shield Security update for tiff

SUSE-SLE-Module-Basesystem-15-2018-2793

This update for tiff fixes the following issues: Security issues fixed: - CVE-2018-12900: Fixed heap-based buffer overflow in the cpSeparateBufToContigBuf (bsc#1099257). - CVE-2018-18661: Fixed NULL pointer dereference in the function LZWDecode in the file tif_lzw.c (bsc#1113672). - CVE-2018-18557: Fixed JBIG decode can lead to out-of-bounds write (bsc#1113094). Non-security issues fixed: - asan_build: build ASAN included - debug_build: build more suitable for debugging

• Release Date
  Nov 27 2018
• References
  Bugzilla: 1099257, 1113672, 1113094
  CVEs: CVE-2018-18661, CVE-2018-18557, CVE-2018-12900
• Type
  security
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15 aarch64

• Packages
  libtiff-devel
  Development Tools for Programs which will use the libtiff Library

  4.0.9-5.17.1 lock rpm

  libtiff5
  The Tiff Library (with JPEG and compression support)

  4.0.9-5.17.1 lock rpm

  tiff
  Tools for Converting from and to the Tagged Image File Format

  4.0.9-5.17.1 lock src

Basesystem Module 15 s390x

• Packages
  libtiff-devel
  Development Tools for Programs which will use the libtiff Library

  4.0.9-5.17.1 lock rpm

  libtiff5
  The Tiff Library (with JPEG and compression support)

  4.0.9-5.17.1 lock rpm

  tiff
  Tools for Converting from and to the Tagged Image File Format

  4.0.9-5.17.1 lock src

Basesystem Module 15 ppc64le

• Packages
  libtiff-devel
  Development Tools for Programs which will use the libtiff Library

  4.0.9-5.17.1 lock rpm

  libtiff5
  The Tiff Library (with JPEG and compression support)

  4.0.9-5.17.1 lock rpm

  tiff
  Tools for Converting from and to the Tagged Image File Format

  4.0.9-5.17.1 lock src

Basesystem Module 15 x86_64

• Packages
  libtiff-devel
  Development Tools for Programs which will use the libtiff Library

  4.0.9-5.17.1 lock rpm

  libtiff5
  The Tiff Library (with JPEG and compression support)

  4.0.9-5.17.1 lock rpm

  tiff
  Tools for Converting from and to the Tagged Image File Format

  4.0.9-5.17.1 lock src