Linux · Security advisory · January 23, 2023

RHSA-2023:0302: Security update for 3 packages

RHSA-2023:0302, released January 23, 2023, fixes 7 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
7
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0133
71st percentile

Priority of the 7 CVEs

Patch now 0 Urgent 0 High 0 Routine 7

Fixed package versions

ProductReleaseFixed in
libtiffRHEL 90:4.4.0-5.el9_1
libtiff-develRHEL 90:4.4.0-5.el9_1
libtiff-toolsRHEL 90:4.4.0-5.el9_1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Routine CVE-2022-2519 libtiff: The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security... 6.5 0.0133 None reported
Routine CVE-2022-2521 libtiff: The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security... 6.5 0.0133 None reported
Routine CVE-2022-2058 libtiff: The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security... 6.5 0.0132 None reported
Routine CVE-2022-2056 libtiff: The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security... 6.5 0.0127 None reported
Routine CVE-2022-2057 libtiff: The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security... 6.5 0.0127 None reported
Routine CVE-2022-2520 libtiff: The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security... 6.5 0.0127 None reported
Routine CVE-2022-2953 libtiff: The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security... 6.5 0.0058 None reported
Showing 1 to 7 of 7 1