libtiff: The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security...
CVE-2023-0804 is fixed in 12 products on 1 platform, first by DEBIAN-CVE-2023-0804, released February 13, 2023. It is not reported as exploited. Patch Radar priority: Routine.
The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0800) * libtiff: out-of-bounds write in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0801) * libtiff: out-of-bounds write in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0802) * libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0803) * libtiff: out-of-bounds write in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0804) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libtiff · RHEL 8 | 0:4.0.9-29.el8_8 | RHSA-2023:5353 | Sep 26, 2023 |
| libtiff · RHEL 9 | 0:4.4.0-8.el9_2 | RHSA-2023:3711 | Jun 21, 2023 |
| libtiff · almalinux 8 | 4.0.9-29.el8_8 | ALSA-2023:5353 | Sep 26, 2023 |
| libtiff · almalinux 9 | 4.4.0-8.el9_2 | ALSA-2023:3711 | Jun 21, 2023 |
| libtiff · amzn 2023 | 4.4.0-4.amzn2023.0.5 | ALAS2023-2023-230 | Jun 21, 2023 |
| libtiff · ol 8 | 0:4.0.9-29.el8_8 | ELSA-2023-5353 | Sep 26, 2023 |
| libtiff · ol 9 | 0:4.4.0-8.el9_2 | ELSA-2023-3711 | Jun 21, 2023 |
| libtiff · rocky 8 | 0:4.0.9-29.el8_8 | RLSA-2023:5353 | Oct 5, 2023 |
| libtiff · rocky 9 | 0:4.4.0-8.el9_2 | RLSA-2023:3711 | Aug 31, 2023 |
| libtiff-debuginfo · amzn 2023 | 4.4.0-4.amzn2023.0.5 | ALAS2023-2023-230 | Jun 21, 2023 |
| libtiff-debugsource · amzn 2023 | 4.4.0-4.amzn2023.0.5 | ALAS2023-2023-230 | Jun 21, 2023 |
| libtiff-devel · RHEL 8 | 0:4.0.9-29.el8_8 | RHSA-2023:5353 | Sep 26, 2023 |
| libtiff-devel · RHEL 9 | 0:4.4.0-8.el9_2 | RHSA-2023:3711 | Jun 21, 2023 |
| libtiff-devel · almalinux 8 | 4.0.9-29.el8_8 | ALSA-2023:5353 | Sep 26, 2023 |
| libtiff-devel · almalinux 9 | 4.4.0-8.el9_2 | ALSA-2023:3711 | Jun 21, 2023 |
| libtiff-devel · amzn 2023 | 4.4.0-4.amzn2023.0.5 | ALAS2023-2023-230 | Jun 21, 2023 |
| libtiff-devel · ol 8 | 0:4.0.9-29.el8_8 | ELSA-2023-5353 | Sep 26, 2023 |
| libtiff-devel · ol 9 | 0:4.4.0-8.el9_2 | ELSA-2023-3711 | Jun 21, 2023 |
| libtiff-opengl · Ubuntu 18.04.6 LTS (bionic) | 4.0.9-5ubuntu0.10 | libtiff-opengl 4.0.9-5ubuntu0.10 | Jun 21, 2023 |
| libtiff-opengl · Ubuntu 20.04 LTS (focal) | 4.1.0+git191117-2ubuntu0.20.04.8 | libtiff-opengl 4.1.0+git191117-2ubuntu0.20.04.8 | Jun 21, 2023 |
| libtiff-opengl · Ubuntu 22.04.1 LTS (jammy) | 4.3.0-6ubuntu0.4 | libtiff-opengl 4.3.0-6ubuntu0.4 | Jun 21, 2023 |
| libtiff-static · amzn 2023 | 4.4.0-4.amzn2023.0.5 | ALAS2023-2023-230 | Jun 21, 2023 |
| libtiff-tools · RHEL 8 | 0:4.0.9-29.el8_8 | RHSA-2023:5353 | Sep 26, 2023 |
| libtiff-tools · RHEL 9 | 0:4.4.0-8.el9_2 | RHSA-2023:3711 | Jun 21, 2023 |
| libtiff-tools · Ubuntu 18.04.6 LTS (bionic) | 4.0.9-5ubuntu0.10 | libtiff-tools 4.0.9-5ubuntu0.10 | Jun 21, 2023 |
| libtiff-tools · Ubuntu 20.04 LTS (focal) | 4.1.0+git191117-2ubuntu0.20.04.8 | libtiff-tools 4.1.0+git191117-2ubuntu0.20.04.8 | Jun 21, 2023 |
| libtiff-tools · Ubuntu 22.04.1 LTS (jammy) | 4.3.0-6ubuntu0.4 | libtiff-tools 4.3.0-6ubuntu0.4 | Jun 21, 2023 |
| libtiff-tools · almalinux 8 | 4.0.9-29.el8_8 | ALSA-2023:5353 | Sep 26, 2023 |
| libtiff-tools · almalinux 9 | 4.4.0-8.el9_2 | ALSA-2023:3711 | Jun 21, 2023 |
| libtiff-tools · amzn 2023 | 4.4.0-4.amzn2023.0.5 | ALAS2023-2023-230 | Jun 21, 2023 |
| libtiff-tools · ol 8 | 0:4.0.9-29.el8_8 | ELSA-2023-5353 | Sep 26, 2023 |
| libtiff-tools · ol 9 | 0:4.4.0-8.el9_2 | ELSA-2023-3711 | Jun 21, 2023 |
| libtiff-tools-debuginfo · amzn 2023 | 4.4.0-4.amzn2023.0.5 | ALAS2023-2023-230 | Jun 21, 2023 |
| libtiff5 · Ubuntu 18.04.6 LTS (bionic) | 4.0.9-5ubuntu0.10 | libtiff5 4.0.9-5ubuntu0.10 | Jun 21, 2023 |
| libtiff5 · Ubuntu 20.04 LTS (focal) | 4.1.0+git191117-2ubuntu0.20.04.8 | libtiff5 4.1.0+git191117-2ubuntu0.20.04.8 | Jun 21, 2023 |
| libtiff5 · Ubuntu 22.04.1 LTS (jammy) | 4.3.0-6ubuntu0.4 | libtiff5 4.3.0-6ubuntu0.4 | Jun 21, 2023 |
| libtiffxx5 · Ubuntu 18.04.6 LTS (bionic) | 4.0.9-5ubuntu0.10 | libtiffxx5 4.0.9-5ubuntu0.10 | Jun 21, 2023 |
| libtiffxx5 · Ubuntu 20.04 LTS (focal) | 4.1.0+git191117-2ubuntu0.20.04.8 | libtiffxx5 4.1.0+git191117-2ubuntu0.20.04.8 | Jun 21, 2023 |
| libtiffxx5 · Ubuntu 22.04.1 LTS (jammy) | 4.3.0-6ubuntu0.4 | libtiffxx5 4.3.0-6ubuntu0.4 | Jun 21, 2023 |
| tiff · Debian 12.15 (bookworm) | 4.5.0-5 | DEBIAN-CVE-2023-0804 | Feb 13, 2023 |
| tiff · Debian 13.5 (trixie) | 4.5.0-5 | DEBIAN-CVE-2023-0804 | Feb 13, 2023 |
| tiff · Debian 14 | 4.5.0-5 | DEBIAN-CVE-2023-0804 | Feb 13, 2023 |
| tiff · opensuse-leap 16.0 | 4.7.1-160000.2.1 | OPENSUSE-SU-2026:20995-1 | Jun 21, 2026 |
| tiff · sles 16.0 | 4.7.1-160000.2.1 | SUSE-SU-2026:22306-1 | Jun 21, 2026 |
| tiff-man · opensuse-leap 16.0 | 4.7.1-160000.2.1 | OPENSUSE-SU-2026:20995-1 | Jun 21, 2026 |