shield Security update for tiff

SUSE-SLE-SDK-12-SP1-2016-1330

This update for tiff fixes the following issues: * CVE-2015-8781, CVE-2015-8782, CVE-2015-8783: Out-of-bounds writes for invalid images (bsc#964225) * CVE-2016-3186: Buffer overflow in gif2tiff (bnc#973340). * CVE-2016-5875: heap-based buffer overflow when using the PixarLog compressionformat (bsc#987351) * CVE-2016-5316: Out-of-bounds read in PixarLogCleanup() function in tif_pixarlog.c (bsc#984837) * CVE-2016-5314: Out-of-bounds write in PixarLogDecode() function (bsc#984831) * CVE-2016-5317: Out-of-bounds write in PixarLogDecode() function in libtiff.so (bsc#984842) * CVE-2016-5320: Out-of-bounds write in PixarLogDecode() function in tif_pixarlog.c (bsc#984808)

• Release Date
  Sep 9 2016
• References
  Bugzilla: 973340, 987351, 984842, 984808, 964225, 984837, 984831
  CVEs: CVE-2016-5875, CVE-2016-5317, CVE-2016-5320, CVE-2016-5316, CVE-2016-3186, CVE-2016-5314, CVE-2015-8782, CVE-2015-8783, CVE-2015-8781
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.1 ppc64le

• Packages
  libtiff-devel
  Development Tools for Programs which will use the libtiff Library

  4.0.6-26.3 lock rpm

  tiff
  Tools for Converting from and to the Tiff Format

  4.0.6-26.3 lock src

SUSE Linux Enterprise Software Development Kit 12.1 s390x

• Packages
  libtiff-devel
  Development Tools for Programs which will use the libtiff Library

  4.0.6-26.3 lock rpm

  tiff
  Tools for Converting from and to the Tiff Format

  4.0.6-26.3 lock src

SUSE Linux Enterprise Software Development Kit 12.1 x86_64

• Packages
  libtiff-devel
  Development Tools for Programs which will use the libtiff Library

  4.0.6-26.3 lock rpm

  tiff
  Tools for Converting from and to the Tiff Format

  4.0.6-26.3 lock src