Описание
Security update for tiff
This update for tiff fixes the following issues:
Security issues fixed:
- CVE-2018-19210: Fixed a NULL pointer dereference in TIFFWriteDirectorySec function (bsc#1115717).
- CVE-2018-17000: Fixed a NULL pointer dereference in the _TIFFmemcmp function (bsc#1108606).
- CVE-2019-6128: Fixed a memory leak in the TIFFFdOpen function in tif_unix.c (bsc#1121626).
- CVE-2019-7663: Fixed an invalid address dereference in the TIFFWriteDirectoryTagTransfer function in libtiff/tif_dirwrite.c (bsc#1125113)
Список пакетов
Container suse/nginx:latest
libtiff5-4.0.9-5.27.5
Container suse/rmt-nginx:latest
libtiff5-4.0.9-5.27.5
Image SLES15-SAP-Azure
libtiff5-4.0.9-5.27.5
Image SLES15-SAP-Azure-BYOS
libtiff5-4.0.9-5.27.5
Image SLES15-SAP-Azure-LI-BYOS-Production
libtiff5-4.0.9-5.27.5
Image SLES15-SAP-Azure-VLI-BYOS-Production
libtiff5-4.0.9-5.27.5
Image SLES15-SAP-EC2-HVM
libtiff5-4.0.9-5.27.5
Image SLES15-SAP-EC2-HVM-BYOS
libtiff5-4.0.9-5.27.5
Image SLES15-SAP-GCE
libtiff5-4.0.9-5.27.5
Image SLES15-SAP-GCE-BYOS
libtiff5-4.0.9-5.27.5
Image SLES15-SAP-OCI-BYOS
libtiff5-4.0.9-5.27.5
Image SLES15-SP1-CAP-Deployment-BYOS-EC2-HVM
libtiff5-4.0.9-5.27.5
Image SLES15-SP1-CAP-Deployment-BYOS-GCE
libtiff5-4.0.9-5.27.5
Image SLES15-SP1-SAP-Azure
libtiff5-4.0.9-5.27.5
Image SLES15-SP1-SAP-Azure-BYOS
libtiff5-4.0.9-5.27.5
Image SLES15-SP1-SAP-Azure-LI-BYOS-Production
libtiff5-4.0.9-5.27.5
Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production
libtiff5-4.0.9-5.27.5
Image SLES15-SP1-SAP-EC2-HVM
libtiff5-4.0.9-5.27.5
Image SLES15-SP1-SAP-EC2-HVM-BYOS
libtiff5-4.0.9-5.27.5
Image SLES15-SP1-SAP-GCE
libtiff5-4.0.9-5.27.5
Image SLES15-SP1-SAP-GCE-BYOS
libtiff5-4.0.9-5.27.5
Image SLES15-SP1-SAP-OCI-BYOS
libtiff5-4.0.9-5.27.5
Image SLES15-SP1-SAPCAL-Azure
libtiff5-4.0.9-5.27.5
Image SLES15-SP1-SAPCAL-EC2-HVM
libtiff5-4.0.9-5.27.5
Image SLES15-SP1-SAPCAL-GCE
libtiff5-4.0.9-5.27.5
Image SLES15-SP2-CAP-Deployment-BYOS-Azure
libtiff5-4.0.9-5.27.5
Image SLES15-SP2-SAP-Azure
libtiff5-4.0.9-5.27.5
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production
libtiff5-4.0.9-5.27.5
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production
libtiff5-4.0.9-5.27.5
Image SLES15-SP2-SAP-BYOS-Azure
libtiff5-4.0.9-5.27.5
Image SLES15-SP2-SAP-BYOS-EC2-HVM
libtiff5-4.0.9-5.27.5
Image SLES15-SP2-SAP-BYOS-GCE
libtiff5-4.0.9-5.27.5
Image SLES15-SP2-SAP-EC2-HVM
libtiff5-4.0.9-5.27.5
Image SLES15-SP2-SAP-GCE
libtiff5-4.0.9-5.27.5
Image SLES15-SP3-EC2-HVM
libtiff5-4.0.9-5.27.5
Image SLES15-SP3-SAP-Azure
libtiff5-4.0.9-5.27.5
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production
libtiff5-4.0.9-5.27.5
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production
libtiff5-4.0.9-5.27.5
Image SLES15-SP3-SAP-BYOS-Azure
libtiff5-4.0.9-5.27.5
Image SLES15-SP3-SAP-BYOS-EC2-HVM
libtiff5-4.0.9-5.27.5
Image SLES15-SP3-SAP-BYOS-GCE
libtiff5-4.0.9-5.27.5
Image SLES15-SP3-SAP-EC2-HVM
libtiff5-4.0.9-5.27.5
Image SLES15-SP3-SAP-GCE
libtiff5-4.0.9-5.27.5
Image SLES15-SP3-SAPCAL-Azure
libtiff5-4.0.9-5.27.5
Image SLES15-SP3-SAPCAL-EC2-HVM
libtiff5-4.0.9-5.27.5
Image SLES15-SP3-SAPCAL-GCE
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-Hardened-BYOS
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-Hardened-BYOS-Azure
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-Hardened-BYOS-EC2
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-Hardened-BYOS-GCE
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-SAP
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-SAP-Azure
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-SAP-Azure-LI-BYOS
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-SAP-Azure-LI-BYOS-Production
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-SAP-Azure-VLI-BYOS
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-SAP-BYOS
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-SAP-BYOS-Azure
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-SAP-BYOS-EC2
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-SAP-BYOS-GCE
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-SAP-EC2
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-SAP-GCE
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-SAP-Hardened
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-SAP-Hardened-Azure
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-SAP-Hardened-BYOS
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-SAP-Hardened-BYOS-Azure
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-SAP-Hardened-BYOS-EC2
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-SAP-Hardened-BYOS-GCE
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-SAP-Hardened-EC2
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-SAP-Hardened-GCE
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-SAPCAL
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-SAPCAL-Azure
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-SAPCAL-EC2
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-SAPCAL-GCE
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-SUSE-Rancher-Setup-BYOS
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2
libtiff5-4.0.9-5.27.5
Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2-HVM
libtiff5-4.0.9-5.27.5
Image SLES15-SP5-Hardened-BYOS-Azure
libtiff5-4.0.9-5.27.5
Image SLES15-SP5-Hardened-BYOS-EC2
libtiff5-4.0.9-5.27.5
Image SLES15-SP5-Hardened-BYOS-GCE
libtiff5-4.0.9-5.27.5
Image SLES15-SP5-SAP-Azure
libtiff5-4.0.9-5.27.5
Image SLES15-SP5-SAP-Azure-3P
libtiff5-4.0.9-5.27.5
Image SLES15-SP5-SAP-Azure-LI-BYOS
libtiff5-4.0.9-5.27.5
Image SLES15-SP5-SAP-Azure-LI-BYOS-Production
libtiff5-4.0.9-5.27.5
Image SLES15-SP5-SAP-Azure-VLI-BYOS
libtiff5-4.0.9-5.27.5
Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production
libtiff5-4.0.9-5.27.5
Image SLES15-SP5-SAP-BYOS-Azure
libtiff5-4.0.9-5.27.5
Image SLES15-SP5-SAP-BYOS-EC2
libtiff5-4.0.9-5.27.5
Image SLES15-SP5-SAP-BYOS-GCE
libtiff5-4.0.9-5.27.5
Image SLES15-SP5-SAP-EC2
libtiff5-4.0.9-5.27.5
Image SLES15-SP5-SAP-GCE
libtiff5-4.0.9-5.27.5
Image SLES15-SP5-SAP-Hardened-Azure
libtiff5-4.0.9-5.27.5
Image SLES15-SP5-SAP-Hardened-BYOS-Azure
libtiff5-4.0.9-5.27.5
Image SLES15-SP5-SAP-Hardened-BYOS-EC2
libtiff5-4.0.9-5.27.5
Image SLES15-SP5-SAP-Hardened-BYOS-GCE
libtiff5-4.0.9-5.27.5
Image SLES15-SP5-SAP-Hardened-EC2
libtiff5-4.0.9-5.27.5
Image SLES15-SP5-SAP-Hardened-GCE
libtiff5-4.0.9-5.27.5
Image SLES15-SP5-SAPCAL-Azure
libtiff5-4.0.9-5.27.5
Image SLES15-SP5-SAPCAL-EC2
libtiff5-4.0.9-5.27.5
Image SLES15-SP5-SAPCAL-GCE
libtiff5-4.0.9-5.27.5
Image SLES15-SP6-SAP-Azure-3P
libtiff5-4.0.9-5.27.5
Image SLES15-SP6-SAP-Azure-LI-BYOS
libtiff5-4.0.9-5.27.5
Image SLES15-SP6-SAP-Azure-LI-BYOS-Production
libtiff5-4.0.9-5.27.5
Image SLES15-SP6-SAP-Azure-VLI-BYOS
libtiff5-4.0.9-5.27.5
Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production
libtiff5-4.0.9-5.27.5
Image SLES15-SP6-SAP-BYOS
libtiff5-4.0.9-5.27.5
Image SLES15-SP6-SAP-BYOS-Azure
libtiff5-4.0.9-5.27.5
Image SLES15-SP6-SAP-BYOS-EC2
libtiff5-4.0.9-5.27.5
Image SLES15-SP6-SAP-BYOS-GCE
libtiff5-4.0.9-5.27.5
Image SLES15-SP6-SAP-Hardened
libtiff5-4.0.9-5.27.5
Image SLES15-SP6-SAP-Hardened-Azure
libtiff5-4.0.9-5.27.5
Image SLES15-SP6-SAP-Hardened-BYOS
libtiff5-4.0.9-5.27.5
Image SLES15-SP6-SAP-Hardened-BYOS-Azure
libtiff5-4.0.9-5.27.5
Image SLES15-SP6-SAP-Hardened-BYOS-EC2
libtiff5-4.0.9-5.27.5
Image SLES15-SP6-SAP-Hardened-BYOS-GCE
libtiff5-4.0.9-5.27.5
Image SLES15-SP6-SAP-Hardened-EC2
libtiff5-4.0.9-5.27.5
Image SLES15-SP6-SAP-Hardened-GCE
libtiff5-4.0.9-5.27.5
Image SLES15-SP7-SAP-Azure
libtiff5-4.0.9-5.27.5
Image SLES15-SP7-SAP-Azure-3P
libtiff5-4.0.9-5.27.5
Image SLES15-SP7-SAP-Azure-LI-BYOS-Production
libtiff5-4.0.9-5.27.5
Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production
libtiff5-4.0.9-5.27.5
Image SLES15-SP7-SAP-BYOS-Azure
libtiff5-4.0.9-5.27.5
Image SLES15-SP7-SAP-BYOS-EC2
libtiff5-4.0.9-5.27.5
Image SLES15-SP7-SAP-BYOS-GCE
libtiff5-4.0.9-5.27.5
Image SLES15-SP7-SAP-EC2
libtiff5-4.0.9-5.27.5
Image SLES15-SP7-SAP-GCE
libtiff5-4.0.9-5.27.5
Image SLES15-SP7-SAP-Hardened-Azure
libtiff5-4.0.9-5.27.5
Image SLES15-SP7-SAP-Hardened-BYOS-Azure
libtiff5-4.0.9-5.27.5
Image SLES15-SP7-SAP-Hardened-BYOS-EC2
libtiff5-4.0.9-5.27.5
Image SLES15-SP7-SAP-Hardened-BYOS-GCE
libtiff5-4.0.9-5.27.5
Image SLES15-SP7-SAP-Hardened-GCE
libtiff5-4.0.9-5.27.5
SUSE Linux Enterprise Module for Basesystem 15
libtiff-devel-4.0.9-5.27.5
libtiff5-4.0.9-5.27.5
SUSE Linux Enterprise Module for Desktop Applications 15
libtiff5-32bit-4.0.9-5.27.5
SUSE Linux Enterprise Module for Package Hub 15
tiff-4.0.9-5.27.5
Ссылки
- Link for SUSE-SU-2019:0786-1
- E-Mail link for SUSE-SU-2019:0786-1
- SUSE Security Ratings
- SUSE Bug 1108606
- SUSE Bug 1115717
- SUSE Bug 1121626
- SUSE Bug 1125113
- SUSE CVE CVE-2018-17000 page
- SUSE CVE CVE-2018-19210 page
- SUSE CVE CVE-2019-6128 page
- SUSE CVE CVE-2019-7663 page
Описание
A NULL pointer dereference in the function _TIFFmemcmp at tif_unix.c (called from TIFFWriteDirectoryTagTransferfunction) in LibTIFF 4.0.9 allows an attacker to cause a denial-of-service through a crafted tiff file. This vulnerability can be triggered by the executable tiffcp.
Затронутые продукты
Container suse/nginx:latest:libtiff5-4.0.9-5.27.5
Container suse/rmt-nginx:latest:libtiff5-4.0.9-5.27.5
Image SLES15-SAP-Azure-BYOS:libtiff5-4.0.9-5.27.5
Image SLES15-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-5.27.5
Ссылки
- CVE-2018-17000
- SUSE Bug 1108606
- SUSE Bug 1115717
- SUSE Bug 1125113
Описание
In LibTIFF 4.0.9, there is a NULL pointer dereference in the TIFFWriteDirectorySec function in tif_dirwrite.c that will lead to a denial of service attack, as demonstrated by tiffset.
Затронутые продукты
Container suse/nginx:latest:libtiff5-4.0.9-5.27.5
Container suse/rmt-nginx:latest:libtiff5-4.0.9-5.27.5
Image SLES15-SAP-Azure-BYOS:libtiff5-4.0.9-5.27.5
Image SLES15-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-5.27.5
Ссылки
- CVE-2018-19210
- SUSE Bug 1108606
- SUSE Bug 1115717
Описание
The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb.
Затронутые продукты
Container suse/nginx:latest:libtiff5-4.0.9-5.27.5
Container suse/rmt-nginx:latest:libtiff5-4.0.9-5.27.5
Image SLES15-SAP-Azure-BYOS:libtiff5-4.0.9-5.27.5
Image SLES15-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-5.27.5
Ссылки
- CVE-2019-6128
- SUSE Bug 1121626
- SUSE Bug 1153715
Описание
An Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff/tif_dirwrite.c in LibTIFF 4.0.10, affecting the cpSeparateBufToContigBuf function in tiffcp.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted tiff file. This is different from CVE-2018-12900.
Затронутые продукты
Container suse/nginx:latest:libtiff5-4.0.9-5.27.5
Container suse/rmt-nginx:latest:libtiff5-4.0.9-5.27.5
Image SLES15-SAP-Azure-BYOS:libtiff5-4.0.9-5.27.5
Image SLES15-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-5.27.5
Ссылки
- CVE-2019-7663
- SUSE Bug 1125113