Red Hat Security Advisory 2019-2053-01 - The libtiff packages contain a library of functions for manipulating Tagged Image File Format files. Issues addressed include buffer overflow, code execution, denial of service, and null pointer vulnerabilities.
eefda7eb2b6cef18da02e156dd6be995cf60b244b555c2542e43adb2561d2f44
Gentoo Linux Security Advisory 201904-15 - A vulnerability in libTIFF could lead to a Denial of Service condition. Versions less than 4.0.10 are affected.
097c14af7c9924c19b9c7c25395c1047732dbeb1eabbaae2598c929474e8da87
Debian Linux Security Advisory 4349-1 - Multiple vulnerabilities have been discovered in the libtiff library and the included tools, which may result in denial of service or the execution of arbitrary code if malformed image files are processed.
597636028cf6fce3b37cc13331b6c734b2186e726f874a4676bb2b0b78cb8777
libtiff up to and including 4.0.9 decodes arbitrarily-sized JBIG into a buffer, ignoring the buffer size.
2add576a08028a74562995e308d683181780cd67773254393cf326582e328c29