Headline
Ubuntu Security Notice USN-6997-2
Ubuntu Security Notice 6997-2 - USN-6997-1 fixed a vulnerability in LibTIFF. This update provides the corresponding updates for Ubuntu 14.04 LTS. It was discovered that LibTIFF incorrectly handled memory. An attacker could possibly use this issue to cause the application to crash, resulting in a denial of service.
==========================================================================Ubuntu Security Notice USN-6997-2September 11, 2024tiff vulnerability==========================================================================A security issue affects these releases of Ubuntu and its derivatives:- Ubuntu 14.04 LTSSummary:LibTIFF could be made to crash if it received specially crafted input.Software Description:- tiff: Tag Image File Format (TIFF) libraryDetails:USN-6997-1 fixed a vulnerability in LibTIFF. This updateprovides the corresponding updates for Ubuntu 14.04 LTS.Original advisory details: It was discovered that LibTIFF incorrectly handled memory. An attacker could possibly use this issue to cause the application to crash, resulting in a denial of service.Update instructions:The problem can be corrected by updating your system to the followingpackage versions:Ubuntu 14.04 LTS libtiff-opengl 4.0.3-7ubuntu0.11+esm14 Available with Ubuntu Pro libtiff-tools 4.0.3-7ubuntu0.11+esm14 Available with Ubuntu Pro libtiff5 4.0.3-7ubuntu0.11+esm14 Available with Ubuntu Pro libtiffxx5 4.0.3-7ubuntu0.11+esm14 Available with Ubuntu ProIn general, a standard system update will make all the necessary changes.References: https://ubuntu.com/security/notices/USN-6997-2 https://ubuntu.com/security/notices/USN-6997-1 CVE-2024-7006Related news
Red Hat Security Advisory 2024-8914-03 - An update for libtiff is now available for Red Hat Enterprise Linux 9. Issues addressed include a null pointer vulnerability.
Ubuntu Security Notice 6997-1 - It was discovered that LibTIFF incorrectly handled memory. An attacker could possibly use this issue to cause the application to crash, resulting in a denial of service.
Red Hat Security Advisory 2024-6360-03 - An update for libtiff is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Issues addressed include a null pointer vulnerability.