Support / Security / Advisories / Mandriva Linux 2010.0 / MDVSA-2010:190

Package name: libtiff
Date: 2010-09-30
Advisory ID: MDVSA-2010:190
Affected versions: 2010.1 x86_64 , 2010.1 i586 , 2010.0 x86_64 , 2010.0 i586

Problem description

A vulnerability has been found and corrected in libtiff:

libtiff allows remote attackers to cause a denial of service (memory
corruption) or possibly execute arbitrary code via a crafted TIFF image
(CVE-2010-3087).

The updated packages have been patched to correct this issue.

Updated packages

2010.1 x86_64

 7e2f4e77a6a21b6d40e56ba749255663  2010.1/x86_64/lib64tiff3-3.9.2-2.2mdv2010.1.x86_64.rpm
 2cb3d2b40dab319c05e4433459f58d9a  2010.1/x86_64/lib64tiff-devel-3.9.2-2.2mdv2010.1.x86_64.rpm
 2bf4e1e3af663a6e5302569bf0c83e85  2010.1/x86_64/lib64tiff-static-devel-3.9.2-2.2mdv2010.1.x86_64.rpm
 70a28d16e45cdf605b8934db1d0b19bd  2010.1/x86_64/libtiff-progs-3.9.2-2.2mdv2010.1.x86_64.rpm 
 bf48dc03b25d28066efdb425467c582a  2010.1/SRPMS/libtiff-3.9.2-2.2mdv2010.1.src.rpm

2010.1 i586

 d84de6ef887a4ec845b40c057b0867d2  2010.1/i586/libtiff3-3.9.2-2.2mdv2010.1.i586.rpm
 0bfe226ddb052019e2bd968b63f5b7e5  2010.1/i586/libtiff-devel-3.9.2-2.2mdv2010.1.i586.rpm
 805a4481b8cd4a534c5bd726c8d69d3e  2010.1/i586/libtiff-progs-3.9.2-2.2mdv2010.1.i586.rpm
 ff5e230a1846486cb2fd9890979e0904  2010.1/i586/libtiff-static-devel-3.9.2-2.2mdv2010.1.i586.rpm 
 bf48dc03b25d28066efdb425467c582a  2010.1/SRPMS/libtiff-3.9.2-2.2mdv2010.1.src.rpm

2010.0 x86_64

 7fc11e665c9cdb28746a71f598d0487d  2010.0/x86_64/lib64tiff3-3.9.1-4.2mdv2010.0.x86_64.rpm
 868a7bae3f7a398b8dbfa14bab49b6bc  2010.0/x86_64/lib64tiff-devel-3.9.1-4.2mdv2010.0.x86_64.rpm
 7e9bb51eaef512e5789c4536fed505a0  2010.0/x86_64/lib64tiff-static-devel-3.9.1-4.2mdv2010.0.x86_64.rpm
 d3a539d687681d3f4969d15648fc3fc7  2010.0/x86_64/libtiff-progs-3.9.1-4.2mdv2010.0.x86_64.rpm 
 da91763837c44f372b99b7e2acd75a78  2010.0/SRPMS/libtiff-3.9.1-4.2mdv2010.0.src.rpm

2010.0 i586

 8da5ca0cc2a92b092601d1185525da3c  2010.0/i586/libtiff3-3.9.1-4.2mdv2010.0.i586.rpm
 1b974411049709e02efa46b455165101  2010.0/i586/libtiff-devel-3.9.1-4.2mdv2010.0.i586.rpm
 8b432e1863bb2dbd24a694b4b64cad89  2010.0/i586/libtiff-progs-3.9.1-4.2mdv2010.0.i586.rpm
 0c7d5f731a4abd9f7d784af1515cd4b2  2010.0/i586/libtiff-static-devel-3.9.1-4.2mdv2010.0.i586.rpm 
 da91763837c44f372b99b7e2acd75a78  2010.0/SRPMS/libtiff-3.9.1-4.2mdv2010.0.src.rpm

References

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3087