tiff - security update

Fixed packages 1

Vulnerabilities 17

• Critical 9.8
  CVE-2016-9535

  tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or …

  tiff tiff Debian Ubuntu
  Nov 22, 2016
• High 8.8
  CVE-2017-5225

  LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution vi…

  tiff tiff tiff Debian Ubuntu Alpine
  Jan 12, 2017
• Unscored —
  CVE-2016-10092

  Heap-based buffer overflow in the readContigStripsIntoBuffer function in tif_unix.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9…

  tiff tiff Debian Ubuntu
  Mar 1, 2017
• Unscored —
  CVE-2016-10093

  Integer overflow in tools/tiffcp.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0…

  tiff tiff Debian Ubuntu
  Mar 1, 2017
• Unscored —
  CVE-2016-10271

  tools/tiffcrop.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read and…

  tiff tiff Debian Ubuntu
  Mar 24, 2017
• Unscored —
  CVE-2016-10272

  LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspec…

  tiff tiff Debian Ubuntu
  Mar 24, 2017
• Unscored —
  CVE-2016-3622

  The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause…

  tiff tiff tiff Debian Ubuntu Alpine
  Oct 3, 2016
• Unscored —
  CVE-2016-3623

  The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero) b…

  tiff tiff tiff Debian Ubuntu Alpine
  Oct 3, 2016
• Unscored —
  CVE-2016-3624

  The cvtClump function in the rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of s…

  tiff tiff tiff Debian Ubuntu Alpine
  Oct 3, 2016
• Unscored —
  CVE-2016-3945

  Multiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba tool in LibTIFF 4.0.6…

  tiff tiff Debian Ubuntu
  Sep 21, 2016
• Unscored —
  CVE-2016-3990

  Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows …

  tiff tiff Debian Ubuntu
  Sep 21, 2016
• Unscored —
  CVE-2016-9533

  tif_pixarlog.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers. Reported as MSVR 350…

  tiff tiff Debian Ubuntu
  Nov 22, 2016
• Unscored —
  CVE-2016-9534

  tif_write.c in libtiff 4.0.6 has an issue in the error code path of TIFFFlushData1() that didn't reset the tif_rawcc an…

  tiff tiff Debian Ubuntu
  Nov 22, 2016
• Unscored —
  CVE-2016-9536

  tools/tiff2pdf.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers in t2p_process_jpeg…

  tiff tiff Debian Ubuntu
  Nov 22, 2016
• Unscored —
  CVE-2016-9537

  tools/tiffcrop.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in buffers. Reported as MSVR 35093, MSVR 3509…

  tiff tiff Debian Ubuntu
  Nov 22, 2016
• Unscored —
  CVE-2016-9538

  tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer() because of a uint16 integer…

  tiff tiff Debian Ubuntu
  Nov 22, 2016
• Unscored —
  CVE-2016-9540

  tools/tiffcp.c in libtiff 4.0.6 has an out-of-bounds write on tiled images with odd tile width versus image width. Repo…

  tiff tiff Debian Ubuntu
  Nov 22, 2016