A libtiff security update has been released for Oracle Linux 8.

El-errata: ELSA-2023-0095 Moderate: Oracle Linux 8 libtiff security update

Oracle Linux Security Advisory ELSA-2023-0095

  http://linux.oracle.com/errata/ELSA-2023-0095.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
libtiff-4.0.9-26.el8_7.i686.rpm
libtiff-4.0.9-26.el8_7.x86_64.rpm
libtiff-devel-4.0.9-26.el8_7.i686.rpm
libtiff-devel-4.0.9-26.el8_7.x86_64.rpm
libtiff-tools-4.0.9-26.el8_7.x86_64.rpm

aarch64:
libtiff-4.0.9-26.el8_7.aarch64.rpm
libtiff-devel-4.0.9-26.el8_7.aarch64.rpm
libtiff-tools-4.0.9-26.el8_7.aarch64.rpm

SRPMS:
  http://oss.oracle.com/ol8/SRPMS-updates/libtiff-4.0.9-26.el8_7.src.rpm

Related CVEs:

CVE-2022-2056
CVE-2022-2057
CVE-2022-2058
CVE-2022-2519
CVE-2022-2520
CVE-2022-2521
CVE-2022-2867
CVE-2022-2868
CVE-2022-2869
CVE-2022-2953



Description of changes:

[4.0.9-26]
- Fix various CVEs
- Resolves: CVE-2022-2519 CVE-2022-2520 CVE-2022-2521 CVE-2022-2953

[4.0.9-25]
- Fix CVE-2022-2867 (#2118857)
- Fix CVE-2022-2868 (#2118882)
- Fix CVE-2022-2869 (#2118878)

[4.0.9-24]
- Fix CVE-2022-2056 CVE-2022-2057 CVE-2022-2058
- Resolves: #2103222

_______________________________________________