RHSA-2017:0225MediumCVSS 8.1

Red Hat Security Advisory: libtiff security update

Published
February 1, 2017
Last Modified
November 5, 2026

🔗 CVE IDs covered (8)

CVE-2016-9533 →CVE-2016-9534 →CVE-2016-9535 →CVE-2016-9536 →CVE-2016-9537 →CVE-2016-9540 →CVE-2015-8870 →CVE-2016-5652 →

📋 Description

CVE-2015-8870 — libtiff: Integer overflow in tools/bmp2tiff.c CVE-2016-5652 — libtiff: tiff2pdf JPEG Compression Tables Heap Buffer Overflow CVE-2016-9533 — libtiff: PixarLog horizontalDifference heap-buffer-overflow CVE-2016-9534 — libtiff: TIFFFlushData1 heap-buffer-overflow CVE-2016-9535 — libtiff: Predictor heap-buffer-overflow CVE-2016-9536 — libtiff: t2p_process_jpeg_strip heap-buffer-overflow CVE-2016-9537 — libtiff: Out-of-bounds write vulnerabilities in tools/tiffcrop.c CVE-2016-9540 — libtiff: cpStripToTile heap-buffer-overflow

🎯 Affected products157

  • Red Hat Enterprise Linux Client (v. 7)
  • Red Hat Enterprise Linux Client Optional (v. 7)
  • Red Hat Enterprise Linux ComputeNode (v. 7)
  • Red Hat Enterprise Linux ComputeNode Optional (v. 7)
  • Red Hat Enterprise Linux Desktop (v. 6)
  • Red Hat Enterprise Linux Desktop Optional (v. 6)
  • Red Hat Enterprise Linux HPC Node (v. 6)
  • Red Hat Enterprise Linux HPC Node Optional (v. 6)
  • Red Hat Enterprise Linux Server (v. 6)
  • Red Hat Enterprise Linux Server (v. 7)
  • Red Hat Enterprise Linux Server Optional (v. 6)
  • Red Hat Enterprise Linux Server Optional (v. 7)
  • Red Hat Enterprise Linux Workstation (v. 6)
  • Red Hat Enterprise Linux Workstation (v. 7)
  • Red Hat Enterprise Linux Workstation Optional (v. 6)
  • Red Hat Enterprise Linux Workstation Optional (v. 7)
  • libtiff-0:3.9.4-21.el6_8.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • libtiff-0:3.9.4-21.el6_8.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • libtiff-0:3.9.4-21.el6_8.i686 as a component of Red Hat Enterprise Linux Server (v. 6)
  • libtiff-0:3.9.4-21.el6_8.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • libtiff-0:3.9.4-21.el6_8.ppc as a component of Red Hat Enterprise Linux Server (v. 6)
  • libtiff-0:3.9.4-21.el6_8.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)
  • libtiff-0:3.9.4-21.el6_8.s390 as a component of Red Hat Enterprise Linux Server (v. 6)
  • libtiff-0:3.9.4-21.el6_8.s390x as a component of Red Hat Enterprise Linux Server (v. 6)
  • libtiff-0:3.9.4-21.el6_8.src as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • libtiff-0:3.9.4-21.el6_8.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • libtiff-0:3.9.4-21.el6_8.src as a component of Red Hat Enterprise Linux Server (v. 6)
  • libtiff-0:3.9.4-21.el6_8.src as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • libtiff-0:3.9.4-21.el6_8.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • libtiff-0:3.9.4-21.el6_8.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • +127 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running applications linked against libtiff must be restarted for this update to take effect.

🔗 References (11)