Bug 193167

Summary:	tiffsplit buffer overflow
Product:	[Fedora] Fedora	Reporter:	Josh Bressers <bressers>
Component:	libtiff	Assignee:	Jindrich Novy <jnovy>
Status:	CLOSED ERRATA	QA Contact:
Severity:	low	Docs Contact:
Priority:	medium
Version:	5	CC:	pknirsch
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:	source=vuln-dev,reported=20060525,public=20060525,impact=low
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2006-09-25 12:41:14 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Josh Bressers 2006-05-25 20:13:42 UTC

tiffsplit buffer overflow

A buffer overflow issue has been found in libtiff's tiffsplit command.
More information is at the below URL:

http://marc.theaimsgroup.com/?l=vuln-dev&m=114857412916909&w=2


This issue also affects FC4

Comment 1 Fedora Update System 2006-05-26 03:50:13 UTC

libtiff-3.7.4-6 has been pushed for fc5, which should resolve this issue.  If these problems are still present in this version, then please make note of it in this bug report.

Comment 2 Hisaya FUKUMOTO 2006-05-27 14:30:16 UTC

the patch#2 (tiffsplit-overflow.patch) is not applied.
please check a spec file.

Comment 3 Matthias Clasen 2006-05-28 05:57:57 UTC

arr, thanks for noticing. new package is on the way

Comment 4 Jindrich Novy 2006-09-05 13:31:35 UTC

Fixed in upstream libtiff-3.8.2. Update is on the way.