Oval Definition:oval:org.opensuse.security:def:85052
Revision Date:2018-12-19Version:1
Title:Security update for tiff (Moderate)
Description:

This update for tiff fixes the following issues:

Security issues fixed: - CVE-2018-19210: Fixed NULL pointer dereference in the TIFFWriteDirectorySec function (bsc#1115717). - CVE-2017-12944: Fixed denial of service issue in the TIFFReadDirEntryArray function (bsc#1054594). - CVE-2016-10094: Fixed heap-based buffer overflow in the _tiffWriteProc function (bsc#1017693). - CVE-2016-10093: Fixed heap-based buffer overflow in the _TIFFmemcpy function (bsc#1017693). - CVE-2016-10092: Fixed heap-based buffer overflow in the TIFFReverseBits function (bsc#1017693). - CVE-2016-6223: Fixed out-of-bounds read on memory-mapped files in TIFFReadRawStrip1() and TIFFReadRawTile1() (bsc#990460).
Family:unixClass:patch
Status:Reference(s):1017693
1054594
1115717
990460
CVE-2016-10092
CVE-2016-10093
CVE-2016-10094
CVE-2016-6223
CVE-2017-12944
CVE-2018-19210
SUSE-SU-2018:4191-1
Platform(s):SUSE Linux Enterprise Server 12 SP3
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • libtiff5-4.0.9-44.30.1 is installed
  • OR libtiff5-32bit-4.0.9-44.30.1 is installed
  • OR tiff-4.0.9-44.30.1 is installed
  • BACK