Red Hat Security AdvisoryRHSA-2011:0392
libtiff security and bug fix update
Released 2011-03-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) libtiff-3.8.2-7.el5_6.7, libtiff-3.8.2-7.el5_6.7.i386, libtiff-3.8.2-7.el5_6.7.ia64 +5
- Red Hat Enterprise Linux AS version 4 libtiff-3.6.1-18.el4, libtiff-3.6.1-18.el4.i386, libtiff-3.6.1-18.el4.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) libtiff-3.8.2-7.el5_6.7, libtiff-3.8.2-7.el5_6.7.i386
- Red Hat Enterprise Linux Desktop (v. 6) libtiff-3.9.4-1.el6_0.2
- Red Hat Enterprise Linux Desktop Optional (v. 6) libtiff-3.9.4-1.el6_0.2, libtiff-devel-3.9.4-1.el6_0.2, libtiff-static-3.9.4-1.el6_0.2
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) libtiff-3.8.2-7.el5_6.7, libtiff-devel-3.8.2-7.el5_6.7, libtiff-devel-3.8.2-7.el5_6.7.i386
- Red Hat Enterprise Linux Desktop version 4 libtiff-3.6.1-18.el4, libtiff-3.6.1-18.el4.i386, libtiff-devel-3.6.1-18.el4 +1
- Red Hat Enterprise Linux ES version 4 libtiff-3.6.1-18.el4, libtiff-3.6.1-18.el4.i386, libtiff-3.6.1-18.el4.ia64 +3
- Red Hat Enterprise Linux HPC Node (v. 6) libtiff-3.9.4-1.el6_0.2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libtiff-3.9.4-1.el6_0.2, libtiff-devel-3.9.4-1.el6_0.2, libtiff-static-3.9.4-1.el6_0.2
- Red Hat Enterprise Linux Server (v. 6) libtiff-3.9.4-1.el6_0.2, libtiff-3.9.4-1.el6_0.2.ppc, libtiff-devel-3.9.4-1.el6_0.2 +1
- Red Hat Enterprise Linux Server Optional (v. 6) libtiff-3.9.4-1.el6_0.2, libtiff-static-3.9.4-1.el6_0.2
- Red Hat Enterprise Linux WS version 4 libtiff-3.6.1-18.el4, libtiff-3.6.1-18.el4.i386, libtiff-3.6.1-18.el4.ia64 +3
- Red Hat Enterprise Linux Workstation (v. 6) libtiff-3.9.4-1.el6_0.2, libtiff-devel-3.9.4-1.el6_0.2
- Red Hat Enterprise Linux Workstation Optional (v. 6) libtiff-3.9.4-1.el6_0.2, libtiff-static-3.9.4-1.el6_0.2
Fixes 1 record
Priority LOW 39
Heap-based buffer overflow in the thunder (aka ThunderScan) decoder in tif_thunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute arbitrary code via crafted THUNDER_2BITDELTAS data in a .tiff file that…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.06233 · Published 2011-03-28 · Fixed CWE-119
