USN-6428-1: LibTIFF vulnerability
11 October 2023
LibTIFF could be made to crash if it opened a specially crafted file.
- tiff - Tag Image File Format (TIFF) library
It was discovered that LibTIFF could be made to read out of bounds when
processing certain malformed image files with the tiffcrop utility. If a
user were tricked into opening a specially crafted image file, an attacker
could possibly use this issue to cause tiffcrop to crash, resulting in a
denial of service.
The problem can be corrected by updating your system to the following package versions:
In general, a standard system update will make all the necessary changes.