Bug 11099 - libtiff new security issue CVE-2013-4244
: libtiff new security issue CVE-2013-4244
Status: RESOLVED FIXED
Product: Mageia
Classification: Unclassified
Component: Security
: 3
: i586 Linux
: Normal Severity: major
: ---
Assigned To: QA Team
: Sec team
: http://lwn.net/Vulnerabilities/565084/
: MGA2TOO has_procedure MGA3-32-OK MGA3...
: validated_update
:
:
  Show dependency treegraph
 
Reported: 2013-08-28 18:53 CEST by David Walser
Modified: 2013-08-30 19:41 CEST (History)
3 users (show)

See Also:
Source RPM: libtiff-4.0.3-4.1.mga3.src.rpm
CVE:


Attachments

Description David Walser 2013-08-28 18:53:59 CEST
Debian has issued an advisory on August 27:
http://www.debian.org/security/2013/dsa-2744

Patched packages uploaded for Mageia 2, Mageia 3, and Cauldron.

Advisory:
========================

Updated libtiff packages fix security vulnerability:

Pedro Ribeiro and Huzaifa S. Sidhpurwala discovered multiple vulnerabilities
in various tools shipped by the tiff library. Processing a malformed file may
lead to denial of service or the execution of arbitrary code (CVE-2013-4244).

References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4244
http://www.debian.org/security/2013/dsa-2744
========================

Updated packages in core/updates_testing:
========================
libtiff-progs-4.0.1-2.8.mga2
libtiff5-4.0.1-2.8.mga2
libtiff-devel-4.0.1-2.8.mga2
libtiff-static-devel-4.0.1-2.8.mga2
libtiff-progs-4.0.3-4.2.mga3
libtiff5-4.0.3-4.2.mga3
libtiff-devel-4.0.3-4.2.mga3
libtiff-static-devel-4.0.3-4.2.mga3

from SRPMS:
libtiff-4.0.1-2.8.mga2.src.rpm
libtiff-4.0.3-4.2.mga3.src.rpm

Reproducible: 

Steps to Reproduce:
Comment 1 claire robinson 2013-08-28 19:54:52 CEST
Procedure: https://wiki.mageia.org/en/QA_procedure:Libtiff
Comment 2 William Kenney 2013-08-28 20:59:42 CEST
In VirtualBox and KDE

Packages under test:
libtiff bmp2tiff tiff2pdf tiffinfo libtiff-progs

[root@localhost wilcal]# urpmi libtiff
Package libtiff5-4.0.3-4.1.mga3.i586 is already installed
[root@localhost Pictures]# urpmi libtiff-progs
Package libtiff-progs-4.0.3-4.1.mga3.i586 is already installed

bmp2tiff flag_b24.bmp flag_b24.tif  works
tiff2pdf flag_b24.tif > flag_b24.pdf  works
[wilcal@localhost Pictures]$ tiffinfo flag_b24.tif
TIFF Directory at offset 0xaffe (45054)
  Image Width: 124 Image Length: 124
  Bits/Sample: 8
  Compression Scheme: PackBits
  Photometric Interpretation: RGB color
  Orientation: row 0 top, col 0 lhs
  Samples/Pixel: 3
  Rows/Strip: 22
  Planar Configuration: single image plane
flag_b24.tif opens successfully with Gimp

Install updates from core updates_testing

[root@localhost wilcal]# urpmi libtiff
Package libtiff5-4.0.3-4.2.mga3.i586 is already installed
[root@localhost wilcal]# urpmi libtiff-progs
Package libtiff-progs-4.0.3-4.2.mga3.i586 is already installed

[wilcal@localhost Pictures]$ bmp2tiff flag_b24.bmp flag_b24.tif  works
[wilcal@localhost Pictures]$ tiff2pdf flag_b24.tif > flag_b24.pdf  works
[wilcal@localhost Pictures]$ tiffinfo flag_b24.tif
TIFF Directory at offset 0xaffe (45054)
  Image Width: 124 Image Length: 124
  Bits/Sample: 8
  Compression Scheme: PackBits
  Photometric Interpretation: RGB color
  Orientation: row 0 top, col 0 lhs
  Samples/Pixel: 3
  Rows/Strip: 22
  Planar Configuration: single image plane


Test platform:
Intel Core i7-2600K Sandy Bridge 3.4GHz
GIGABYTE GA-Z68X-UD3-B3 LGA 1155 MoBo
GIGABYTE GV-N440D3-1GI Nvidia GeForce GT 440 (Fermi) 1GB
RTL8111/8168B PCI Express 1Gbit Ethernet
DRAM 16GB (4 x 4GB)
VirtualBox 4.2.16-1.mga3.x86_64.rpm
Comment 3 William Kenney 2013-08-28 21:16:49 CEST
In VirtualBox and KDE

[root@localhost wilcal]# urpmi libtiff
Package lib64tiff5-4.0.3-4.1.mga3.x86_64 is already installed
[root@localhost wilcal]# urpmi libtiff-progs
Package libtiff-progs-4.0.3-4.1.mga3.x86_64 is already installed

[wilcal@localhost Pictures]$ bmp2tiff flag_b24.bmp flag_b24.tif  works
[wilcal@localhost Pictures]$ tiff2pdf flag_b24.tif > flag_b24.pdf  works
[wilcal@localhost Pictures]$ tiffinfo flag_b24.tif
TIFF Directory at offset 0xaffe (45054)
  Image Width: 124 Image Length: 124
  Bits/Sample: 8
  Compression Scheme: PackBits
  Photometric Interpretation: RGB color
  Orientation: row 0 top, col 0 lhs
  Samples/Pixel: 3
  Rows/Strip: 22
  Planar Configuration: single image plane
  
Install updates from core updates_testing

[root@localhost wilcal]# urpmi libtiff
Package lib64tiff5-4.0.3-4.2.mga3.x86_64 is already installed
[root@localhost wilcal]# urpmi libtiff-progs
Package libtiff-progs-4.0.3-4.2.mga3.x86_64 is already installed

[wilcal@localhost Pictures]$ bmp2tiff flag_b24.bmp flag_b24.tif  works
[wilcal@localhost Pictures]$ tiff2pdf flag_b24.tif > flag_b24.pdf  works
[wilcal@localhost Pictures]$ tiffinfo flag_b24.tif
TIFF Directory at offset 0xaffe (45054)
  Image Width: 124 Image Length: 124
  Bits/Sample: 8
  Compression Scheme: PackBits
  Photometric Interpretation: RGB color
  Orientation: row 0 top, col 0 lhs
  Samples/Pixel: 3
  Rows/Strip: 22
  Planar Configuration: single image plane
Comment 4 William Kenney 2013-08-28 21:32:36 CEST
In VirtualBox and KDE

Packages under test:
libtiff bmp2tiff tiff2pdf tiffinfo libtiff-progs

[root@localhost wilcal]# urpmi libtiff
Package libtiff5-4.0.1-2.7.mga2.i586 is already installed
[root@localhost wilcal]# urpmi libtiff-progs
Package libtiff-progs-4.0.1-2.7.mga2.i586 is already installed

[wilcal@localhost Pictures]$ bmp2tiff flag_b24.bmp flag_b24.tif  works
[wilcal@localhost Pictures]$ tiff2pdf flag_b24.tif > flag_b24.pdf  works
[wilcal@localhost Pictures]$ tiffinfo flag_b24.tif
TIFF Directory at offset 0xaffe (45054)
  Image Width: 124 Image Length: 124
  Bits/Sample: 8
  Compression Scheme: PackBits
  Photometric Interpretation: RGB color
  Orientation: row 0 top, col 0 lhs
  Samples/Pixel: 3
  Rows/Strip: 22
  Planar Configuration: single image plane
  
Install updates from core updates_testing

[root@localhost Pictures]# urpmi libtiff
Package libtiff5-4.0.1-2.8.mga2.i586 is already installed
[root@localhost Pictures]# urpmi libtiff-progs
Package libtiff-progs-4.0.1-2.8.mga2.i586 is already installed

[wilcal@localhost Pictures]$ bmp2tiff flag_b24.bmp flag_b24.tif  works
[wilcal@localhost Pictures]$ tiff2pdf flag_b24.tif > flag_b24.pdf  works
[wilcal@localhost Pictures]$ tiffinfo flag_b24.tif
TIFF Directory at offset 0xaffe (45054)
  Image Width: 124 Image Length: 124
  Bits/Sample: 8
  Compression Scheme: PackBits
  Photometric Interpretation: RGB color
  Orientation: row 0 top, col 0 lhs
  Samples/Pixel: 3
  Rows/Strip: 22
  Planar Configuration: single image plane

Test platform:
Intel Core i7-2600K Sandy Bridge 3.4GHz
GIGABYTE GA-Z68X-UD3-B3 LGA 1155 MoBo
GIGABYTE GV-N440D3-1GI Nvidia GeForce GT 440 (Fermi) 1GB
RTL8111/8168B PCI Express 1Gbit Ethernet
DRAM 16GB (4 x 4GB)
VirtualBox 4.2.16-1.mga3.x86_64.rpm
Comment 5 William Kenney 2013-08-28 21:50:36 CEST
In VirtualBox and KDE

Packages under test:
libtiff bmp2tiff tiff2pdf tiffinfo libtiff-progs

[root@localhost Pictures]# urpmi libtiff
Package lib64tiff5-4.0.1-2.7.mga2.x86_64 is already installed
[root@localhost Pictures]# urpmi libtiff-progs
Package libtiff-progs-4.0.1-2.7.mga2.x86_64 is already installed

[wilcal@localhost Pictures]$ bmp2tiff flag_b24.bmp flag_b24.tif  works
[wilcal@localhost Pictures]$ tiff2pdf flag_b24.tif > flag_b24.pdf  works
[wilcal@localhost Pictures]$ tiffinfo flag_b24.tif
TIFF Directory at offset 0xaffe (45054)
  Image Width: 124 Image Length: 124
  Bits/Sample: 8
  Compression Scheme: PackBits
  Photometric Interpretation: RGB color
  Orientation: row 0 top, col 0 lhs
  Samples/Pixel: 3
  Rows/Strip: 22
  Planar Configuration: single image plane

Install updates from core updates_testing
  
[root@localhost Pictures]# urpmi libtiff
Package lib64tiff5-4.0.1-2.8.mga2.x86_64 is already installed
[root@localhost Pictures]# urpmi libtiff-progs
Package libtiff-progs-4.0.1-2.8.mga2.x86_64 is already installed

[wilcal@localhost Pictures]$ bmp2tiff flag_b24.bmp flag_b24.tif  works
[wilcal@localhost Pictures]$ tiff2pdf flag_b24.tif > flag_b24.pdf  works
[wilcal@localhost Pictures]$ tiffinfo flag_b24.tif
TIFF Directory at offset 0xaffe (45054)
  Image Width: 124 Image Length: 124
  Bits/Sample: 8
  Compression Scheme: PackBits
  Photometric Interpretation: RGB color
  Orientation: row 0 top, col 0 lhs
  Samples/Pixel: 3
  Rows/Strip: 22
  Planar Configuration: single image plane
  
Test platform:
Intel Core i7-2600K Sandy Bridge 3.4GHz
GIGABYTE GA-Z68X-UD3-B3 LGA 1155 MoBo
GIGABYTE GV-N440D3-1GI Nvidia GeForce GT 440 (Fermi) 1GB
RTL8111/8168B PCI Express 1Gbit Ethernet
DRAM 16GB (4 x 4GB)
VirtualBox 4.2.16-1.mga3.x86_64.rpm
Comment 6 William Kenney 2013-08-28 21:51:03 CEST
Testing complete mga2/3 32 & 64
Validating the update.
Could someone from the sysadmin team push 11099.adv to updates.
Thanks
Comment 7 David Walser 2013-08-28 22:07:25 CEST
11099.adv doesn't appear to have been uploaded yet.

I'll remove the validated tag and let Dave or Claire re-add it when it's uploaded.
Comment 8 William Kenney 2013-08-28 22:22:43 CEST
(In reply to David Walser from comment #7)

> 11099.adv doesn't appear to have been uploaded yet.

That's cuz I'm too quick. :-))

Thanks
Comment 9 claire robinson 2013-08-28 22:24:14 CEST
Well done William. Advisory uploaded.

Thanks
Comment 10 Thomas Backlund 2013-08-30 19:41:02 CEST
Update pushed:
http://advisories.mageia.org/MGASA-2013-0267.html

Note You need to log in before you can comment on or make changes to this bug.