Linux · Security advisory · June 21, 2023

ALSA-2023:3711: Security update for 3 packages

ALSA-2023:3711, released June 21, 2023, fixes 11 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0046

39th percentile

Priority of the 11 CVEs

Patch now 0
                                Urgent 0
                                High 0
                                Routine 11

Fixed package versions

Product	Release	Fixed in
libtiff	almalinux 9	4.4.0-8.el9_2
libtiff-devel	almalinux 9	4.4.0-8.el9_2
libtiff-tools	almalinux 9	4.4.0-8.el9_2

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Routine	CVE-2022-48281	libtiff: The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security...	6.1	0.0046	None reported
Routine	CVE-2023-0800	libtiff: The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security...	6.1	0.0043	None reported
Routine	CVE-2023-0801	libtiff-devel: The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security...	6.1	0.0043	None reported
Routine	CVE-2023-0802	libtiff: The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security...	6.1	0.0043	None reported
Routine	CVE-2023-0803	libtiff: The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security...	6.1	0.0043	None reported
Routine	CVE-2023-0804	libtiff: The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security...	6.1	0.0043	None reported
Routine	CVE-2023-0799	libtiff: The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security...	6.1	0.0043	None reported
Routine	CVE-2023-0795	libtiff: The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security...	6.1	0.0042	None reported
Routine	CVE-2023-0796	libtiff: The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security...	6.1	0.0042	None reported
Routine	CVE-2023-0797	libtiff: The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security...	6.1	0.0042	None reported
Routine	CVE-2023-0798	libtiff: The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security...	6.1	0.0042	None reported

Also fixes CVE-2022-48281

ALAS2023-2024-634
libtiff, libtiff-debuginfo, libtiff-debugsource and 4 more on amzn 2023
libtiff-opengl 4.1.0+git191117-2ubuntu0.20.04.9
libtiff-opengl on Ubuntu 20.04 LTS (focal)
libtiff-opengl 4.3.0-6ubuntu0.5
libtiff-opengl on Ubuntu 22.04.1 LTS (jammy)
libtiff-tools 4.1.0+git191117-2ubuntu0.20.04.9
libtiff-tools on Ubuntu 20.04 LTS (focal)
libtiff-tools 4.3.0-6ubuntu0.5
libtiff-tools on Ubuntu 22.04.1 LTS (jammy)
libtiff5 4.1.0+git191117-2ubuntu0.20.04.9
libtiff5 on Ubuntu 20.04 LTS (focal)
libtiff5 4.3.0-6ubuntu0.5
libtiff5 on Ubuntu 22.04.1 LTS (jammy)
libtiffxx5 4.1.0+git191117-2ubuntu0.20.04.9
libtiffxx5 on Ubuntu 20.04 LTS (focal)

Vendor advisory

https://osv.dev/vulnerability/ALSA-2023:3711

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo