to a denial-of-service via a crafted tiff file (bsc#1197072). - CVE-2022-0924: Fixed out-of-bounds read error in tiffcp that could have led to a denial-of-service via a crafted tiff file (bsc#1197073). - CVE-2022-0908: Fixed null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() (bsc#1197074). - CVE-2022-1056: Fixed out-of-bounds read error in tiffcrop that could have led to a denial-of-service via a crafted tiff file (bsc#1197631). - CVE-2022-0891: Fixed heap buffer overflow in extractImageSection (bsc#1197068). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP4-SAP-Azure-LI-BYOS-Production-2022-1667,Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production-2022-1667,Image SLES12-SP5-Azure-SAP-BYOS-2022-1667,Image SLES12-SP5-Azure-SAP-On-Demand-2022-1667,Image SLES12-SP5-EC2-SAP-BYOS-2022-1667,Image SLES12-SP5-EC2-SAP-On-Demand-2022-1667,Image SLES12-SP5-GCE-SAP-BYOS-2022-1667,Image SLES12-SP5-GCE-SAP-On-Demand-2022-1667,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2022-1667,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2022-1667,SUSE-2022-1667,SUSE-SLE-SDK-12-SP5-2022-1667,SUSE-SLE-SERVER-12-SP5-2022-1667 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20221667-1/ Link for SUSE-SU-2022:1667-1 https://lists.suse.com/pipermail/sle-security-updates/2022-May/011027.html E-Mail link for SUSE-SU-2022:1667-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1195964 SUSE Bug 1195964 https://bugzilla.suse.com/1195965 SUSE Bug 1195965 https://bugzilla.suse.com/1197066 SUSE Bug 1197066 https://bugzilla.suse.com/1197068 SUSE Bug 1197068 https://bugzilla.suse.com/1197072 SUSE Bug 1197072 https://bugzilla.suse.com/1197073 SUSE Bug 1197073 https://bugzilla.suse.com/1197074 SUSE Bug 1197074 https://bugzilla.suse.com/1197631 SUSE Bug 1197631 https://www.suse.com/security/cve/CVE-2022-0561/ SUSE CVE CVE-2022-0561 page https://www.suse.com/security/cve/CVE-2022-0562/ SUSE CVE CVE-2022-0562 page https://www.suse.com/security/cve/CVE-2022-0865/ SUSE CVE CVE-2022-0865 page https://www.suse.com/security/cve/CVE-2022-0891/ SUSE CVE CVE-2022-0891 page https://www.suse.com/security/cve/CVE-2022-0908/ SUSE CVE CVE-2022-0908 page https://www.suse.com/security/cve/CVE-2022-0909/ SUSE CVE CVE-2022-0909 page https://www.suse.com/security/cve/CVE-2022-0924/ SUSE CVE CVE-2022-0924 page https://www.suse.com/security/cve/CVE-2022-1056/ SUSE CVE CVE-2022-1056 page Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 libtiff5-4.0.9-44.48.1 libtiff-devel-4.0.9-44.48.1 libtiff-devel-32bit-4.0.9-44.48.1 libtiff-devel-64bit-4.0.9-44.48.1 libtiff5-32bit-4.0.9-44.48.1 libtiff5-64bit-4.0.9-44.48.1 tiff-4.0.9-44.48.1 libtiff5-4.0.9-44.48.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production libtiff5-4.0.9-44.48.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production libtiff5-4.0.9-44.48.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS libtiff5-4.0.9-44.48.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand libtiff5-4.0.9-44.48.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS libtiff5-4.0.9-44.48.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand libtiff5-4.0.9-44.48.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS libtiff5-4.0.9-44.48.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand libtiff5-4.0.9-44.48.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production libtiff5-4.0.9-44.48.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libtiff5-4.0.9-44.48.1 as a component of SUSE Linux Enterprise Server 12 SP5 libtiff5-32bit-4.0.9-44.48.1 as a component of SUSE Linux Enterprise Server 12 SP5 tiff-4.0.9-44.48.1 as a component of SUSE Linux Enterprise Server 12 SP5 libtiff5-4.0.9-44.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libtiff5-32bit-4.0.9-44.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 tiff-4.0.9-44.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libtiff-devel-4.0.9-44.48.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, the fix is available with commit eecb0712. CVE-2022-0561 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.48.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-Azure-SAP-BYOS:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-Azure-SAP-On-Demand:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-EC2-SAP-BYOS:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-EC2-SAP-On-Demand:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-GCE-SAP-BYOS:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-GCE-SAP-On-Demand:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.48.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.48.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.48.1 SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.48.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.48.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.48.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.48.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.48.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221667-1/ https://www.suse.com/security/cve/CVE-2022-0561.html CVE-2022-0561 https://bugzilla.suse.com/1195964 SUSE Bug 1195964 Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, a fix is available with commit 561599c. CVE-2022-0562 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.48.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-Azure-SAP-BYOS:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-Azure-SAP-On-Demand:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-EC2-SAP-BYOS:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-EC2-SAP-On-Demand:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-GCE-SAP-BYOS:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-GCE-SAP-On-Demand:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.48.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.48.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.48.1 SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.48.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.48.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.48.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.48.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.48.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221667-1/ https://www.suse.com/security/cve/CVE-2022-0562.html CVE-2022-0562 https://bugzilla.suse.com/1195965 SUSE Bug 1195965 https://bugzilla.suse.com/1201723 SUSE Bug 1201723 Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 5e180045. CVE-2022-0865 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.48.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-Azure-SAP-BYOS:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-Azure-SAP-On-Demand:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-EC2-SAP-BYOS:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-EC2-SAP-On-Demand:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-GCE-SAP-BYOS:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-GCE-SAP-On-Demand:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.48.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.48.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.48.1 SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.48.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.48.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.48.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.48.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.48.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221667-1/ https://www.suse.com/security/cve/CVE-2022-0865.html CVE-2022-0865 https://bugzilla.suse.com/1197066 SUSE Bug 1197066 A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact CVE-2022-0891 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.48.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-Azure-SAP-BYOS:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-Azure-SAP-On-Demand:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-EC2-SAP-BYOS:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-EC2-SAP-On-Demand:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-GCE-SAP-BYOS:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-GCE-SAP-On-Demand:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.48.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.48.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.48.1 SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.48.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.48.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.48.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.48.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.48.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221667-1/ https://www.suse.com/security/cve/CVE-2022-0891.html CVE-2022-0891 https://bugzilla.suse.com/1197068 SUSE Bug 1197068 Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via crafted TIFF file. CVE-2022-0908 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.48.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-Azure-SAP-BYOS:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-Azure-SAP-On-Demand:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-EC2-SAP-BYOS:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-EC2-SAP-On-Demand:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-GCE-SAP-BYOS:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-GCE-SAP-On-Demand:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.48.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.48.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.48.1 SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.48.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.48.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.48.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.48.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.48.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221667-1/ https://www.suse.com/security/cve/CVE-2022-0908.html CVE-2022-0908 https://bugzilla.suse.com/1197074 SUSE Bug 1197074 Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f8d0f9aa. CVE-2022-0909 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.48.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-Azure-SAP-BYOS:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-Azure-SAP-On-Demand:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-EC2-SAP-BYOS:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-EC2-SAP-On-Demand:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-GCE-SAP-BYOS:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-GCE-SAP-On-Demand:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.48.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.48.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.48.1 SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.48.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.48.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.48.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.48.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.48.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221667-1/ https://www.suse.com/security/cve/CVE-2022-0909.html CVE-2022-0909 https://bugzilla.suse.com/1197072 SUSE Bug 1197072 Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 408976c4. CVE-2022-0924 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.48.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-Azure-SAP-BYOS:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-Azure-SAP-On-Demand:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-EC2-SAP-BYOS:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-EC2-SAP-On-Demand:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-GCE-SAP-BYOS:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-GCE-SAP-On-Demand:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.48.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.48.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.48.1 SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.48.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.48.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.48.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.48.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.48.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221667-1/ https://www.suse.com/security/cve/CVE-2022-0924.html CVE-2022-0924 https://bugzilla.suse.com/1197073 SUSE Bug 1197073 Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd. CVE-2022-1056 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.48.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-Azure-SAP-BYOS:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-Azure-SAP-On-Demand:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-EC2-SAP-BYOS:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-EC2-SAP-On-Demand:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-GCE-SAP-BYOS:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-GCE-SAP-On-Demand:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.48.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.48.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.48.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.48.1 SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.48.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.48.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.48.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.48.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.48.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221667-1/ https://www.suse.com/security/cve/CVE-2022-1056.html CVE-2022-1056 https://bugzilla.suse.com/1197631 SUSE Bug 1197631