Errata overview
Errata ID 325
Date 2015-09-23
Source package tiff
Fixed in version 4.0.2-6.61.201509111053
Description
Multiple security vulnerabilities have been fixed in tiff:
* Out-of-bound reads (CVE-2014-8127)
* Out-of-bounds write (CVE-2014-8128)
* Out-of-bound read and write (CVE-2014-8129)
* Integer overflow in tif_packbits.c in bmp2tif in libtiff 4.0.3
  allows remote attackers to cause a denial of service (crash) via
  crafted BMP image, related to dimensions, which triggers an
  out-of-bounds read (CVE-2014-9330).
* Access of uninitialized memory (CVE-2014-9655)
* Uninitialized memory in NeXTDecode (CVE-2015-1547)
Additional notes
CVE ID CVE-2014-8127
CVE-2014-8128
CVE-2014-8129
CVE-2014-9330
CVE-2014-9655
CVE-2015-1547
UCS Bug number #37434