Secunia Logo  
 
Mandriva update for libtiff
Secunia Advisory: SA18943
Release Date: 2006-02-20
Popularity: 7,625 views

Critical:
Moderately critical
Impact: System access
Where: From remote
Solution Status: Vendor Patch

OS:Mandrake Corporate Server 2.x
Mandrakelinux 10.1

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2005-1544


Description:
Mandriva has issued an update for libtiff. This fixes a vulnerability, which potentially can be exploited by malicious people to compromise a vulnerable system.

For more information:
SA15320

Solution:
Apply updated packages.

Mandrakelinux 10.1

9530bfcd8e569b46eba4dd512e0bfe5a 10.1/RPMS/libtiff3-3.6.1-4.5.101mdk.i586.rpm
483c2c0896b6cf200e7c51311b074a27 10.1/RPMS/libtiff3-devel-3.6.1-4.5.101mdk.i586.rpm
07cbbe83a27bd3a92c23bcff410f3e13 10.1/RPMS/libtiff3-static-devel-3.6.1-4.5.101mdk.i586.rpm
5bbdf0e8b3d5e9cc98a0c291d9629f1a 10.1/RPMS/libtiff-progs-3.6.1-4.5.101mdk.i586.rpm
3a506f7863e4763bedfd59eace7fa35d 10.1/SRPMS/libtiff-3.6.1-4.5.101mdk.src.rpm

Mandrakelinux 10.1/X86_64

654b54562e56514e58ef4399994828fa x86_64/10.1/RPMS/lib64tiff3-3.6.1-4.5.101mdk.x86_64.rpm
343bbae6a7abe46b24a202a02821a07e x86_64/10.1/RPMS/lib64tiff3-devel-3.6.1-4.5.101mdk.x86_64.rpm
6d0de9e296c970d08a564083e21a2786 x86_64/10.1/RPMS/lib64tiff3-static-devel-3.6.1-4.5.101mdk.x86_64.rpm
7e0eccb8d37af9b708b388a6d4d75d54 x86_64/10.1/RPMS/libtiff-progs-3.6.1-4.5.101mdk.x86_64.rpm
3a506f7863e4763bedfd59eace7fa35d x86_64/10.1/SRPMS/libtiff-3.6.1-4.5.101mdk.src.rpm

Corporate Server 2.1

65625cf6d2423e08cb55aa3072ea8bc0 corporate/2.1/RPMS/libtiff3-3.5.7-6.3.C21mdk.i586.rpm
c2885652d48ee7ab99eb9d8cbd1c9b96 corporate/2.1/RPMS/libtiff3-devel-3.5.7-6.3.C21mdk.i586.rpm
46d494dc83316008bc9d42afe1d3cae1 corporate/2.1/RPMS/libtiff3-progs-3.5.7-6.3.C21mdk.i586.rpm
8dbb15a50d95c1eb6ce10a196ded4a33 corporate/2.1/RPMS/libtiff3-static-devel-3.5.7-6.3.C21mdk.i586.rpm
f59c7c98fbf88e7b9fdc4b8700b57c73 corporate/2.1/SRPMS/libtiff-3.5.7-6.3.C21mdk.src.rpm

Corporate Server 2.1/X86_64

f8a50f3bdd54476f4feddaf38766e327 x86_64/corporate/2.1/RPMS/libtiff3-3.5.7-6.3.C21mdk.x86_64.rpm
6a27ba65a07c0bfd85d6af99c458b16e x86_64/corporate/2.1/RPMS/libtiff3-devel-3.5.7-6.3.C21mdk.x86_64.rpm
834b25ee89971b460f2d4e5b30a43d70 x86_64/corporate/2.1/RPMS/libtiff3-progs-3.5.7-6.3.C21mdk.x86_64.rpm
b4af9bc083105212ce679785a563f848 x86_64/corporate/2.1/RPMS/libtiff3-static-devel-3.5.7-6.3.C21mdk.x86_64.rpm
f59c7c98fbf88e7b9fdc4b8700b57c73 x86_64/corporate/2.1/SRPMS/libtiff-3.5.7-6.3.C21mdk.src.rpm

Original Advisory:
http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:042

Other References:
SA15320:
http://secunia.com/advisories/15320/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. Joomla! "X_CMS_LIBRARY_PATH" Directory Traversal Vulnerability // 95 views
2. OpenSSL DSA / ECDSA "EVP_VerifyFinal()" Spoofing Vulnerability // 73 views
3. Symantec Mail Security for SMTP Response Handling Denial of Service // 56 views
4. SAP GUI TabOne ActiveX Control Caption List Buffer Overflow // 45 views
5. Red Hat update for openssl // 44 views
6. Sun Java JDK / JRE Multiple Vulnerabilities // 34 views
7. vBulletin Personal Sticky Threads Add-on Security Bypass Vulnerability // 30 views
8. Red Hat update for xterm // 28 views
9. Internet Explorer Data Binding Memory Corruption Vulnerability // 26 views
10. Red Hat update for dbus // 26 views