USN-3906-2: LibTIFF vulnerabilities
USN-3906-1 and USN-3864-1 fixed several vulnerabilities in LibTIFF. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libtiff4to a version that resolves this vulnerability.Fixed in 3.9.5-2ubuntu1.12 - Upgrade
Upgrade
ubuntu/libtiff-toolsto a version that resolves this vulnerability.Fixed in 3.9.5-2ubuntu1.12 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch USN-3906-2
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What vulnerabilities are addressed in USN-3906-2?
USN-3906-2 addresses multiple vulnerabilities in LibTIFF that could allow for denial of service or remote code execution via malformed images.
What is the severity of USN-3906-2?
The vulnerabilities fixed in USN-3906-2 are considered to have a high severity due to the potential for exploitation.
How do I fix the vulnerabilities outlined in USN-3906-2?
To fix the vulnerabilities in USN-3906-2, upgrade the LibTIFF packages to version 3.9.5-2ubuntu1.12 on Ubuntu 12.04.
What systems are affected by USN-3906-2?
USN-3906-2 affects Ubuntu 12.04 systems using the LibTIFF packages including libtiff4 and libtiff-tools.
Is USN-3906-2 a critical update?
Yes, USN-3906-2 is a critical update due to the serious nature of the vulnerabilities it addresses in LibTIFF.