Alerts This Week
Warning Icon 1 666
Alerts This Week
Warning Icon 1 666

SUSE Linux Enterprise 2012: 0894-1 Important: Libtiff Overflow Exploit

suse
Calendar Grey July 19, 2012
Dist Suse Esm H88
SUSE Security Update for libjpeg tackling critical vulnerabilities, including memory leaks, with efficient remediation measures.
An update that fixes two vulnerabilities is now available

Summary

The following issue has been fixed: * Specially crafted tiff files could have caused overflows in libtiff (CVE-2012-2088, CVE-2012-2113). Security Issue references: * CVE-2012-2088 * CVE-2012-2113 Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp1-libtiff-devel-6475 - SUSE Linux Enterprise Software Development Kit 11 SP1: zypper in -t patch sdksp1-libtiff-devel-6475 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp1-libtiff-devel-6475

References

#767852 #767854

Cross- CVE-2012-2088 CVE-2012-2113

Affected Products:

SUSE Linux Enterprise Software Development Kit 11 SP2

SUSE Linux Enterprise Software Development Kit 11 SP1

SUSE Linux Enterprise Server 11 SP2

SUSE Linux Enterprise Server 11 SP1 for VMware

SUSE Linux Enterprise Server 11 SP1

SUSE Linux Enterprise Server 10 SP4

SUSE Linux Enterprise Desktop 11 SP2

SUSE Linux Enterprise Desktop 11 SP1

SUSE Linux Enterprise Desktop 10 SP4

SLE SDK 10 SP4

https://www.suse.com/security/cve/CVE-2012-2088.html

https://www.suse.com/security/cve/CVE-2012-2113.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2012:0894-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here