Bug 996468 (CVE-2013-4244)
| Summary: | CVE-2013-4244 libtiff (gif2tiff): OOB Write in LZW decompressor | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | Huzaifa S. Sidhpurwala <huzaifas> | ||||||
| Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> | ||||||
| Status: | CLOSED ERRATA | QA Contact: | |||||||
| Severity: | medium | Docs Contact: | |||||||
| Priority: | medium | ||||||||
| Version: | unspecified | CC: | gbarros, jkurik, phracek, security-response-team | ||||||
| Target Milestone: | --- | Keywords: | Security | ||||||
| Target Release: | --- | ||||||||
| Hardware: | All | ||||||||
| OS: | Linux | ||||||||
| Whiteboard: | |||||||||
| Fixed In Version: | Doc Type: | Bug Fix | |||||||
| Doc Text: | Story Points: | --- | |||||||
| Clone Of: | Environment: | ||||||||
| Last Closed: | 2014-02-27 19:24:16 UTC | Type: | --- | ||||||
| Regression: | --- | Mount Type: | --- | ||||||
| Documentation: | --- | CRM: | |||||||
| Verified Versions: | Category: | --- | |||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||
| Embargoed: | |||||||||
| Bug Depends On: | 996827, 996832, 996833, 1063460, 1063461, 1063464, 1063465 | ||||||||
| Bug Blocks: | 994449 | ||||||||
| Attachments: |
|
||||||||
|
Description
Huzaifa S. Sidhpurwala
2013-08-13 08:29:55 UTC
Created attachment 786398 [details]
Proposed patch
Created attachment 786399 [details]
Proposed patch (unified)
Created libtiff tracking bugs for this issue: Affects: fedora-all [bug 996832] Created mingw-libtiff tracking bugs for this issue: Affects: fedora-all [bug 996833] This issue was addressed in libtiff upstream CVS repo, via the following commit: revision 1.14 date: 2013-08-14 13:59:17 +0000; author: fwarmerdam; state: Exp; lines: +5 -1; commitid: zanjJMEQdd22zq1x; fix possible OOB write in gif2tiff.c libtiff-4.0.3-9.fc19 has been pushed to the Fedora 19 stable repository. If problems still persist, please make note of it in this bug report. libtiff-4.0.3-9.fc18 has been pushed to the Fedora 18 stable repository. If problems still persist, please make note of it in this bug report. Acknowledgements: This issue was discovered by Huzaifa Sidhpurwala of the Red Hat Security Response Team. This issue has been addressed in following products: Red Hat Enterprise Linux 5 Via RHSA-2014:0223 https://rhn.redhat.com/errata/RHSA-2014-0223.html This issue has been addressed in following products: Red Hat Enterprise Linux 6 Via RHSA-2014:0222 https://rhn.redhat.com/errata/RHSA-2014-0222.html Statement: (none) |