crítica
openSUSE-SU-2018:0097-1
Security update for tiff
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for tiff to version 4.0.9 fixes the following issues: Security issues fixed: - CVE-2014-8128: Fix out-of-bounds read with malformed TIFF image in multiple tools (bsc#969783). - CVE-2015-7554: Fix invalid write in tiffsplit / _TIFFVGetField (bsc#960341). - CVE-2016-10095: Fix stack-based buffer overflow in _TIFFVGetField (tif_dir.c) (bsc#1017690). - CVE-2016-5318: Fix stackoverflow in thumbnail (bsc#983436). - CVE-2017-16232: Fix memory-based DoS in tiff2bw (bsc#1069213). This update was imported from the SUSE:SLE-12:Update update project.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 42.2 | libtiff-devel, libtiff-devel-32bit, libtiff5 y 2 más | 4.0.9-24.1 |
| openSUSE Leap 42.3 | libtiff-devel, libtiff-devel-32bit, libtiff5 y 2 más | 4.0.9-24.1 |
Mostrar las 10 entradas de 2 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 42.2 | libtiff-devel | 4.0.9-24.1 |
| openSUSE Leap 42.2 | libtiff-devel-32bit | 4.0.9-24.1 |
| openSUSE Leap 42.2 | libtiff5 | 4.0.9-24.1 |
| openSUSE Leap 42.2 | libtiff5-32bit | 4.0.9-24.1 |
| openSUSE Leap 42.2 | tiff | 4.0.9-24.1 |
| openSUSE Leap 42.3 | libtiff-devel | 4.0.9-24.1 |
| openSUSE Leap 42.3 | libtiff-devel-32bit | 4.0.9-24.1 |
| openSUSE Leap 42.3 | libtiff5 | 4.0.9-24.1 |
| openSUSE Leap 42.3 | libtiff5-32bit | 4.0.9-24.1 |
| openSUSE Leap 42.3 | tiff | 4.0.9-24.1 |