Errata overview
Errata ID 438
Date 2016-06-22
Source package tiff
Fixed in version 3.9.4-5.56.201606131354
Description
This update addresses the following issues:
* Potential out-of-bound write in NeXTDecode() (CVE-2015-8784)
* Out-of-band read/write when decoding invalid data (CVE-2015-8781,
  CVE-2015-8782, CVE-2015-8783)
* Out-of-bounds read in CIE Lab image format (CVE-2015-8683)
* Out-of-bounds read in TIFFRGBAImage interface (CVE-2015-8665)
* Out-of-bounds reads in NeXT 2-bit Grey Scale Compression Algorithm decoder
  and YCbCr-RGB converters (CVE-2014-9655)
* Out-of-bounds read in bmp2tiff (CVE-2014-9330)
* Out-of-bounds read and write in NeXT 2-bit Grey Scale Compression Algorithm
  decoder (CVE-2014-8129)
* Out-of-bounds writes (CVE-2014-8128)
* Out-of-bounds reads (CVE-2014-8127)
* Validation for gif2tiff (CVE-2013-4243)
Additional notes
CVE ID CVE-2015-8784
CVE-2015-8783
CVE-2015-8782
CVE-2015-8781
CVE-2015-8683
CVE-2015-8665
CVE-2014-9655
CVE-2014-9330
CVE-2014-8129
CVE-2014-8128
CVE-2014-8127
CVE-2013-4243
UCS Bug number #33832