libtiff-3.9.4-5.AXS4

エラータID: AXSA:2012-514:01

Release date: 
Thursday, April 19, 2012 - 14:45
Subject: 
libtiff-3.9.4-5.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

The libtiff package contains a library of functions for manipulating TIFF (Tagged Image File Format) image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large.

The libtiff package should be installed if you need to manipulate TIFF format image files.

Security issues fixed with this release:

CVE-2012-1173
No description available at the time of writing, please use the CVE links below.

Solution: 

Update packages.

CVEs: 
CVE-2012-1173
Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the (1) gtTileSeparate or (2) gtStripSeparate function, leading to a heap-based buffer overflow.


Additional Info: 

N/A

Download: 

SRPMS
  1. libtiff-3.9.4-5.AXS4.src.rpm
    MD5: 5008733967d43daf75dc868e74900ef2
    SHA-256: eebe6aadca0c4edd41efb9bb19c9018c624af41c0fee473832496ebde29ea046
    Size: 1.39 MB

Asianux Server 4 for x86
  1. libtiff-3.9.4-5.AXS4.i686.rpm
    MD5: c93e1b0adefba7f3a3e07c4e26a2996d
    SHA-256: f8d63b890b24c980e658792b72dd98c59ce4e0d0d134850a1c1af96b8886c2e4
    Size: 336.59 kB
  2. libtiff-devel-3.9.4-5.AXS4.i686.rpm
    MD5: 259067e32da117a507c2aca5105d463e
    SHA-256: 634dafc5bcfc161301792b4758c64edece82a492d846304c09cb8ef1dacee1d8
    Size: 467.48 kB

Asianux Server 4 for x86_64
  1. libtiff-3.9.4-5.AXS4.x86_64.rpm
    MD5: 7b48a5e5a754b06ae3ede0bc843b9c56
    SHA-256: 5c46f2129705d6eec4570653cf0c7732e238bdb72330c04053dd4650ef7471d1
    Size: 340.02 kB
  2. libtiff-devel-3.9.4-5.AXS4.x86_64.rpm
    MD5: c75125b4efce51ee6418298f3b6909fa
    SHA-256: 4981bece314beab909d4f52bf224c10bedb40eb52d915f7f4a4f7817f32a0711
    Size: 467.06 kB
  3. libtiff-3.9.4-5.AXS4.i686.rpm
    MD5: c93e1b0adefba7f3a3e07c4e26a2996d
    SHA-256: f8d63b890b24c980e658792b72dd98c59ce4e0d0d134850a1c1af96b8886c2e4
    Size: 336.59 kB
  4. libtiff-devel-3.9.4-5.AXS4.i686.rpm
    MD5: 259067e32da117a507c2aca5105d463e
    SHA-256: 634dafc5bcfc161301792b4758c64edece82a492d846304c09cb8ef1dacee1d8
    Size: 467.48 kB