shield Security update for tiff

SUSE-SLE-Module-Desktop-Applications-15-2018-2864

This update for tiff fixes the following issues: Security issues fixed: - CVE-2018-19210: Fixed NULL pointer dereference in the TIFFWriteDirectorySec function (bsc#1115717). - CVE-2017-12944: Fixed denial of service issue in the TIFFReadDirEntryArray function (bsc#1054594). - CVE-2016-10094: Fixed heap-based buffer overflow in the _tiffWriteProc function (bsc#1017693). - CVE-2016-10093: Fixed heap-based buffer overflow in the _TIFFmemcpy function (bsc#1017693). - CVE-2016-10092: Fixed heap-based buffer overflow in the TIFFReverseBits function (bsc#1017693). - CVE-2016-6223: Fixed out-of-bounds read on memory-mapped files in TIFFReadRawStrip1() and TIFFReadRawTile1() (bsc#990460).

• Release Date
  Dec 7 2018
• References
  Bugzilla: 1115717, 990460, 1017693, 1054594
  CVEs: CVE-2018-19210, CVE-2016-6223, CVE-2016-10094, CVE-2017-12944, CVE-2016-10092, CVE-2016-10093
• Type
  security
• Severity
  moderate

cloud_download Downloads

Desktop Applications Module 15 x86_64

• Packages
  libtiff5-32bit
  The Tiff Library (with JPEG and compression support)

  4.0.9-5.20.1 lock rpm

  tiff
  Tools for Converting from and to the Tagged Image File Format

  4.0.9-5.20.1 lock src