openSUSE 42.3: 2018:1834-1 Moderate: TIFF Multiple Issues Fixed

This update for tiff fixes the following issues:

These security issues were fixed:

- CVE-2017-18013: There was a Null-Pointer Dereference in the tif_print.c

TIFFPrintDirectory function, as demonstrated by a tiffinfo crash.

(bsc#1074317)

- CVE-2018-10963: The TIFFWriteDirectorySec() function in tif_dirwrite.c

allowed remote attackers to cause a denial of service (assertion failure

and application crash) via a crafted file, a different vulnerability

than CVE-2017-13726. (bsc#1092949)

- CVE-2018-7456: Prevent a NULL Pointer dereference in the function

TIFFPrintDirectory when using the tiffinfo tool to print crafted TIFF

information, a different vulnerability than CVE-2017-18013 (bsc#1082825)

- CVE-2017-11613: Prevent denial of service in the TIFFOpen function.

During the TIFFOpen process, td_imagelength is not checked. The value of

td_imagelength can be directly controlled by an input file. In the

...