Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:2744-1

Опубликовано: 24 сент. 2020
Источник: suse-cvrf

Описание

Security update for tiff

This update for tiff fixes the following issues:

  • CVE-2019-14973: Fixed an improper check which was depended on the compiler which could have led to integer overflow (bsc#1146608).

Список пакетов

Container suse/nginx:latest
libtiff5-4.0.9-5.30.28
Container suse/rmt-nginx:latest
libtiff5-4.0.9-5.30.28
Image SLES15-SAP-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SAP-Azure-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SAP-Azure-LI-BYOS-Production
libtiff5-4.0.9-5.30.28
Image SLES15-SAP-Azure-VLI-BYOS-Production
libtiff5-4.0.9-5.30.28
Image SLES15-SAP-EC2-HVM
libtiff5-4.0.9-5.30.28
Image SLES15-SAP-EC2-HVM-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SAP-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SAP-GCE-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SAP-OCI-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP1-CAP-Deployment-BYOS-EC2-HVM
libtiff5-4.0.9-5.30.28
Image SLES15-SP1-CAP-Deployment-BYOS-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP1-SAP-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP1-SAP-Azure-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP1-SAP-Azure-LI-BYOS-Production
libtiff5-4.0.9-5.30.28
Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production
libtiff5-4.0.9-5.30.28
Image SLES15-SP1-SAP-EC2-HVM
libtiff5-4.0.9-5.30.28
Image SLES15-SP1-SAP-EC2-HVM-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP1-SAP-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP1-SAP-GCE-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP1-SAP-OCI-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP1-SAPCAL-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP1-SAPCAL-EC2-HVM
libtiff5-4.0.9-5.30.28
Image SLES15-SP1-SAPCAL-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP2-CAP-Deployment-BYOS-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP2-SAP-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production
libtiff5-4.0.9-5.30.28
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production
libtiff5-4.0.9-5.30.28
Image SLES15-SP2-SAP-BYOS-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP2-SAP-BYOS-EC2-HVM
libtiff5-4.0.9-5.30.28
Image SLES15-SP2-SAP-BYOS-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP2-SAP-EC2-HVM
libtiff5-4.0.9-5.30.28
Image SLES15-SP2-SAP-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP3-EC2-HVM
libtiff5-4.0.9-5.30.28
Image SLES15-SP3-SAP-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production
libtiff5-4.0.9-5.30.28
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production
libtiff5-4.0.9-5.30.28
Image SLES15-SP3-SAP-BYOS-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP3-SAP-BYOS-EC2-HVM
libtiff5-4.0.9-5.30.28
Image SLES15-SP3-SAP-BYOS-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP3-SAP-EC2-HVM
libtiff5-4.0.9-5.30.28
Image SLES15-SP3-SAP-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP3-SAPCAL-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP3-SAPCAL-EC2-HVM
libtiff5-4.0.9-5.30.28
Image SLES15-SP3-SAPCAL-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-Hardened-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-Hardened-BYOS-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-Hardened-BYOS-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-Hardened-BYOS-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-Azure-LI-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-Azure-LI-BYOS-Production
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-Azure-VLI-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-BYOS-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-BYOS-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-BYOS-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-Hardened
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-Hardened-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-Hardened-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-Hardened-BYOS-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-Hardened-BYOS-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-Hardened-BYOS-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-Hardened-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAP-Hardened-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAPCAL
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAPCAL-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAPCAL-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SAPCAL-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SUSE-Rancher-Setup-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2-HVM
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-Hardened-BYOS-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-Hardened-BYOS-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-Hardened-BYOS-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-Azure-3P
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-Azure-LI-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-Azure-LI-BYOS-Production
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-Azure-VLI-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-BYOS-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-BYOS-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-BYOS-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-Hardened-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-Hardened-BYOS-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-Hardened-BYOS-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-Hardened-BYOS-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-Hardened-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAP-Hardened-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAPCAL-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAPCAL-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP5-SAPCAL-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-Azure-LI-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-Azure-LI-BYOS-Production
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-Azure-VLI-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-BYOS-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-BYOS-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-BYOS-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-Hardened
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-Hardened-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-Hardened-BYOS
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-Hardened-BYOS-Azure
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-Hardened-BYOS-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-Hardened-BYOS-GCE
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-Hardened-EC2
libtiff5-4.0.9-5.30.28
Image SLES15-SP6-SAP-Hardened-GCE
libtiff5-4.0.9-5.30.28
SUSE Linux Enterprise Module for Basesystem 15 SP1
libtiff-devel-4.0.9-5.30.28
libtiff5-4.0.9-5.30.28
SUSE Linux Enterprise Module for Basesystem 15 SP2
libtiff-devel-4.0.9-5.30.28
libtiff5-4.0.9-5.30.28
SUSE Linux Enterprise Module for Desktop Applications 15 SP1
libtiff5-32bit-4.0.9-5.30.28
SUSE Linux Enterprise Module for Desktop Applications 15 SP2
libtiff5-32bit-4.0.9-5.30.28
SUSE Linux Enterprise Module for Package Hub 15 SP1
tiff-4.0.9-5.30.28
SUSE Linux Enterprise Module for Package Hub 15 SP2
tiff-4.0.9-5.30.28

Описание

_TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because they rely on compiler behavior that is undefined by the applicable C standards. This can, for example, lead to an application crash.


Затронутые продукты
Container suse/nginx:latest:libtiff5-4.0.9-5.30.28
Container suse/rmt-nginx:latest:libtiff5-4.0.9-5.30.28
Image SLES15-SAP-Azure-BYOS:libtiff5-4.0.9-5.30.28
Image SLES15-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-5.30.28

Ссылки
Уязвимость SUSE-SU-2020:2744-1