==========================================================================
Ubuntu Security Notice USN-4158-1
October 17, 2019
tiff vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
– Ubuntu 19.04
– Ubuntu 18.04 LTS
– Ubuntu 16.04 LTS
Summary:
Several security issues were fixed in LibTIFF.
Software Description:
– tiff: Tag Image File Format (TIFF) library
Details:
It was discovered that LibTIFF incorrectly handled certain malformed
images. If a user or automated system were tricked into opening a specially
crafted image, a remote attacker could crash the application, leading to a
denial of service, or possibly execute arbitrary code with user privileges.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 19.04:
libtiff-tools 4.0.10-4ubuntu0.1
libtiff5 4.0.10-4ubuntu0.1
Ubuntu 18.04 LTS:
libtiff-tools 4.0.9-5ubuntu0.3
libtiff5 4.0.9-5ubuntu0.3
Ubuntu 16.04 LTS:
libtiff-tools 4.0.6-1ubuntu0.7
libtiff5 4.0.6-1ubuntu0.7
In general, a standard system update will make all the necessary changes.
References:
https://usn.ubuntu.com/4158-1
CVE-2019-14973, CVE-2019-17546
Package Information:
https://launchpad.net/ubuntu/+source/tiff/4.0.10-4ubuntu0.1
https://launchpad.net/ubuntu/+source/tiff/4.0.9-5ubuntu0.3
https://launchpad.net/ubuntu/+source/tiff/4.0.6-1ubuntu0.7
—–BEGIN PGP SIGNATURE—–
iQIzBAEBCgAdFiEEUMSg3c8x5FLOsZtRZWnYVadEvpMFAl2oY9cACgkQZWnYVadE
vpOGYQ/9EX2Dvfu17L5vWaWPh7dIW+DUvDFuSzysNlUbK4R4uWwVXb/laaOGzjVV
DRk9zoqSXQPddFOyB7RzyjmxhPlVZQRnoaGs9ZWeYX71hGCp1w2DxZlBPs01d3xV
pO+mPVKX6ffX7vrxBM9N3yuHLlgdF1XMGEsD3KJ6/1Z5lW6Kp/CouBE/AgO5ESLR
/JQnD3Hzmv3uhtBiIQtFP77yee/wO5nDY+xMmRQ+pUvTXs/Lu71urmxJYF+TmssW
H++888bzTpReTg2CV14drokGWXtNMY9x7Pz6JWvvgntopEAZpxwrgCJswmtHmTMO
i1qpOtStKDanpca5qVtBYfWzshF2TeFWgO6gSHGyhN2aYRQAfYcGEfUGvUTVQwE2
GZD9L2TK0MOP1lUGDvBj4cDTYtM18xNAvm8SWEzJVBDNdZBgU4S56OghlZ3DvIhz
SDOY8J8+E5y8x/u1VQsrZr+I52d45t+HQ2uwsTTqCtFnEXx4dmpnZDR8EtzhB4Py
LM83Mvluqd2ohCPp1g/boQcQOpSGf1Rj/Za7iw5yJpk7ncX30SA7ScJkzyK7x/U+
s/wbtiBOY4oZJuXZUEY8TXQr+6rNRGLkv2tbrvaVlfAbGiQm93usUR48e4DOtbQS
yLAJnlXPyEOEbFVxFGgdgcJaRFe1hojmqee7HdySMqMnRHmD5L4=
=1Tkf
—–END PGP SIGNATURE—–
—
