libTIFF: Denial of service A vulnerability in libTIFF could lead to a Denial of Service condition. tiff 2019-04-15 2019-04-15 669948 remote 4.0.10 4.0.10

The TIFF library contains encoding and decoding routines for the Tag Image File Format. It is called by numerous programs, including GNOME and KDE applications, to interpret TIFF images.

Please review the CVE identifier referenced below for details.

Please review the CVE identifier referenced below for details.

There is no known workaround at this time.

All tiff users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/tiff-4.0.10"
CVE-2018-18557 BlueKnight b-man