tocsin

Alpine/tiff: medium 6.5

LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6860, allowing attackers to cause a denial-of-service via a cra

Action: Upgrade tiff to 4.5.0-r0 or later.

Affected

introducedfixedlast affected
04.5.0-r0-

Fixed versions

4.5.0-r0

Sources

published · modified · JSON