MGASA-2016-0017

Source
https://advisories.mageia.org/MGASA-2016-0017.html
Import Source
https://advisories.mageia.org/MGASA-2016-0017.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2016-0017
Related
Published
2016-01-14T01:44:39Z
Modified
2016-01-14T01:38:51Z
Summary
Updated libtiff package fixes security vulnerabilities
Details

In libtiff, in tif_next.c, a potential out-of-bound write in NeXTDecode() triggered by the test case for CVE-2015-1547 (maptools bugzilla #2508).

In libtiff, in tif_getimage.c, out-of-bound reads in the TIFFRGBAImage interface in case of unsupported values of SamplesPerPixel/ExtraSamples for LogLUV / CIELab (CVE-2015-8665, CVE-2015-8683).

References
Credits

Affected packages