Security update for tiff SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2016:2508-1 Final 1 1 2016-10-12T09:31:48Z current 2016-10-12T09:31:48Z 2016-10-12T09:31:48Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for tiff This update for tiff fixes the following security issues: - CVE-2016-3622: Specially crafted TIFF images could trigger a crash in tiff2rgba (bsc#974449) - Various out-of-bound write vulnerabilities with unspecified impact (MSVR 35093, MSVR 35094, MSVR 35095, MSVR 35096, MSVR 35097, MSVR 35098) - CVE-2016-3623: Specially crafted TIFF images could trigger a crash in rgb2ycbcr (bsc#974618) - CVE-2016-3945: Specially crafted TIFF images could trigger a crash or allow for arbitrary command execution via tiff2rgba (bsc#974614) - CVE-2016-3990: Specially crafted TIFF images could trigger a crash or allow for arbitrary command execution (bsc#975069) - CVE-2016-3991: Specially crafted TIFF images could trigger a crash or allow for arbitrary command execution via the tiffcrop tool (bsc#975070) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-DESKTOP-12-SP1-2016-1461,SUSE-SLE-SDK-12-SP1-2016-1461,SUSE-SLE-SERVER-12-SP1-2016-1461 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2016/suse-su-20162508-1/ Link for SUSE-SU-2016:2508-1 https://lists.suse.com/pipermail/sle-security-updates/2016-October/002326.html E-Mail link for SUSE-SU-2016:2508-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/974449 SUSE Bug 974449 https://bugzilla.suse.com/974614 SUSE Bug 974614 https://bugzilla.suse.com/974618 SUSE Bug 974618 https://bugzilla.suse.com/975069 SUSE Bug 975069 https://bugzilla.suse.com/975070 SUSE Bug 975070 https://www.suse.com/security/cve/CVE-2016-3622/ SUSE CVE CVE-2016-3622 page https://www.suse.com/security/cve/CVE-2016-3623/ SUSE CVE CVE-2016-3623 page https://www.suse.com/security/cve/CVE-2016-3945/ SUSE CVE CVE-2016-3945 page https://www.suse.com/security/cve/CVE-2016-3990/ SUSE CVE CVE-2016-3990 page https://www.suse.com/security/cve/CVE-2016-3991/ SUSE CVE CVE-2016-3991 page SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 libtiff5-4.0.6-31.1 libtiff5-32bit-4.0.6-31.1 libtiff-devel-4.0.6-31.1 tiff-4.0.6-31.1 libtiff5-4.0.6-31.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libtiff5-32bit-4.0.6-31.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libtiff5-4.0.6-31.1 as a component of SUSE Linux Enterprise Server 12 SP1 libtiff5-32bit-4.0.6-31.1 as a component of SUSE Linux Enterprise Server 12 SP1 tiff-4.0.6-31.1 as a component of SUSE Linux Enterprise Server 12 SP1 libtiff5-4.0.6-31.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libtiff5-32bit-4.0.6-31.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 tiff-4.0.6-31.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libtiff-devel-4.0.6-31.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted TIFF image. CVE-2016-3622 SUSE Linux Enterprise Desktop 12 SP1:libtiff5-32bit-4.0.6-31.1 SUSE Linux Enterprise Desktop 12 SP1:libtiff5-4.0.6-31.1 SUSE Linux Enterprise Server 12 SP1:libtiff5-32bit-4.0.6-31.1 SUSE Linux Enterprise Server 12 SP1:libtiff5-4.0.6-31.1 SUSE Linux Enterprise Server 12 SP1:tiff-4.0.6-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libtiff5-32bit-4.0.6-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libtiff5-4.0.6-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:tiff-4.0.6-31.1 SUSE Linux Enterprise Software Development Kit 12 SP1:libtiff-devel-4.0.6-31.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162508-1/ https://www.suse.com/security/cve/CVE-2016-3622.html CVE-2016-3622 https://bugzilla.suse.com/974449 SUSE Bug 974449 The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero) by setting the (1) v or (2) h parameter to 0. CVE-2016-3623 SUSE Linux Enterprise Desktop 12 SP1:libtiff5-32bit-4.0.6-31.1 SUSE Linux Enterprise Desktop 12 SP1:libtiff5-4.0.6-31.1 SUSE Linux Enterprise Server 12 SP1:libtiff5-32bit-4.0.6-31.1 SUSE Linux Enterprise Server 12 SP1:libtiff5-4.0.6-31.1 SUSE Linux Enterprise Server 12 SP1:tiff-4.0.6-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libtiff5-32bit-4.0.6-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libtiff5-4.0.6-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:tiff-4.0.6-31.1 SUSE Linux Enterprise Software Development Kit 12 SP1:libtiff-devel-4.0.6-31.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162508-1/ https://www.suse.com/security/cve/CVE-2016-3623.html CVE-2016-3623 https://bugzilla.suse.com/974617 SUSE Bug 974617 https://bugzilla.suse.com/974618 SUSE Bug 974618 Multiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image, which triggers an out-of-bounds write. CVE-2016-3945 SUSE Linux Enterprise Desktop 12 SP1:libtiff5-32bit-4.0.6-31.1 SUSE Linux Enterprise Desktop 12 SP1:libtiff5-4.0.6-31.1 SUSE Linux Enterprise Server 12 SP1:libtiff5-32bit-4.0.6-31.1 SUSE Linux Enterprise Server 12 SP1:libtiff5-4.0.6-31.1 SUSE Linux Enterprise Server 12 SP1:tiff-4.0.6-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libtiff5-32bit-4.0.6-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libtiff5-4.0.6-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:tiff-4.0.6-31.1 SUSE Linux Enterprise Software Development Kit 12 SP1:libtiff-devel-4.0.6-31.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162508-1/ https://www.suse.com/security/cve/CVE-2016-3945.html CVE-2016-3945 https://bugzilla.suse.com/974614 SUSE Bug 974614 Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image to tiffcp. CVE-2016-3990 SUSE Linux Enterprise Desktop 12 SP1:libtiff5-32bit-4.0.6-31.1 SUSE Linux Enterprise Desktop 12 SP1:libtiff5-4.0.6-31.1 SUSE Linux Enterprise Server 12 SP1:libtiff5-32bit-4.0.6-31.1 SUSE Linux Enterprise Server 12 SP1:libtiff5-4.0.6-31.1 SUSE Linux Enterprise Server 12 SP1:tiff-4.0.6-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libtiff5-32bit-4.0.6-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libtiff5-4.0.6-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:tiff-4.0.6-31.1 SUSE Linux Enterprise Software Development Kit 12 SP1:libtiff-devel-4.0.6-31.1 moderate 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162508-1/ https://www.suse.com/security/cve/CVE-2016-3990.html CVE-2016-3990 https://bugzilla.suse.com/975069 SUSE Bug 975069 Heap-based buffer overflow in the loadImage function in the tiffcrop tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted TIFF image with zero tiles. CVE-2016-3991 SUSE Linux Enterprise Desktop 12 SP1:libtiff5-32bit-4.0.6-31.1 SUSE Linux Enterprise Desktop 12 SP1:libtiff5-4.0.6-31.1 SUSE Linux Enterprise Server 12 SP1:libtiff5-32bit-4.0.6-31.1 SUSE Linux Enterprise Server 12 SP1:libtiff5-4.0.6-31.1 SUSE Linux Enterprise Server 12 SP1:tiff-4.0.6-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libtiff5-32bit-4.0.6-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libtiff5-4.0.6-31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:tiff-4.0.6-31.1 SUSE Linux Enterprise Software Development Kit 12 SP1:libtiff-devel-4.0.6-31.1 moderate 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162508-1/ https://www.suse.com/security/cve/CVE-2016-3991.html CVE-2016-3991 https://bugzilla.suse.com/975070 SUSE Bug 975070