LibTIFF EstimateStripByteCounts() Denial of Service Vulnerability

LibTIFF EstimateStripByteCounts() Denial of Service Vulnerability

Solution:
Please see the referenced advisories for information on obtaining and applying the appropriate updates.

Sun Solaris 10

Sun Solaris 10 SPARC patch 119900-03
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119900-03-1

Sun Solaris 10_x86

Sun Solaris 10 x86 patch 119901-03
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119901-03-1

LibTIFF LibTIFF 3.5.7

Slackware libtiff-3.8.2-i386-1_slack9.0.tgz
Slackware 9.0:
ftp://ftp.slackware.com/pub/slackware/slackware-9.0/patches/packages/l ibtiff-3.8.2-i386-1_slack9.0.tgz

Slackware libtiff-3.8.2-i486-1_slack9.1.tgz
Slackware 9.0:
ftp://ftp.slackware.com/pub/slackware/slackware-9.1/patches/packages/l ibtiff-3.8.2-i486-1_slack9.1.tgz

LibTIFF LibTIFF 3.6.1

Slackware libtiff-3.8.2-i486-1_slack10.0.tgz
Slackware 10.0:
ftp://ftp.slackware.com/pub/slackware/slackware-10.0/patches/packages/ libtiff-3.8.2-i486-1_slack10.0.tgz

Slackware libtiff-3.8.2-i486-1_slack10.1.tgz
Slackware 10.0:
ftp://ftp.slackware.com/pub/slackware/slackware-10.1/patches/packages/ libtiff-3.8.2-i486-1_slack10.1.tgz

Trustix libtiff-3.7.3-4tr.i586.rpm
Trustix Secure Linux 2.2
ftp://ftp.trustix.org/pub/trustix/updates

Trustix libtiff-devel-3.7.3-4tr.i586.rpm
Trustix Secure Linux 2.2
ftp://ftp.trustix.org/pub/trustix/updates

Ubuntu libtiff-tools_3.6.1-5ubuntu0.6_amd64.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.6.1 -5ubuntu0.6_amd64.deb

Ubuntu libtiff-tools_3.6.1-5ubuntu0.6_i386.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.6.1 -5ubuntu0.6_i386.deb

Ubuntu libtiff-tools_3.6.1-5ubuntu0.6_powerpc.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.6.1 -5ubuntu0.6_powerpc.deb

Ubuntu libtiff4-dev_3.6.1-5ubuntu0.6_amd64.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.6.1- 5ubuntu0.6_amd64.deb

Ubuntu libtiff4-dev_3.6.1-5ubuntu0.6_i386.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.6.1- 5ubuntu0.6_i386.deb

Ubuntu libtiff4-dev_3.6.1-5ubuntu0.6_powerpc.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.6.1- 5ubuntu0.6_powerpc.deb

Ubuntu libtiff4_3.6.1-5ubuntu0.6_amd64.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.6.1-5ubu ntu0.6_amd64.deb

Ubuntu libtiff4_3.6.1-5ubuntu0.6_i386.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.6.1-5ubu ntu0.6_i386.deb

Ubuntu libtiff4_3.6.1-5ubuntu0.6_powerpc.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.6.1-5ubu ntu0.6_powerpc.deb

LibTIFF LibTIFF 3.7.1

Slackware libtiff-3.8.2-i486-1_slack10.1.tgz
Slackware 10.0:
ftp://ftp.slackware.com/pub/slackware/slackware-10.1/patches/packages/ libtiff-3.8.2-i486-1_slack10.1.tgz

Slackware libtiff-3.8.2-i486-1_slack10.1.tgz
Slackware 10.1:
ftp://ftp.slackware.com/pub/slackware/slackware-10.1/patches/packages/ libtiff-3.8.2-i486-1_slack10.1.tgz

Slackware libtiff-3.8.2-i486-1_slack10.2.tgz
Slackware 10.2:
ftp://ftp.slackware.com/pub/slackware/slackware-10.2/patches/packages/ libtiff-3.8.2-i486-1_slack10.2.tgz

LibTIFF LibTIFF 3.7.2

Debian libtiff-opengl_3.7.2-7_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-7_alpha.deb

Debian libtiff-opengl_3.7.2-7_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-7_amd64.deb

Debian libtiff-opengl_3.7.2-7_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-7_arm.deb

Debian libtiff-opengl_3.7.2-7_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-7_hppa.deb

Debian libtiff-opengl_3.7.2-7_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-7_i386.deb

Debian libtiff-opengl_3.7.2-7_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-7_ia64.deb

Debian libtiff-opengl_3.7.2-7_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-7_m68k.deb

Debian libtiff-opengl_3.7.2-7_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-7_mips.deb

Debian libtiff-opengl_3.7.2-7_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-7_mipsel.deb

Debian libtiff-opengl_3.7.2-7_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-7_powerpc.deb

Debian libtiff-opengl_3.7.2-7_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-7_s390.deb

Debian libtiff-opengl_3.7.2-7_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-7_sparc.deb

Debian libtiff-tools_3.7.2-7_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-7_alpha.deb

Debian libtiff-tools_3.7.2-7_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-7_amd64.deb

Debian libtiff-tools_3.7.2-7_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-7_arm.deb

Debian libtiff-tools_3.7.2-7_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-7_hppa.deb

Debian libtiff-tools_3.7.2-7_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-7_i386.deb

Debian libtiff-tools_3.7.2-7_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-7_ia64.deb

Debian libtiff-tools_3.7.2-7_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-7_m68k.deb

Debian libtiff-tools_3.7.2-7_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-7_mips.deb

Debian libtiff-tools_3.7.2-7_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-7_mipsel.deb

Debian libtiff-tools_3.7.2-7_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-7_powerpc.deb

Debian libtiff-tools_3.7.2-7_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-7_s390.deb

Debian libtiff-tools_3.7.2-7_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-7_sparc.deb

Debian libtiff4-dev_3.7.2-7_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -7_alpha.deb

Debian libtiff4-dev_3.7.2-7_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -7_amd64.deb

Debian libtiff4-dev_3.7.2-7_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -7_arm.deb

Debian libtiff4-dev_3.7.2-7_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -7_hppa.deb

Debian libtiff4-dev_3.7.2-7_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -7_i386.deb

Debian libtiff4-dev_3.7.2-7_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -7_ia64.deb

Debian libtiff4-dev_3.7.2-7_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -7_m68k.deb

Debian libtiff4-dev_3.7.2-7_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -7_mips.deb

Debian libtiff4-dev_3.7.2-7_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -7_mipsel.deb

Debian libtiff4-dev_3.7.2-7_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -7_powerpc.deb

Debian libtiff4-dev_3.7.2-7_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -7_s390.deb

Debian libtiff4-dev_3.7.2-7_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -7_sparc.deb

Debian libtiff4_3.7.2-7_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-7_a lpha.deb

Debian libtiff4_3.7.2-7_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-7_a md64.deb

Debian libtiff4_3.7.2-7_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-7_a rm.deb

Debian libtiff4_3.7.2-7_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-7_h ppa.deb

Debian libtiff4_3.7.2-7_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-7_i 386.deb

Debian libtiff4_3.7.2-7_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-7_i a64.deb

Debian libtiff4_3.7.2-7_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-7_m 68k.deb

Debian libtiff4_3.7.2-7_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-7_m ips.deb

Debian libtiff4_3.7.2-7_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-7_m ipsel.deb

Debian libtiff4_3.7.2-7_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-7_p owerpc.deb

Debian libtiff4_3.7.2-7_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-7_s 390.deb

Debian libtiff4_3.7.2-7_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-7_s parc.deb

Debian libtiffxx0_3.7.2-7_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-7 _alpha.deb

Debian libtiffxx0_3.7.2-7_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-7 _amd64.deb

Debian libtiffxx0_3.7.2-7_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-7 _arm.deb

Debian libtiffxx0_3.7.2-7_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-7 _hppa.deb

Debian libtiffxx0_3.7.2-7_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-7 _i386.deb

Debian libtiffxx0_3.7.2-7_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-7 _ia64.deb

Debian libtiffxx0_3.7.2-7_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-7 _m68k.deb

Debian libtiffxx0_3.7.2-7_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-7 _mips.deb

Debian libtiffxx0_3.7.2-7_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-7 _mipsel.deb

Debian libtiffxx0_3.7.2-7_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-7 _powerpc.deb

Debian libtiffxx0_3.7.2-7_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-7 _s390.deb

Debian libtiffxx0_3.7.2-7_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-7 _sparc.deb

LibTIFF LibTIFF 3.7.3

Trustix libtiff-3.7.3-4tr.i586.rpm
Trustix Secure Linux 3.0
ftp://ftp.trustix.org/pub/trustix/updates

Trustix libtiff-devel-3.7.3-4tr.i586.rpm
Trustix Secure Linux 3.0
ftp://ftp.trustix.org/pub/trustix/updates

Trustix libtiff-docs-3.7.3-4tr.i586.rpm
Trustix Secure Linux 3.0
ftp://ftp.trustix.org/pub/trustix/updates

Ubuntu libtiff-opengl_3.7.3-1ubuntu1.5_amd64.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/universe/t/tiff/libtiff-opengl_ 3.7.3-1ubuntu1.5_amd64.deb

Ubuntu libtiff-opengl_3.7.3-1ubuntu1.5_i386.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/universe/t/tiff/libtiff-opengl_ 3.7.3-1ubuntu1.5_i386.deb

Ubuntu libtiff-opengl_3.7.3-1ubuntu1.5_powerpc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/universe/t/tiff/libtiff-opengl_ 3.7.3-1ubuntu1.5_powerpc.deb

Ubuntu libtiff-opengl_3.7.3-1ubuntu1.5_sparc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/universe/t/tiff/libtiff-opengl_ 3.7.3-1ubuntu1.5_sparc.deb

Ubuntu libtiff-tools_3.7.3-1ubuntu1.5_amd64.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.7.3 -1ubuntu1.5_amd64.deb

Ubuntu libtiff-tools_3.7.3-1ubuntu1.5_i386.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.7.3 -1ubuntu1.5_i386.deb

Ubuntu libtiff-tools_3.7.3-1ubuntu1.5_powerpc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.7.3 -1ubuntu1.5_powerpc.deb

Ubuntu libtiff-tools_3.7.3-1ubuntu1.5_sparc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.7.3 -1ubuntu1.5_sparc.deb

Ubuntu libtiff4-dev_3.7.3-1ubuntu1.5_amd64.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.7.3- 1ubuntu1.5_amd64.deb

Ubuntu libtiff4-dev_3.7.3-1ubuntu1.5_i386.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.7.3- 1ubuntu1.5_i386.deb

Ubuntu libtiff4-dev_3.7.3-1ubuntu1.5_powerpc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.7.3- 1ubuntu1.5_powerpc.deb

Ubuntu libtiff4-dev_3.7.3-1ubuntu1.5_sparc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.7.3- 1ubuntu1.5_sparc.deb

Ubuntu libtiff4_3.7.3-1ubuntu1.5_amd64.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.7.3-1ubu ntu1.5_amd64.deb

Ubuntu libtiff4_3.7.3-1ubuntu1.5_i386.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.7.3-1ubu ntu1.5_i386.deb

Ubuntu libtiff4_3.7.3-1ubuntu1.5_powerpc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.7.3-1ubu ntu1.5_powerpc.deb

Ubuntu libtiff4_3.7.3-1ubuntu1.5_sparc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.7.3-1ubu ntu1.5_sparc.deb

Ubuntu libtiffxx0c2_3.7.3-1ubuntu1.5_amd64.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiffxx0c2_3.7.3- 1ubuntu1.5_amd64.deb

Ubuntu libtiffxx0c2_3.7.3-1ubuntu1.5_i386.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiffxx0c2_3.7.3- 1ubuntu1.5_i386.deb

Ubuntu libtiffxx0c2_3.7.3-1ubuntu1.5_powerpc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiffxx0c2_3.7.3- 1ubuntu1.5_powerpc.deb

Ubuntu libtiffxx0c2_3.7.3-1ubuntu1.5_sparc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiffxx0c2_3.7.3- 1ubuntu1.5_sparc.deb