Security update for tiff SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:3058-1 Final 1 1 2019-11-25T16:32:56Z current 2019-11-25T16:32:56Z 2019-11-25T16:32:56Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for tiff This update for tiff fixes the following issues: Security issues fixed: - CVE-2019-14973: Fixed an improper check which was depended on the compiler which could have led to integer overflow (bsc#1146608). - CVE-2016-5102: Fixed a buffer overflow in readgifimage() (bsc#983268) - CVE-2018-17000: Fixed a NULL pointer dereference in the _TIFFmemcmp function (bsc#1108606). - CVE-2019-6128: Fixed a memory leak in the TIFFFdOpen function in tif_unix.c (bsc#1121626). - CVE-2019-7663: Fixed an invalid address dereference in the TIFFWriteDirectoryTagTransfer function in libtiff/tif_dirwrite.c (bsc#1125113) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container caasp/v4/nginx-ingress-controller:beta1-2019-3058,Image SLES12-SP4-SAP-Azure-2019-3058,Image SLES12-SP4-SAP-Azure-BYOS-2019-3058,Image SLES12-SP4-SAP-Azure-LI-BYOS-Production-2019-3058,Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production-2019-3058,Image SLES12-SP4-SAP-EC2-HVM-2019-3058,Image SLES12-SP4-SAP-EC2-HVM-BYOS-2019-3058,Image SLES12-SP4-SAP-GCE-2019-3058,Image SLES12-SP4-SAP-GCE-BYOS-2019-3058,Image SLES12-SP4-SAP-OCI-BYOS-2019-3058,Image SLES12-SP5-Azure-SAP-BYOS-2019-3058,Image SLES12-SP5-Azure-SAP-On-Demand-2019-3058,Image SLES12-SP5-EC2-SAP-BYOS-2019-3058,Image SLES12-SP5-EC2-SAP-On-Demand-2019-3058,Image SLES12-SP5-GCE-SAP-BYOS-2019-3058,Image SLES12-SP5-GCE-SAP-On-Demand-2019-3058,Image SLES12-SP5-OCI-BYOS-SAP-BYOS-2019-3058,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2019-3058,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2019-3058,SUSE-2019-3058,SUSE-SLE-DESKTOP-12-SP4-2019-3058,SUSE-SLE-SDK-12-SP4-2019-3058,SUSE-SLE-SDK-12-SP5-2019-3058,SUSE-SLE-SERVER-12-SP4-2019-3058,SUSE-SLE-SERVER-12-SP5-2019-3058 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20193058-1/ Link for SUSE-SU-2019:3058-1 https://lists.suse.com/pipermail/sle-security-updates/2019-November/006177.html E-Mail link for SUSE-SU-2019:3058-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1108606 SUSE Bug 1108606 https://bugzilla.suse.com/1121626 SUSE Bug 1121626 https://bugzilla.suse.com/1125113 SUSE Bug 1125113 https://bugzilla.suse.com/1146608 SUSE Bug 1146608 https://bugzilla.suse.com/983268 SUSE Bug 983268 https://www.suse.com/security/cve/CVE-2016-5102/ SUSE CVE CVE-2016-5102 page https://www.suse.com/security/cve/CVE-2018-17000/ SUSE CVE CVE-2018-17000 page https://www.suse.com/security/cve/CVE-2019-14973/ SUSE CVE CVE-2019-14973 page https://www.suse.com/security/cve/CVE-2019-6128/ SUSE CVE CVE-2019-6128 page https://www.suse.com/security/cve/CVE-2019-7663/ SUSE CVE CVE-2019-7663 page Container caasp/v4/nginx-ingress-controller:beta1 Image SLES12-SP4-SAP-Azure Image SLES12-SP4-SAP-Azure-BYOS Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production Image SLES12-SP4-SAP-EC2-HVM Image SLES12-SP4-SAP-EC2-HVM-BYOS Image SLES12-SP4-SAP-GCE Image SLES12-SP4-SAP-GCE-BYOS Image SLES12-SP4-SAP-OCI-BYOS Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-OCI-BYOS-SAP-BYOS Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 libtiff5-4.0.9-44.42.1 libtiff-devel-4.0.9-44.42.1 libtiff-devel-32bit-4.0.9-44.42.1 libtiff-devel-64bit-4.0.9-44.42.1 libtiff5-32bit-4.0.9-44.42.1 libtiff5-64bit-4.0.9-44.42.1 tiff-4.0.9-44.42.1 libtiff5-4.0.9-44.42.1 as a component of Container caasp/v4/nginx-ingress-controller:beta1 libtiff5-4.0.9-44.42.1 as a component of Image SLES12-SP4-SAP-Azure libtiff5-4.0.9-44.42.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS libtiff5-4.0.9-44.42.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production libtiff5-4.0.9-44.42.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production libtiff5-4.0.9-44.42.1 as a component of Image SLES12-SP4-SAP-EC2-HVM libtiff5-4.0.9-44.42.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS libtiff5-4.0.9-44.42.1 as a component of Image SLES12-SP4-SAP-GCE libtiff5-4.0.9-44.42.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS libtiff5-4.0.9-44.42.1 as a component of Image SLES12-SP4-SAP-OCI-BYOS libtiff5-4.0.9-44.42.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS libtiff5-4.0.9-44.42.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand libtiff5-4.0.9-44.42.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS libtiff5-4.0.9-44.42.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand libtiff5-4.0.9-44.42.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS libtiff5-4.0.9-44.42.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand libtiff5-4.0.9-44.42.1 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS libtiff5-4.0.9-44.42.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production libtiff5-4.0.9-44.42.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libtiff5-4.0.9-44.42.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libtiff5-32bit-4.0.9-44.42.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libtiff5-4.0.9-44.42.1 as a component of SUSE Linux Enterprise Server 12 SP4 libtiff5-32bit-4.0.9-44.42.1 as a component of SUSE Linux Enterprise Server 12 SP4 tiff-4.0.9-44.42.1 as a component of SUSE Linux Enterprise Server 12 SP4 libtiff5-4.0.9-44.42.1 as a component of SUSE Linux Enterprise Server 12 SP5 libtiff5-32bit-4.0.9-44.42.1 as a component of SUSE Linux Enterprise Server 12 SP5 tiff-4.0.9-44.42.1 as a component of SUSE Linux Enterprise Server 12 SP5 libtiff5-4.0.9-44.42.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libtiff5-32bit-4.0.9-44.42.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 tiff-4.0.9-44.42.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libtiff5-4.0.9-44.42.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libtiff5-32bit-4.0.9-44.42.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 tiff-4.0.9-44.42.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libtiff-devel-4.0.9-44.42.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libtiff-devel-4.0.9-44.42.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 Buffer overflow in the readgifimage function in gif2tiff.c in the gif2tiff tool in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (segmentation fault) via a crafted gif file. CVE-2016-5102 Container caasp/v4/nginx-ingress-controller:beta1:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-Azure-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-Azure:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-EC2-HVM:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-GCE-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-GCE:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-OCI-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-Azure-SAP-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-Azure-SAP-On-Demand:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-EC2-SAP-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-EC2-SAP-On-Demand:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-GCE-SAP-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-GCE-SAP-On-Demand:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Desktop 12 SP4:libtiff5-32bit-4.0.9-44.42.1 SUSE Linux Enterprise Desktop 12 SP4:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP4:libtiff5-32bit-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP4:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP4:tiff-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtiff5-32bit-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:tiff-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.42.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libtiff-devel-4.0.9-44.42.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.42.1 low 3.3 AV:L/AC:M/Au:N/C:N/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20193058-1/ https://www.suse.com/security/cve/CVE-2016-5102.html CVE-2016-5102 https://bugzilla.suse.com/983268 SUSE Bug 983268 A NULL pointer dereference in the function _TIFFmemcmp at tif_unix.c (called from TIFFWriteDirectoryTagTransferfunction) in LibTIFF 4.0.9 allows an attacker to cause a denial-of-service through a crafted tiff file. This vulnerability can be triggered by the executable tiffcp. CVE-2018-17000 Container caasp/v4/nginx-ingress-controller:beta1:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-Azure-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-Azure:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-EC2-HVM:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-GCE-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-GCE:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-OCI-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-Azure-SAP-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-Azure-SAP-On-Demand:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-EC2-SAP-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-EC2-SAP-On-Demand:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-GCE-SAP-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-GCE-SAP-On-Demand:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Desktop 12 SP4:libtiff5-32bit-4.0.9-44.42.1 SUSE Linux Enterprise Desktop 12 SP4:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP4:libtiff5-32bit-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP4:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP4:tiff-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtiff5-32bit-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:tiff-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.42.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libtiff-devel-4.0.9-44.42.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.42.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20193058-1/ https://www.suse.com/security/cve/CVE-2018-17000.html CVE-2018-17000 https://bugzilla.suse.com/1108606 SUSE Bug 1108606 https://bugzilla.suse.com/1115717 SUSE Bug 1115717 https://bugzilla.suse.com/1125113 SUSE Bug 1125113 _TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because they rely on compiler behavior that is undefined by the applicable C standards. This can, for example, lead to an application crash. CVE-2019-14973 Container caasp/v4/nginx-ingress-controller:beta1:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-Azure-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-Azure:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-EC2-HVM:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-GCE-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-GCE:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-OCI-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-Azure-SAP-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-Azure-SAP-On-Demand:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-EC2-SAP-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-EC2-SAP-On-Demand:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-GCE-SAP-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-GCE-SAP-On-Demand:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Desktop 12 SP4:libtiff5-32bit-4.0.9-44.42.1 SUSE Linux Enterprise Desktop 12 SP4:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP4:libtiff5-32bit-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP4:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP4:tiff-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtiff5-32bit-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:tiff-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.42.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libtiff-devel-4.0.9-44.42.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.42.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20193058-1/ https://www.suse.com/security/cve/CVE-2019-14973.html CVE-2019-14973 https://bugzilla.suse.com/1146608 SUSE Bug 1146608 The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb. CVE-2019-6128 Container caasp/v4/nginx-ingress-controller:beta1:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-Azure-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-Azure:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-EC2-HVM:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-GCE-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-GCE:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-OCI-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-Azure-SAP-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-Azure-SAP-On-Demand:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-EC2-SAP-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-EC2-SAP-On-Demand:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-GCE-SAP-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-GCE-SAP-On-Demand:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Desktop 12 SP4:libtiff5-32bit-4.0.9-44.42.1 SUSE Linux Enterprise Desktop 12 SP4:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP4:libtiff5-32bit-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP4:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP4:tiff-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtiff5-32bit-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:tiff-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.42.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libtiff-devel-4.0.9-44.42.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.42.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20193058-1/ https://www.suse.com/security/cve/CVE-2019-6128.html CVE-2019-6128 https://bugzilla.suse.com/1121626 SUSE Bug 1121626 https://bugzilla.suse.com/1153715 SUSE Bug 1153715 An Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff/tif_dirwrite.c in LibTIFF 4.0.10, affecting the cpSeparateBufToContigBuf function in tiffcp.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted tiff file. This is different from CVE-2018-12900. CVE-2019-7663 Container caasp/v4/nginx-ingress-controller:beta1:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-Azure-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-Azure:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-EC2-HVM:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-GCE-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-GCE:libtiff5-4.0.9-44.42.1 Image SLES12-SP4-SAP-OCI-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-Azure-SAP-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-Azure-SAP-On-Demand:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-EC2-SAP-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-EC2-SAP-On-Demand:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-GCE-SAP-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-GCE-SAP-On-Demand:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libtiff5-4.0.9-44.42.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Desktop 12 SP4:libtiff5-32bit-4.0.9-44.42.1 SUSE Linux Enterprise Desktop 12 SP4:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP4:libtiff5-32bit-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP4:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP4:tiff-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-32bit-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP5:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Server 12 SP5:tiff-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtiff5-32bit-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:tiff-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-32bit-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libtiff5-4.0.9-44.42.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:tiff-4.0.9-44.42.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libtiff-devel-4.0.9-44.42.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libtiff-devel-4.0.9-44.42.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20193058-1/ https://www.suse.com/security/cve/CVE-2019-7663.html CVE-2019-7663 https://bugzilla.suse.com/1125113 SUSE Bug 1125113