Security update for tiff

SUSE Security Update: Security update for tiff
Announcement ID: SUSE-SU-2018:3879-1
Rating: moderate
References: #1010163 #1014461 #1040080 #1040322 #1074186 #1099257 #1113672 #974446 #974447 #974448 #983440
Cross-References: CVE-2015-8870 CVE-2016-3619 CVE-2016-3620 CVE-2016-3621 CVE-2016-5319 CVE-2016-9273 CVE-2017-17942 CVE-2017-9117 CVE-2017-9147 CVE-2018-12900 CVE-2018-18661
Affected Products:
  • SUSE Linux Enterprise Software Development Kit 11-SP4
  • SUSE Linux Enterprise Server 11-SP4
  • SUSE Linux Enterprise Debuginfo 11-SP4

An update that fixes 11 vulnerabilities is now available.

Description:

This update for tiff fixes the following issues:
Security issues fixed:

  • CVE-2018-18661: Fixed NULL pointer dereference in the function LZWDecode in the file tif_lzw.c (bsc#1113672).
  • CVE-2018-12900: Fixed heap-based buffer overflow in the cpSeparateBufToContigBuf (bsc#1099257).
  • CVE-2017-9147: Fixed invalid read in the _TIFFVGetField function in tif_dir.c, that allowed remote attackers to cause a DoS via acrafted TIFF file (bsc#1040322).
  • CVE-2017-9117: Fixed BMP images processing that was verified without biWidth and biHeight values (bsc#1040080).
  • CVE-2017-17942: Fixed issue in the function PackBitsEncode that could have led to a heap overflow and caused a DoS (bsc#1074186).
  • CVE-2016-9273: Fixed heap-based buffer overflow issue (bsc#1010163).
  • CVE-2016-5319: Fixed heap-based buffer overflow in PackBitsEncode (bsc#983440).
  • CVE-2016-3621: Fixed out-of-bounds read in the bmp2tiff tool (lzw packing) (bsc#974448).
  • CVE-2016-3620: Fixed out-of-bounds read in the bmp2tiff tool (zip packing) (bsc#974447)
  • CVE-2016-3619: Fixed out-of-bounds read in the bmp2tiff tool (none packing) (bsc#974446)
  • CVE-2015-8870: Fixed integer overflow in tools/bmp2tiff.c that allowed remote attackers to causea DOS (bsc#1014461).

Non-security issues fixed:
  • asan_build: build ASAN included
  • debug_build: build more suitable for debugging

Patch Instructions:

To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  • SUSE Linux Enterprise Software Development Kit 11-SP4:
    zypper in -t patch sdksp4-tiff-13878=1
  • SUSE Linux Enterprise Server 11-SP4:
    zypper in -t patch slessp4-tiff-13878=1
  • SUSE Linux Enterprise Debuginfo 11-SP4:
    zypper in -t patch dbgsp4-tiff-13878=1

Package List:

  • SUSE Linux Enterprise Software Development Kit 11-SP4 (i586 ia64 ppc64 s390x x86_64):
    • libtiff-devel-3.8.2-141.169.22.1
  • SUSE Linux Enterprise Software Development Kit 11-SP4 (ppc64 s390x x86_64):
    • libtiff-devel-32bit-3.8.2-141.169.22.1
  • SUSE Linux Enterprise Server 11-SP4 (i586 ia64 ppc64 s390x x86_64):
    • libtiff3-3.8.2-141.169.22.1
    • tiff-3.8.2-141.169.22.1
  • SUSE Linux Enterprise Server 11-SP4 (ppc64 s390x x86_64):
    • libtiff3-32bit-3.8.2-141.169.22.1
  • SUSE Linux Enterprise Server 11-SP4 (ia64):
    • libtiff3-x86-3.8.2-141.169.22.1
  • SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 ppc64 s390x x86_64):
    • tiff-debuginfo-3.8.2-141.169.22.1
    • tiff-debugsource-3.8.2-141.169.22.1

References: