Photon OS 4.0: Libtiff PHSA-2021-4.0-0007

An update of the libtiff package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0007. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148354;...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in LibTIFF

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of LibTIFF. Vulnerability Details CVEID: CVE-2019-17546 DESCRIPTION: libtiff is vulnerable to a heap-based buffer overflow, caused by an integer overflow in the tifgetimage.c. By persuading a victim to open a...

Critical Photon OS Security Update - PHSA-2021-4.0-0007

Updates of 'python3', 'libvirt', 'curl', 'libtiff', 'linux-aws', 'containerd', 'glib', 'apache-tomcat', 'nodejs', 'docker', 'openssl', 'linux', 'wpasupplicant', 'linux-secure', 'mysql', 'linux-rt' packages of Photon OS have been released...

Photon OS 2.0: Libtiff PHSA-2021-2.0-0332

An update of the libtiff package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0332. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Out of bounds write in Pillow

An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654...

CVE-2020-35521 affecting package libtiff 4.1.0-3

CVE-2020-35521 affecting package libtiff 4.1.0-3. A patched version of the package is available...

CVE-2020-35523 affecting package libtiff 4.1.0-3

CVE-2020-35523 affecting package libtiff 4.1.0-3. A patched version of the package is available...

CVE-2020-35524 affecting package libtiff 4.1.0-3

CVE-2020-35524 affecting package libtiff 4.1.0-3. A patched version of the package is available...

CVE-2020-35522 affecting package libtiff 4.1.0-3

CVE-2020-35522 affecting package libtiff 4.1.0-3. A patched version of the package is available...

Important Photon OS Security Update - PHSA-2021-0210

Updates of 'linux-rt', 'wpasupplicant', 'containerd', 'linux-esx', 'nxtgn-openssl', 'libtiff', 'linux', 'linux- secure', 'linux-aws' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2021-3.0-0210

Updates of 'libtiff', 'wpasupplicant', 'linux-aws', 'containerd', 'linux', 'linux-secure', 'linux-esx', 'linux-rt', 'nxtgn-openssl' packages of Photon OS have been released...

Photon OS 3.0: Libtiff PHSA-2021-3.0-0210

An update of the libtiff package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0210. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148191;...

Important Photon OS Security Update - PHSA-2021-0332

Updates of 'linux-aws', 'linux-secure', 'linux-esx', 'linux', 'libtiff' packages of Photon OS have been released...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : LibTIFF vulnerabilities (USN-4755-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4755-1 advisory. It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into...

The vulnerability of the TIFF-to-PDF conversion module in TIFF2PDF, a library from LibTIFF, allows attackers to execute arbitrary code or cause service failures.

The vulnerability of the TIFF-to-PDF conversion module in the LibTIFF library is related to incorrect processing of TIFF files. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure using a specially created TIFF file...

The vulnerability of the tif_read.c file in the LibTIFF library allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the tifread.c file in the LibTIFF library is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service interruptions...

The vulnerability of the image conversion module from TIFF to RGBA format in the LibTIFF library allows a hacker to induce a service failure.

The vulnerability of the TIFF-to-RGBA tiff2rgba conversion module in the LibTIFF library is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using a specially created TI...

ALPINE-CVE-2021-25289

An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654...

PYSEC-2021-35

An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654...

PYSEC-2021-35

An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654...