SuSE has issued an update for libtiff. This fixes some vulnerabilities, which can be exploited by malicious people to compromise a vulnerable system or cause a DoS (Denial of Service).

For more information:
SA12818

This also fixes a boundary error in the OJPEG (old JPEG) handling, which can be exploited to cause a buffer overflow and execute arbitrary code.

Solution
Apply updated packages.
Further details available in Customer Area

Provided and/or discovered by
OJPEG vulnerability reported by:
Andrei Nigmatulin

Original Advisory
SuSE:
http://www.suse.de/de/security/2004_38_libtiff.html

iDEFENSE:
http://www.idefense.com/application/poi/display?id=154&type=vulnerabilities

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area