Nom du paquet
libtiff
Date
2006-02-17
Advisory ID
MDKSA-2006:042
Affected versions
MNF2.0 i586 , 2006.0 i586 , CS2.1 i586 , 10.2 i586 , 10.1 i586 , CS2.1 x86_64 , CS3.0 x86_64 , CS3.0 i586 , 10.2 x86_64 , 2006.0 x86_64 , 10.1 x86_64

Problem description

Stack-based buffer overflow in libTIFF before 3.7.2 allows remote
attackers to execute arbitrary code via a TIFF file with a malformed
BitsPerSample tag. Although some of the previous updates appear to
already catch this issue, this update adds some additional checks.

The updated packages have been patched to correct this issue.

Updated packages

MNF2.0 i586

 b63546d645da0f9c2ef4c70e7e0180c2  mnf/2.0/RPMS/libtiff3-3.5.7-11.8.M20mdk.i586.rpm
 1871103683da18c6621fca20f600e2a9  mnf/2.0/SRPMS/libtiff-3.5.7-11.8.M20mdk.src.rpm

2006.0 i586

 a348fb50ca0b796b8de29c5a73d948cd  2006.0/RPMS/libtiff3-3.6.1-12.1.20060mdk.i586.rpm
 c8b9e7ac743064143fa4e2ec33d7a0be  2006.0/RPMS/libtiff3-devel-3.6.1-12.1.20060mdk.i586.rpm
 423e3c0e276dc3cbd2133f28c4455a01  2006.0/RPMS/libtiff3-static-devel-3.6.1-12.1.20060mdk.i586.rpm
 a662c2a15e11ce1904f1c2b16e307b47  2006.0/RPMS/libtiff-progs-3.6.1-12.1.20060mdk.i586.rpm
 5b3c613b0cf4914f2ea7980bee0b1075  2006.0/SRPMS/libtiff-3.6.1-12.1.20060mdk.src.rpm

CS2.1 i586

 65625cf6d2423e08cb55aa3072ea8bc0  corporate/2.1/RPMS/libtiff3-3.5.7-6.3.C21mdk.i586.rpm
 c2885652d48ee7ab99eb9d8cbd1c9b96  corporate/2.1/RPMS/libtiff3-devel-3.5.7-6.3.C21mdk.i586.rpm
 46d494dc83316008bc9d42afe1d3cae1  corporate/2.1/RPMS/libtiff3-progs-3.5.7-6.3.C21mdk.i586.rpm
 8dbb15a50d95c1eb6ce10a196ded4a33  corporate/2.1/RPMS/libtiff3-static-devel-3.5.7-6.3.C21mdk.i586.rpm
 f59c7c98fbf88e7b9fdc4b8700b57c73  corporate/2.1/SRPMS/libtiff-3.5.7-6.3.C21mdk.src.rpm

10.2 i586

 c068584c7aa1ae89efb36ce0c5b14160  10.2/RPMS/libtiff3-3.6.1-11.2.102mdk.i586.rpm
 6eb5cf9446d9a496e8aae64dc7492c2b  10.2/RPMS/libtiff3-devel-3.6.1-11.2.102mdk.i586.rpm
 45f8f2c2150e0a61987f5cfd260e8b95  10.2/RPMS/libtiff3-static-devel-3.6.1-11.2.102mdk.i586.rpm
 506c68775de8e38d241ffe9b3781157f  10.2/RPMS/libtiff-progs-3.6.1-11.2.102mdk.i586.rpm
 f7e150907d233e23ef76ea789b2d7c44  10.2/SRPMS/libtiff-3.6.1-11.2.102mdk.src.rpm

10.1 i586

 9530bfcd8e569b46eba4dd512e0bfe5a  10.1/RPMS/libtiff3-3.6.1-4.5.101mdk.i586.rpm
 483c2c0896b6cf200e7c51311b074a27  10.1/RPMS/libtiff3-devel-3.6.1-4.5.101mdk.i586.rpm
 07cbbe83a27bd3a92c23bcff410f3e13  10.1/RPMS/libtiff3-static-devel-3.6.1-4.5.101mdk.i586.rpm
 5bbdf0e8b3d5e9cc98a0c291d9629f1a  10.1/RPMS/libtiff-progs-3.6.1-4.5.101mdk.i586.rpm
 3a506f7863e4763bedfd59eace7fa35d  10.1/SRPMS/libtiff-3.6.1-4.5.101mdk.src.rpm

CS2.1 x86_64

 f8a50f3bdd54476f4feddaf38766e327  x86_64/corporate/2.1/RPMS/libtiff3-3.5.7-6.3.C21mdk.x86_64.rpm
 6a27ba65a07c0bfd85d6af99c458b16e  x86_64/corporate/2.1/RPMS/libtiff3-devel-3.5.7-6.3.C21mdk.x86_64.rpm
 834b25ee89971b460f2d4e5b30a43d70  x86_64/corporate/2.1/RPMS/libtiff3-progs-3.5.7-6.3.C21mdk.x86_64.rpm
 b4af9bc083105212ce679785a563f848  x86_64/corporate/2.1/RPMS/libtiff3-static-devel-3.5.7-6.3.C21mdk.x86_64.rpm
 f59c7c98fbf88e7b9fdc4b8700b57c73  x86_64/corporate/2.1/SRPMS/libtiff-3.5.7-6.3.C21mdk.src.rpm

CS3.0 x86_64

 3d3ee562fb7d7503c21fa54f163fe061  x86_64/corporate/3.0/RPMS/lib64tiff3-3.5.7-11.8.C30mdk.x86_64.rpm
 42b9a9ffd0e4895d434319d848f841bf  x86_64/corporate/3.0/RPMS/lib64tiff3-devel-3.5.7-11.8.C30mdk.x86_64.rpm
 3952bcda92d9825531f8cec3a038ea67  x86_64/corporate/3.0/RPMS/lib64tiff3-static-devel-3.5.7-11.8.C30mdk.x86_64.rpm
 074665c6eb7034690e3631e1d8daa8f3  x86_64/corporate/3.0/RPMS/libtiff-progs-3.5.7-11.8.C30mdk.x86_64.rpm
 f834190347e2d9882bac86ac8ee6bb16  x86_64/corporate/3.0/SRPMS/libtiff-3.5.7-11.8.C30mdk.src.rpm

CS3.0 i586

 3e938fac8a5ab8a63d00b09b9da396e4  corporate/3.0/RPMS/libtiff3-3.5.7-11.8.C30mdk.i586.rpm
 b69459e20122fd6eb003c6b3b156a7c4  corporate/3.0/RPMS/libtiff3-devel-3.5.7-11.8.C30mdk.i586.rpm
 883ee31b2a0dda864356d834e79651fc  corporate/3.0/RPMS/libtiff3-static-devel-3.5.7-11.8.C30mdk.i586.rpm
 86b6d48a497624f5adc80d8729e654a1  corporate/3.0/RPMS/libtiff-progs-3.5.7-11.8.C30mdk.i586.rpm
 f834190347e2d9882bac86ac8ee6bb16  corporate/3.0/SRPMS/libtiff-3.5.7-11.8.C30mdk.src.rpm

10.2 x86_64

 d1bceb9a12fed4fbcd0649252a1ecd1b  x86_64/10.2/RPMS/lib64tiff3-3.6.1-11.2.102mdk.x86_64.rpm
 1a434979ec411035eae2374a65642f52  x86_64/10.2/RPMS/lib64tiff3-devel-3.6.1-11.2.102mdk.x86_64.rpm
 9b1cf2d651f192e8791ee334c1992708  x86_64/10.2/RPMS/lib64tiff3-static-devel-3.6.1-11.2.102mdk.x86_64.rpm
 ca642fa17270dcd6a6ac7b09b00be8e3  x86_64/10.2/RPMS/libtiff-progs-3.6.1-11.2.102mdk.x86_64.rpm
 f7e150907d233e23ef76ea789b2d7c44  x86_64/10.2/SRPMS/libtiff-3.6.1-11.2.102mdk.src.rpm

2006.0 x86_64

 412a93e90c8ca0033222fb4fa285c40c  x86_64/2006.0/RPMS/lib64tiff3-3.6.1-12.1.20060mdk.x86_64.rpm
 a616419d1dac42e6378568d506af3243  x86_64/2006.0/RPMS/lib64tiff3-devel-3.6.1-12.1.20060mdk.x86_64.rpm
 a2b13420b237f20594c99e67f41280b9  x86_64/2006.0/RPMS/lib64tiff3-static-devel-3.6.1-12.1.20060mdk.x86_64.rpm
 b123710dd7bac780cafa6b364d0c66c6  x86_64/2006.0/RPMS/libtiff-progs-3.6.1-12.1.20060mdk.x86_64.rpm
 5b3c613b0cf4914f2ea7980bee0b1075  x86_64/2006.0/SRPMS/libtiff-3.6.1-12.1.20060mdk.src.rpm

10.1 x86_64

 654b54562e56514e58ef4399994828fa  x86_64/10.1/RPMS/lib64tiff3-3.6.1-4.5.101mdk.x86_64.rpm
 343bbae6a7abe46b24a202a02821a07e  x86_64/10.1/RPMS/lib64tiff3-devel-3.6.1-4.5.101mdk.x86_64.rpm
 6d0de9e296c970d08a564083e21a2786  x86_64/10.1/RPMS/lib64tiff3-static-devel-3.6.1-4.5.101mdk.x86_64.rpm
 7e0eccb8d37af9b708b388a6d4d75d54  x86_64/10.1/RPMS/libtiff-progs-3.6.1-4.5.101mdk.x86_64.rpm
 3a506f7863e4763bedfd59eace7fa35d  x86_64/10.1/SRPMS/libtiff-3.6.1-4.5.101mdk.src.rpm

References