gpp_maybe Security update for tiff

SUSE-SLE-SERVER-12-SP2-2018-59

This update for tiff to version 4.0.9 fixes the following issues: Security issues fixed: - CVE-2014-8128: Fix out-of-bounds read with malformed TIFF image in multiple tools (bsc#969783). - CVE-2015-7554: Fix invalid write in tiffsplit / _TIFFVGetField (bsc#960341). - CVE-2016-10095: Fix stack-based buffer overflow in _TIFFVGetField (tif_dir.c) (bsc#1017690). - CVE-2016-5318: Fix stackoverflow in thumbnail (bsc#983436). - CVE-2017-16232: Fix memory-based DoS in tiff2bw (bsc#1069213).

• Release Date
  Jan 12 2018
• References
  Bugzilla: 960341, 1069213, 983436, 969783, 1017690
  CVEs: CVE-2014-8128, CVE-2016-10095, CVE-2017-16232, CVE-2016-5318, CVE-2015-7554
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le

• Packages
  libtiff5
  The Tiff Library (with JPEG and compression support)

  4.0.9-44.7.1 lock rpm

  tiff
  Tools for Converting from and to the Tagged Image File Format

  4.0.9-44.7.1 lock rpm lock src

SUSE Linux Enterprise Server 12.2 aarch64

• Packages
  libtiff5
  The Tiff Library (with JPEG and compression support)

  4.0.9-44.7.1 lock rpm

  tiff
  Tools for Converting from and to the Tagged Image File Format

  4.0.9-44.7.1 lock rpm lock src

SUSE Linux Enterprise Server 12.2 s390x

• Packages
  libtiff5
  The Tiff Library (with JPEG and compression support)

  4.0.9-44.7.1 lock rpm

  libtiff5-32bit
  The Tiff Library (with JPEG and compression support)

  4.0.9-44.7.1 lock rpm

  tiff
  Tools for Converting from and to the Tagged Image File Format

  4.0.9-44.7.1 lock rpm lock src

SUSE Linux Enterprise Server 12.2 x86_64

• Packages
  libtiff5
  The Tiff Library (with JPEG and compression support)

  4.0.9-44.7.1 lock rpm

  libtiff5-32bit
  The Tiff Library (with JPEG and compression support)

  4.0.9-44.7.1 lock rpm

  tiff
  Tools for Converting from and to the Tagged Image File Format

  4.0.9-44.7.1 lock rpm lock src