| Summary: | libtiff new security issue CVE-2018-18661 | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | Nicolas Salguero <nicolas.salguero> |
| Component: | Security | Assignee: | QA Team <qa-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | Sec team <security> |
| Severity: | normal | ||
| Priority: | Normal | CC: | andrewsfarm, lewyssmith, sysadmin-bugs, tarazed25 |
| Version: | 6 | Keywords: | advisory, validated_update |
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | MGA6-64-OK | ||
| Source RPM: | libtiff-4.0.9-1.7.mga6.src.rpm | CVE: | CVE-2018-18661 |
| Status comment: | |||
|
Description
Nicolas Salguero
2018-10-31 10:49:21 CET
Nicolas Salguero
2018-10-31 10:50:55 CET
Whiteboard:
(none) =>
MGA6TOO Suggested advisory: ======================== The updated packages fix a security vulnerability: An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function LZWDecode in the file tif_lzw.c. (CVE-2018-18661) References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18661 ======================== Updated package in core/updates_testing: ======================== libtiff-progs-4.0.9-1.8.mga6 lib(64)tiff5-4.0.9-1.8.mga6 lib(64)tiff-devel-4.0.9-1.8.mga6 lib(64)tiff-static-devel-4.0.9-1.8.mga6 from SRPMS: libtiff-4.0.9-1.8.mga6.src.rpm Whiteboard:
MGA6TOO =>
(none) Mageia 6, x86_64 CVE-2018-18661 http://bugzilla.maptools.org/show_bug.cgi?id=2819 Renamed Null-pointer-derefence__LZWDecode@tif_lzw.c_462 to poc6. $ tiff2bw poc6 /dev/null TIFFReadDirectory: Warning, Unknown field with tag 292 (0x124) encountered. LZWDecode: Not enough data at scanline 0 (short 6442004472 bytes). TIFFWriteDirectoryTagData: IO error writing tag data. Note that the upstream test segfaulted after reporting the same error. Updated the four packages. CVE-2018-18661 $ tiff2bw poc6 /dev/null TIFFReadDirectory: Warning, Unknown field with tag 292 (0x124) encountered. LZWDecode: Not enough data at scanline 0 (short 6442004472 bytes). TIFFWriteDirectoryTagData: IO error writing tag data. This result, and the absence of a prior segfault, would indicate that this particular issue had already been fixed. Ran several image tests using the tools provided, as in previous bugs on libtiff. Tested tiffdump, ppm2tiff, tiffcp, tiff2bw, tifftopnm, pnmtotiffcmyk, pnmtotiff. All worked. tiffgt fails to display TIFF images but it has worked in the past. There is a suspicion that this has more to do with the graphical environment than libtiff. $ tiffgt SantaMaria.tif libGL error: No matching fbConfigs or visuals found libGL error: failed to load driver: swrast freeglut (tiffgt): ERROR: Internal error <FBConfig with necessary capabilities not found> in function fgOpenWindow Giving this the 64-bit OK. CC:
(none) =>
tarazed25
Len Lawrence
2018-11-06 13:13:29 CET
Whiteboard:
(none) =>
MGA6-64-OK It looks like the problem with tiffgt is unrelated to libtiff to me too, Len. Validating. Advisory in Comment 1. Keywords:
(none) =>
validated_update An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2018-0444.html Status:
ASSIGNED =>
RESOLVED |