shield Security update for tiff

SUSE-SLE-SERVER-12-SP4-2018-2782

This update for tiff fixes the following issues: Security issues fixed: - CVE-2018-12900: Fixed heap-based buffer overflow in the cpSeparateBufToContigBuf (bsc#1099257). - CVE-2018-18661: Fixed NULL pointer dereference in the function LZWDecode in the file tif_lzw.c (bsc#1113672). - CVE-2018-18557: Fixed JBIG decode can lead to out-of-bounds write (bsc#1113094). Non-security issues fixed: - asan_build: build ASAN included - debug_build: build more suitable for debugging

• Release Date
  Dec 6 2018
• References
  Bugzilla: 1099257, 1113672, 1113094
  CVEs: CVE-2018-18661, CVE-2018-18557, CVE-2018-12900
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.4 aarch64

• Packages
  libtiff5
  The Tiff Library (with JPEG and compression support)

  4.0.9-44.27.1 lock rpm

  tiff
  Tools for Converting from and to the Tagged Image File Format

  4.0.9-44.27.1 lock rpm lock src

SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le

• Packages
  libtiff5
  The Tiff Library (with JPEG and compression support)

  4.0.9-44.27.1 lock rpm

  tiff
  Tools for Converting from and to the Tagged Image File Format

  4.0.9-44.27.1 lock rpm lock src

SUSE Linux Enterprise Server 12.4 s390x

• Packages
  libtiff5
  The Tiff Library (with JPEG and compression support)

  4.0.9-44.27.1 lock rpm

  libtiff5-32bit
  The Tiff Library (with JPEG and compression support)

  4.0.9-44.27.1 lock rpm

  tiff
  Tools for Converting from and to the Tagged Image File Format

  4.0.9-44.27.1 lock rpm lock src

SUSE Linux Enterprise Server 12.4 x86_64

• Packages
  libtiff5
  The Tiff Library (with JPEG and compression support)

  4.0.9-44.27.1 lock rpm

  libtiff5-32bit
  The Tiff Library (with JPEG and compression support)

  4.0.9-44.27.1 lock rpm

  tiff
  Tools for Converting from and to the Tagged Image File Format

  4.0.9-44.27.1 lock rpm lock src