Mageia alert MGASA-2018-0208 (libtiff)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2018-0208: Updated libtiff packages fix security vulnerability 
Date:
    	     
 
Fri, 20 Apr 2018 19:24:54 +0200
Message-ID:
    	     
 
<20180420172454.4F32E9FC5D@duvel.mageia.org>
MGASA-2018-0208 - Updated libtiff packages fix security vulnerability

Publication date: 20 Apr 2018
URL: https://advisories.mageia.org/MGASA-2018-0208.html
Type: security
Affected Mageia releases: 5, 6
CVE: CVE-2018-7456

Description:
A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in
tif_print.c in LibTIFF 4.0.9 when using the tiffinfo tool to print
crafted TIFF information, a different vulnerability than CVE-2017-18013.
(This affects an earlier part of the TIFFPrintDirectory function that
was not addressed by the CVE-2017-18013 patch.). (CVE-2018-7456)

References:
- https://bugs.mageia.org/show_bug.cgi?id=22920
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7456

SRPMS:
- 5/core/libtiff-4.0.9-1.3.mga5
- 6/core/libtiff-4.0.9-1.3.mga6