openSUSE Security Update : tiff (openSUSE-2016-1069)
Medium Nessus Plugin ID 93432
Synopsis
The remote openSUSE host is missing a security update.
Description
This update for tiff fixes the following issues :
- CVE-2016-3623: A divide by zero was fixed in the rgb2ycbcr tool. (bsc#974618)
- CVE-2016-3945: An out-of-bounds write was fixed in the tiff2rgba tool. (bsc#974614)
- CVE-2016-3990: An out-of-bounds write in horizontalDifference8() in tiffcp tool (bsc#975069)
- CVE-2016-3991: An out-of-bounds write in loadImage() in tiffcrop tool (bsc#975070)
Solution
Update the affected tiff packages.