File _patchinfo of Package patchinfo.import4396

<patchinfo incident="libtiff-devel" version="4396">
  <issue tracker="bnc" id="682871" />
  <issue tracker="bnc" id="599475" />
  <issue tracker="bnc" id="687442" />
  <issue tracker="bnc" id="687441" />
  <issue tracker="CVE" id="CVE-2011-1167" />
  <issue tracker="CVE" id="CVE-2010-4665" />
  <category>security</category>
  <rating>low</rating>
  <summary>tiff security update</summary>
  <description>Specially crafted tiff files could cause a heap-based
buffer overflow in the thunder- and ojpeg-decoders
(CVE-2011-1167, CVE-2009-5022).

Directories with a large number of files could cause an
integer overflow in the tiffdump tool (CVE-2010-4665)
</description>
  <packager>adrianSuSE</packager>
</patchinfo>