openSUSE Security Update : tiff (openSUSE-2017-281)
High Nessus Plugin ID 97290
SynopsisThe remote openSUSE host is missing a security update.
DescriptionThis update for tiff fixes the following issues :
- CVE-2017-5225: A crafted TIFF image could cause a crash and potential code execution when processed by the 'tiffcp' utility (bsc#1019611).
Also a regression from the version update to 4.0.7 was fixed in handling TIFFTAG_FAXRECVPARAMS. (bsc#1022103)
This update was imported from the SUSE:SLE-12:Update update project.
SolutionUpdate the affected tiff packages.