75423 2004-12-23 02:47 0000 media-libs/tiff: tiffdump crash on test image 2006-12-27 01:11:20 0000 1 Unclassified Gentoo Security Vulnerabilities unspecified All All RESOLVED FIXED B2 [upstream] koon CLASSIFIED P2 normal --- 75213 1 koon@gentoo.org security@gentoo.org nerdboy@gentoo.org koon@gentoo.org 2004-12-23 02:47:41 0000 This is a restricted bug. Test image from ftp://ftp.altlinux.org/pvt/people/ldv/1x1.tiff crashes tiffdump, not sure if it's exploitable, but should be fixed together with bug 75213. We're waiting for a final patch from v-s. koon@gentoo.org 2004-12-23 02:52:29 0000 Created an attachment (id=46702) Patch for tiffdump issue Here is the proposed patch (from Dmitry Levin). nerdboy: It's not public yet so you shouldn't include it in portage, but you're allowed to privately test it :) koon@gentoo.org 2005-01-02 14:08:46 0000 The tiffdump patch can now be included, please bump to -r2 with this additional patch. nerdboy@gentoo.org 2005-01-02 18:12:35 0000 Both this patch and the transparency patch are in -r1. nerdboy@gentoo.org 2005-01-02 18:21:58 0000 Sorry, closing... 46702 2004-12-23 02:52 0000 Patch for tiffdump issue tiffdump.patch text/plain LS0tIHRpZmYtMy43LjEvdG9vbHMvdGlmZmR1bXAuYy5vcmlnCTIwMDQtMDktMDMgMTI6MTY6MDEg KzA0MDAKKysrIHRpZmYtMy43LjEvdG9vbHMvdGlmZmR1bXAuYwkyMDA0LTEyLTIyIDAxOjU3OjUx ICswMzAwCkBAIC0zMDcsNiArMzA3LDExIEBAIFJlYWREaXJlY3RvcnkoaW50IGZkLCB1bnNpZ25l ZCBpeCwgb2ZmX3QKIAkJCWNvbnRpbnVlOwogCQl9CiAJCXNwYWNlID0gZHAtPnRkaXJfY291bnQg KiBkYXRhd2lkdGhbZHAtPnRkaXJfdHlwZV07CisJCWlmIChzcGFjZSA8PSAwKSB7CisJCQlwcmlu dGYoIj5cbiIpOworCQkJRXJyb3IoIkludmFsaWQgY291bnQgZm9yIHRhZyAldSIsIGRwLT50ZGly X3RhZyk7CisJCQljb250aW51ZTsKKwkJfQogCQlpZiAoc3BhY2UgPD0gNCkgewogCQkJc3dpdGNo IChkcC0+dGRpcl90eXBlKSB7CiAJCQljYXNlIFRJRkZfRkxPQVQ6Cg==