Attachment 173252 Details for Bug 211552 – vuxml patch

[patch] vuxml patch

vuxml.patch (text/plain), 2.68 KB, created by Piotr Kubaj on 2016-08-03 19:25:28 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Piotr Kubaj

Created: 2016-08-03 19:25:28 UTC

Size: 2.68 KB

patch

obsolete

>Index: vuln.xml
>===================================================================
>--- vuln.xml	(revision 419541)
>+++ vuln.xml	(working copy)
>@@ -58,6 +58,51 @@
> * Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
> -->
> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
>+ <vuln vid="496682f2-59af-11e6-a1bc-589cfc0654e1">
>+ <topic> linux-c6-tiff - multiple vulnerabilities </topic>
>+ <affects>
>+ <package>
>+	<name>linux-c6-tiff</name>
>+	<name>linux-c6_64-tiff</name>
>+	<range><lt>3.9.4_1</lt></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+	Red Hat reports:
>+	<blockquote cite="https://rhn.redhat.com/errata/RHSA-2016-1547.html">
>+	 Security fixes for tiff
>+		<ul>
>+			<li>CVE-2014-9330 libtiff: Out-of-bounds reads followed by a crash in bmp2tiff</li>
>+			<li>CVE-2014-8127 libtiff: out-of-bounds read with malformed TIFF image in multiple tools</li>
>+			<li>CVE-2014-8129 libtiff: out-of-bounds read/write with malformed TIFF image in tiff2pdf</li>
>+			<li>CVE-2014-8130 libtiff: divide by zero in the tiffdither tool</li>
>+			<li>CVE-2014-9655 libtiff: use of uninitialized memory in putcontig8bitYCbCr21tile and NeXTDecode</li>
>+			<li>CVE-2015-1547 libtiff: use of uninitialized memory in NeXTDecode</li>
>+			<li>CVE-2015-7554 libtiff: Invalid-write in _TIFFVGetField() when parsing some extension tags</li>
>+			<li>CVE-2015-8668 libtiff: OOB read in bmp2tiff</li>
>+			<li>CVE-2015-8683 libtiff: Out-of-bounds when reading CIE Lab image format files</li>
>+			<li>CVE-2015-8665 libtiff: Out-of-bounds read in tif_getimage.c</li>
>+			<li>CVE-2015-8781 CVE-2015-8782 CVE-2015-8783 libtiff: invalid assertion</li>
>+			<li>CVE-2015-8784 libtiff: out-of-bound write in NeXTDecode()</li>
>+			<li>CVE-2016-3945 libtiff: out-of-bounds write in the tiff2rgba tool</li>
>+			<li>CVE-2016-3632 libtiff: out-of-bounds write in _TIFFVGetField function</li>
>+			<li>CVE-2016-3990 libtiff: out-of-bounds write in horizontalDifference8()</li>
>+			<li>CVE-2016-3991 libtiff: out-of-bounds write in loadImage() function</li>
>+			<li>CVE-2016-5320 libtiff: Out-of-bounds write in PixarLogDecode() function in tif_pixarlog.c</li>
>+		</ul>
>+	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <url>https://rhn.redhat.com/errata/RHSA-2016-1547.html</url>
>+ </references>
>+ <dates>
>+ <discovery>2016-08-02</discovery>
>+ <entry>2016-08-03</entry>
>+ </dates>
>+ </vuln>
>+
> <vuln vid="ef0033ad-5823-11e6-80cc-001517f335e2">
> <topic>lighttpd - multiple vulnerabilities</topic>
> <affects>

Actions: View | Diff

Attachments on bug 211552: 173231 | 173252