| Errata ID | 325 | 
|---|---|
| Date | 2015-09-23 | 
| Source package | tiff | 
| Fixed in version | 4.0.2-6.61.201509111053 | 
| Description | Multiple security vulnerabilities have been fixed in tiff: * Out-of-bound reads (CVE-2014-8127) * Out-of-bounds write (CVE-2014-8128) * Out-of-bound read and write (CVE-2014-8129) * Integer overflow in tif_packbits.c in bmp2tif in libtiff 4.0.3 allows remote attackers to cause a denial of service (crash) via crafted BMP image, related to dimensions, which triggers an out-of-bounds read (CVE-2014-9330). * Access of uninitialized memory (CVE-2014-9655) * Uninitialized memory in NeXTDecode (CVE-2015-1547)  | 
				
| Additional notes | |
| CVE ID | CVE-2014-8127 CVE-2014-8128 CVE-2014-8129 CVE-2014-9330 CVE-2014-9655 CVE-2015-1547  | 
  
| UCS Bug number | #37434 | 
