Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Fedora 22 Critical: Libtiff Update for Resolved Security Issues

fedora
Calendar Grey June 2, 2015
Scroller Fedora
Following recent libtiff vulnerabilities in Fedora 22, users should ensure they verify, update, and monitor their systems to maintain security.
CVE-2014-9655 and CVE-2015-1547 #1190710

Summary

The libtiff package contains a library of functions for manipulating

TIFF (Tagged Image File Format) image format files. TIFF is a widely

used file format for bitmapped images. TIFF files usually end in the

.tif extension and they are often quite large.

The libtiff package should be installed if you need to manipulate TIFF

format image files.

Update Information:

CVE-2014-9655 and CVE-2015-1547 #1190710

Topics%20covered

Topics Covered

security advisory fedora critical update image manipulation libtiff

Change Log

* Tue May 19 2015 Petr Hracek - 4.0.3-20 - CVE-2014-9655 and CVE-2015-1547 #1190710 * Sat May 2 2015 Kalev Lember - 4.0.3-19 - Rebuilt for GCC 5 C++11 ABI change

References


[ 1 ] Bug #1190710 - CVE-2015-1547 CVE-2014-9655 libtiff: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1190710

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update libtiff' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: libtiff
Product: Fedora 22
Version: 4.0.3
Release: 20.fc22
URL: Summary : Library of functions for manipulating TIFF format image files

Topics%20covered

Topics Covered

security advisory fedora critical update image manipulation libtiff

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.