Scientific Linux Security Update : libtiff on 7.x i686/x86_64 (2016:1546)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2016:1546-1 advisory. Security Fixes: Multiple flaws have been discovered in libtiff. A remote attacker could exploit these flaws to cause a crash or memory corruption...

RedHat Update for libtiff RHSA-2016:1546-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Scientific Linux Security Update : libtiff on 6.x i686/x86_64 (2016:1547)

The remote Scientific Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2016:1547-1 advisory. Security Fixes: Multiple flaws have been discovered in libtiff. A remote attacker could exploit these flaws to cause a crash or memory corruption...

CentOS 6 : libtiff (CESA-2016:1547)

The remote CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2016:1547 advisory. - Heap-based buffer overflow in the PackBitsPreEncode function in tifpackbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to...

OracleVM 3.3 / 3.4 : libtiff (OVMSA-2016-0093)

The remote OracleVM system is missing necessary patches to address critical security updates : - Update patch for CVE-2014-8127 - Related: 1335099 - Fix patches for CVE-2016-3990, CVE-2016-5320 - Related: 1335099 - Add patches for CVEs : - CVE-2016-3632 CVE-2016-3945 CVE-2016-3990 - CVE-2016-3991...

CVE-2014-9655

The 1 putcontig8bitYCbCr21tile function in tifgetimage.c or 2 NeXTDecode function in tifnext.c in LibTIFF allows remote attackers to cause a denial of service uninitialized memory access via a crafted TIFF image, as demonstrated by libtiff-cvs-1.tif and libtiff-cvs-2.tif...

CVE-2014-9655

CVE-2014-9655 affects LibTIFF: the putcontig8bitYCbCr21tile function in tif_getimage.c or the NeXTDecode function in tif_next.c can be triggered by a crafted TIFF image to cause a denial of service via uninitialized memory access. Connected advisories (Debian, CentOS, Red Hat, Amazon) describe mu...

SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2015:1475-1)

LibTiff was updated to the 4.0.4 stable release fixing various security issues and bugs. These security issues were fixed : - CVE-2014-8127: Out-of-bounds write bnc914890. - CVE-2014-8128: Out-of-bounds write bnc914890. - CVE-2014-8129: Out-of-bounds write bnc914890. - CVE-2014-8130: Out-of-bound...

SUSE SLED11 / SLES11 Security Update : tiff (SUSE-SU-2015:1420-1)

tiff was updated to fix six security issues found by fuzzing initiatives. These security issues were fixed : - CVE-2014-8127: Out-of-bounds write bnc914890. - CVE-2014-8128: Out-of-bounds write bnc914890. - CVE-2014-8129: Out-of-bounds write bnc914890. - CVE-2014-8130: Out-of-bounds write...

SUSE-SU-2015:1420-1 Security update for tiff

tiff was updated to fix six security issues found by fuzzing initiatives. These security issues were fixed: - CVE-2014-8127: Out-of-bounds write bnc914890. - CVE-2014-8128: Out-of-bounds write bnc914890. - CVE-2014-8129: Out-of-bounds write bnc914890. - CVE-2014-8130: Out-of-bounds write bnc91489...

Fedora Update for mingw-libtiff FEDORA-2015-6907

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux AMI : libtiff (ALAS-2015-553)

Use of uninitialized memory was reported in in libtiff. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux AMI Security Advisory ALAS-2015-553. include"compat.inc"; if description scriptid84370; scriptversion"2.4";...

Medium: libtiff

Issue Overview: Use of uninitialized memory was reported in in libtiff. Affected Packages: libtiff Issue Correction: Run yum update libtiff or yum update --advisory ALAS-2015-553 to update your system. New Packages: i686: libtiff-4.0.3-20.20.amzn1.i686 ...

Fedora 21 : libtiff-4.0.3-20.fc21 (2015-8673)

Security fix for CVE-2014-9655, CVE-2015-1547 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

[SECURITY] [DSA 3273-1] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3273-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 25, 2015 http://www.debian.org/security/faq -...

Debian DLA-221-1 : tiff security update

Several vulnerabilities have been discovered in the LibTIFF library and utilities for the Tag Image File Format. These could lead to a denial of service, information disclosure or privilege escalation. CVE-2014-8128 William Robinet discovered that out-of-bounds writes are triggered in several of...

Fedora 21 : mingw-libtiff-4.0.3-6.fc21 (2015-6903)

Fix CVE-2014-9655 and CVE-2015-1547 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

Fedora 22 : mingw-libtiff-4.0.3-6.fc22 (2015-6907)

Fix CVE-2014-9655 and CVE-2015-1547 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

[ MDVSA-2015:147-1 ] libtiff

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:147-1 http://www.mandriva.com/en/support/security/ Package : libtiff Date : March 30, 2015 Affected: Business Server 1.0 Problem Description: Updated libtiff packages fix security vulnerabilities: The libtif...

MGASA-2015-0112 Updated libtiff packages fix security vulnerabilities

The libtiff image decoder library contains several issues that could cause the decoder to crash when reading crafted TIFF images CVE-2014-8127, CVE-2014-8128, CVE-2014-8129, CVE-2014-8130, CVE-2014-9655, CVE-2015-1547...