Lucene search

K
suseSuseOPENSUSE-SU-2018:0097-1
HistoryJan 15, 2018 - 3:15 p.m.

Security update for tiff (important)

2018-01-1515:15:26
lists.opensuse.org
30

0.049 Low

EPSS

Percentile

92.0%

This update for tiff to version 4.0.9 fixes the following issues:

Security issues fixed:

  • CVE-2014-8128: Fix out-of-bounds read with malformed TIFF image in
    multiple tools (bsc#969783).
  • CVE-2015-7554: Fix invalid write in tiffsplit / _TIFFVGetField
    (bsc#960341).
  • CVE-2016-10095: Fix stack-based buffer overflow in _TIFFVGetField
    (tif_dir.c) (bsc#1017690).
  • CVE-2016-5318: Fix stackoverflow in thumbnail (bsc#983436).
  • CVE-2017-16232: Fix memory-based DoS in tiff2bw (bsc#1069213).

This update was imported from the SUSE:SLE-12:Update update project.