Описание
Security update for tiff
This update for tiff fixes the following issues:
- CVE-2019-14973: Fixed an improper check which was depended on the compiler which could have led to integer overflow (bsc#1146608).
Список пакетов
Container suse/nginx:latest
libtiff5-4.0.9-5.30.28
Container suse/rmt-nginx:latest
libtiff5-4.0.9-5.30.28
Image SLES15-SAP-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SAP-Azure-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SAP-Azure-LI-BYOS-Production
libtiff5-4.0.9-5.30.28
Image SLES15-SAP-Azure-VLI-BYOS-Production
libtiff5-4.0.9-5.30.28
Image SLES15-SAP-EC2-HVM
libtiff5-4.0.9-5.30.28
Image SLES15-SAP-EC2-HVM-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SAP-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SAP-GCE-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SAP-OCI-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP1-CAP-Deployment-BYOS-EC2-HVM
libtiff5-4.0.9-5.30.28
Image SLES15-SP1-CAP-Deployment-BYOS-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP1-SAP-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP1-SAP-Azure-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP1-SAP-Azure-LI-BYOS-Production
libtiff5-4.0.9-5.30.28
Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production
libtiff5-4.0.9-5.30.28
Image SLES15-SP1-SAP-EC2-HVM
libtiff5-4.0.9-5.30.28
Image SLES15-SP1-SAP-EC2-HVM-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP1-SAP-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP1-SAP-GCE-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP1-SAP-OCI-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP1-SAPCAL-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP1-SAPCAL-EC2-HVM
libtiff5-4.0.9-5.30.28
Image SLES15-SP1-SAPCAL-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP2-CAP-Deployment-BYOS-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP2-SAP-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production
libtiff5-4.0.9-5.30.28
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production
libtiff5-4.0.9-5.30.28
Image SLES15-SP2-SAP-BYOS-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP2-SAP-BYOS-EC2-HVM
libtiff5-4.0.9-5.30.28
Image SLES15-SP2-SAP-BYOS-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP2-SAP-EC2-HVM
libtiff5-4.0.9-5.30.28
Image SLES15-SP2-SAP-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP3-EC2-HVM
libtiff5-4.0.9-5.30.28
Image SLES15-SP3-SAP-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production
libtiff5-4.0.9-5.30.28
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production
libtiff5-4.0.9-5.30.28
Image SLES15-SP3-SAP-BYOS-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP3-SAP-BYOS-EC2-HVM
libtiff5-4.0.9-5.30.28
Image SLES15-SP3-SAP-BYOS-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP3-SAP-EC2-HVM
libtiff5-4.0.9-5.30.28
Image SLES15-SP3-SAP-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP3-SAPCAL-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP3-SAPCAL-EC2-HVM
libtiff5-4.0.9-5.30.28
Image SLES15-SP3-SAPCAL-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-Hardened-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-Hardened-BYOS-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-Hardened-BYOS-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-Hardened-BYOS-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-Azure-LI-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-Azure-LI-BYOS-Production
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-Azure-VLI-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-BYOS-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-BYOS-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-BYOS-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-Hardened
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-Hardened-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-Hardened-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-Hardened-BYOS-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-Hardened-BYOS-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-Hardened-BYOS-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-Hardened-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-Hardened-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAPCAL
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAPCAL-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAPCAL-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAPCAL-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SUSE-Rancher-Setup-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2-HVM
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-Hardened-BYOS-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-Hardened-BYOS-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-Hardened-BYOS-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-Azure-3P
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-Azure-LI-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-Azure-LI-BYOS-Production
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-Azure-VLI-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-BYOS-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-BYOS-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-BYOS-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-Hardened-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-Hardened-BYOS-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-Hardened-BYOS-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-Hardened-BYOS-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-Hardened-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-Hardened-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAPCAL-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAPCAL-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAPCAL-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-Azure-LI-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-Azure-LI-BYOS-Production
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-Azure-VLI-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-BYOS-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-BYOS-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-BYOS-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-Hardened
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-Hardened-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-Hardened-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-Hardened-BYOS-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-Hardened-BYOS-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-Hardened-BYOS-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-Hardened-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-Hardened-GCE
libtiff5-4.0.9-5.30.28
SUSE Linux Enterprise Module for Basesystem 15 SP1
libtiff-devel-4.0.9-5.30.28
libtiff5-4.0.9-5.30.28
SUSE Linux Enterprise Module for Basesystem 15 SP2
libtiff-devel-4.0.9-5.30.28
libtiff5-4.0.9-5.30.28
SUSE Linux Enterprise Module for Desktop Applications 15 SP1
libtiff5-32bit-4.0.9-5.30.28
SUSE Linux Enterprise Module for Desktop Applications 15 SP2
libtiff5-32bit-4.0.9-5.30.28
SUSE Linux Enterprise Module for Package Hub 15 SP1
tiff-4.0.9-5.30.28
SUSE Linux Enterprise Module for Package Hub 15 SP2
tiff-4.0.9-5.30.28
Ссылки
- Link for SUSE-SU-2020:2744-1
- E-Mail link for SUSE-SU-2020:2744-1
- SUSE Security Ratings
- SUSE Bug 1146608
- SUSE CVE CVE-2019-14973 page
Описание
_TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because they rely on compiler behavior that is undefined by the applicable C standards. This can, for example, lead to an application crash.
Затронутые продукты
Container suse/nginx:latest:libtiff5-4.0.9-5.30.28
Container suse/rmt-nginx:latest:libtiff5-4.0.9-5.30.28
Image SLES15-SAP-Azure-BYOS:libtiff5-4.0.9-5.30.28
Image SLES15-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-5.30.28
Ссылки
- CVE-2019-14973
- SUSE Bug 1146608