Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 533
Alerts This Week
Warning Icon 1 533

Ubuntu 16.10 USN-3212-2: Tiff Denial Of Service Issue Resolved

ubuntu
Calendar Grey May 30, 2017
Dist Ubuntu Esm H88
The latest Ubuntu patch USN-3212-2 resolves a critical regression found in LibTIFF, affecting both image handling capabilities and system security.
USN-3212-1 caused a regression in LibTIFF.

Summary

USN-3212-1 caused a regression in LibTIFF.

Software Description:

- tiff: Tag Image File Format (TIFF) library

Details:

USN-3212-1 fixed vulnerabilities in LibTIFF. Unfortunately, some of the

security patches were misapplied, which caused a regression when processing

certain images. This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

It was discovered that LibTIFF incorrectly handled certain malformed

images. If a user or automated system were tricked into opening a specially

crafted image, a remote attacker could crash the application, leading to a

denial of service, or possibly execute arbitrary code with user privileges.

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu patch image processing tiff LibTIFF

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.10:
  libtiff-tools                   4.0.6-2ubuntu0.2
  libtiff5                        4.0.6-2ubuntu0.2

Ubuntu 16.04 LTS:
  libtiff-tools                   4.0.6-1ubuntu0.2
  libtiff5                        4.0.6-1ubuntu0.2

Ubuntu 14.04 LTS:
  libtiff-tools                   4.0.3-7ubuntu0.7
  libtiff5                        4.0.3-7ubuntu0.7

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-3212-2

https://ubuntu.com/security/notices/USN-3212-1

https://bugs.launchpad.net/ubuntu/+source/tiff/+bug/1670036

Severity
important
Lowest
Low
Medium
High
Critical

May 30, 2017

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu patch image processing tiff LibTIFF

Package Information

https://launchpad.net/ubuntu/+source/tiff/4.0.6-2ubuntu0.2
https://launchpad.net/ubuntu/+source/tiff/4.0.6-1ubuntu0.2
https://launchpad.net/ubuntu/+source/tiff/4.0.3-7ubuntu0.7

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.