Lucene search

K
suseSuseOPENSUSE-SU-2018:3948-1
HistoryNov 30, 2018 - 12:10 a.m.

Security update for tiff (moderate)

2018-11-3000:10:39
lists.opensuse.org
68

0.55 Medium

EPSS

Percentile

97.3%

This update for tiff fixes the following issues:

Security issues fixed:

  • CVE-2018-12900: Fixed heap-based buffer overflow in the
    cpSeparateBufToContigBuf (bsc#1099257).
  • CVE-2018-18661: Fixed NULL pointer dereference in the function LZWDecode
    in the file tif_lzw.c (bsc#1113672).
  • CVE-2018-18557: Fixed JBIG decode can lead to out-of-bounds write
    (bsc#1113094).

Non-security issues fixed:

  • asan_build: build ASAN included
  • debug_build: build more suitable for debugging

This update was imported from the SUSE:SLE-15:Update update project.