Errata ID | 410 |
---|---|
Date | 2017-04-19 |
Source package | tiff3 |
Fixed in version | 3.9.6-11.6.201704101339 |
Description | This update addresses the following issues: * Applications using libtiff can trigger buffer overflows through TIFFGetField() when processing TIFF images with unknown tags (CVE-2015-7554, CVE-2016-5318) * an out of bounds write in tif_luv.c (CVE-2015-8781) * other out-of-bounds writes (CVE-2015-8782) * other out-of-bounds reads (CVE-2015-8783) * potential out-of-bound write in NeXTDecode (CVE-2015-8784) * tif_pixarlog.c has out-of-bounds write vulnerabilities in heap allocated buffers (CVE-2016-9533) * tif_write.c has an issue in the error code path of TIFFFlushData1() that didn't reset the tif_rawcc and tif_rawcp members (CVE-2016-9534) * tif_predict.h and tif_predict.c have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling (CVE-2016-9535) |
Additional notes | |
CVE ID | CVE-2015-7554 CVE-2016-5318 CVE-2015-8781 CVE-2015-8782 CVE-2015-8783 CVE-2015-8784 CVE-2016-9533 CVE-2016-9534 CVE-2016-9535 |
UCS Bug number | #42897 |