Lucene search

K
suseSuseOPENSUSE-SU-2018:4256-1
HistoryDec 23, 2018 - 12:10 a.m.

Security update for tiff (moderate)

2018-12-2300:10:13
lists.opensuse.org
102

0.019 Low

EPSS

Percentile

87.0%

This update for tiff fixes the following issues:

Security issues fixed:

  • CVE-2018-19210: Fixed NULL pointer dereference in the
    TIFFWriteDirectorySec function (bsc#1115717).
  • CVE-2017-12944: Fixed denial of service issue in the
    TIFFReadDirEntryArray function (bsc#1054594).
  • CVE-2016-10094: Fixed heap-based buffer overflow in the _tiffWriteProc
    function (bsc#1017693).
  • CVE-2016-10093: Fixed heap-based buffer overflow in the _TIFFmemcpy
    function (bsc#1017693).
  • CVE-2016-10092: Fixed heap-based buffer overflow in the TIFFReverseBits
    function (bsc#1017693).
  • CVE-2016-6223: Fixed out-of-bounds read on memory-mapped files in
    TIFFReadRawStrip1() and TIFFReadRawTile1() (bsc#990460).

This update was imported from the SUSE:SLE-12:Update update project.