Stay Secure with the Latest Linux Advisories

security advisorybuffer overflowcritical

Fedora Core 2: FEDORA-2005-597 Critical: libtiff Buffer Overflow

The updated libtiff package fixes an integer overflow which could lead to a buffer overflow in the tiffdump utility.. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2005-597 2005-01-07 ---------------------------------------------------------------------Product : Fedora Core 2 Name : libtiff Version : 3.5.7 Release : 22.fc2 Summary : A library of functions for manipulating TIFF format image files. Description : The libtiff package contains a library of functions for manipulating TIFF (Tagged Image File Format) image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if you need to manipulate TIFF format image files. ---------------------------------------------------------------------Update Information: The updated libtiff package fixes an integer overflow which could lead to a buffer overflow in the tiffdump utility. ---------------------------------------------------------------------* Wed Jan 05 2005 Matthias Clasen - fix an integer overflow in tiffdump (#143576) ---------------------------------------------------------------------This update can be downloaded from: 9933180e63d0bdc76c2a5e5223ff87f9 SRPMS/libtiff-3.5.7-22.fc2.src.rpm 62dc26a061c8e7f758d6886bc05f70c7 x86_64/libtiff-3.5.7-22.fc2.x86_64.rpm f70ed86c17eb88bb4589ed66ee006517 x86_64/libtiff-devel-3.5.7-22.fc2.x86_64.rpm d4dd21f27505ba1fb27dc4c72f17f304 x86_64/debug/libtiff-debuginfo-3.5.7-22.fc2.x86_64.rpm adb4f5629d8f56922d98577cc4c4a341 x86_64/libtiff-3.5.7-22.fc2.i386.rpm adb4f5629d8f56922d98577cc4c4a341 i386/libtiff-3.5.7-22.fc2.i386.rpm bff086a2e2c6ac6cb3a25a70be85ccc1 i386/libtiff-devel-3.5.7-22.fc2.i386.rpm c90db80792a57c0d9884db2798ea8071 i386/debug/libtiff-debuginfo-3.5.7-22.fc2.i386.rpm This update can also be installed with the Update Agent; you can launch theUpdate Agent with the 'up2date' command. --------------------------------------------------------------------- --fedora-announce-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Addresses integer overflow issues in libtiff for Fedora Core 2, which may cause buffer overflows in the tiffdump tool.. Fedora, libtiff, critical update, buffer overflow, software maintenance. . Severity: Critical. LinuxSecurity.com Team

Jan 07, 2005 •Critical Fedora