Errata overview
Errata ID 290
Date 2016-10-12
Source package tiff
Fixed in version 4.0.2-6.62.201609231243
Description
This update addresses the following issue(s):
* Out-of-bounds read in TIFFRGBAImage interface (CVE-2015-8665)
* Out-of-bounds read in CIE Lab image format (CVE-2015-8683)
* an out of bounds write in tif_luv.c (CVE-2015-8781)
* other out-of-bounds writes (CVE-2015-8782)
* other out-of-bounds reads (CVE-2015-8783)
* potential out-of-bound write in NeXTDecode (CVE-2015-8784)
* tiffcrop: out-of-bounds write in loadImage() (CVE-2016-3991)
* PixarLogDecode() out-of-bound writes (CVE-2016-5314)
* tif_dir.c: setByteArray() Read access violation (CVE-2016-5315)
* tif_pixarlog.c: PixarLogCleanup() Segmentation fault
  (CVE-2016-5316)
* GNOME nautilus: crash occurs when generating a thumbnail for a
  crafted TIFF image (CVE-2016-5317)
* rgb2ycbcr: command excution (CVE-2016-5320)
* DumpModeDecode(): Ddos (CVE-2016-5321)
* extractContigSamplesBytes: out-of-bounds read (CVE-2016-5322)
* tiffcrop _TIFFFax3fillruns(): NULL pointer dereference
  (CVE-2016-5323)
* tiff: heap-based buffer overflow when using the PixarLog
  compression format (CVE-2016-5875)
* tiff: information leak in libtiff/tif_read.c (CVE-2016-6223)
Additional notes
CVE ID CVE-2015-8665
CVE-2015-8683
CVE-2015-8781
CVE-2015-8782
CVE-2015-8783
CVE-2015-8784
CVE-2016-3991
CVE-2016-5314
CVE-2016-5315
CVE-2016-5316
CVE-2016-5317
CVE-2016-5320
CVE-2016-5321
CVE-2016-5322
CVE-2016-5323
CVE-2016-5875
CVE-2016-6223
UCS Bug number #40406