A flaw was discovered in a way libtiff decodes special data. A potential out-of-bounds write could occur for specifically crafted images. External bug report (CVE-2015-8781): http://bugzilla.maptools.org/show_bug.cgi?id=2522 CVE assignments: http://seclists.org/oss-sec/2016/q1/190 Upstream fix (for all CVEs): https://github.com/vadz/libtiff/commit/aaab5c3c9d2a2c6984f23ccbc79702610439bc65
Created libtiff tracking bugs for this issue: Affects: fedora-all [bug 1301650]
On RHEL5, 6, 7, and Fedora, libtiff is compiled with assertions enabled. Thus, the impact of these flaws is limited to triggering an assertion.
This issue has been addressed in the following products: Red Hat Enterprise Linux 6 Via RHSA-2016:1547 https://rhn.redhat.com/errata/RHSA-2016-1547.html
This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2016:1546 https://rhn.redhat.com/errata/RHSA-2016-1546.html