[slackware-security]  libtiff (SSA:2010-180-02)

New libtiff packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2,
11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues.


Here are the details from the Slackware 13.1 ChangeLog:
+--------------------------+
patches/packages/libtiff-3.9.4-i486-1_slack13.1.txz:  Upgraded.
  This fixes image structure handling bugs that could lead to crashes or
  execution of arbitrary code if a specially-crafted TIFF image is loaded.
  For more information, see:
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1411
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2065
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2067
  (* Security fix *)
+--------------------------+


Where to find the new packages:
+-----------------------------+

HINT:  Getting slow download speeds from ftp.slackware.com?
Give slackware.osuosl.org a try.  This is another primary FTP site
for Slackware that can be considerably faster than downloading
directly from ftp.slackware.com.

Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating additional FTP and rsync hosting
to the Slackware project!  :-)

Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.

Updated package for Slackware 9.0:
libtiff-3.8.2-i386-2_slack9.0.tgz

Updated package for Slackware 9.1:
libtiff-3.8.2-i486-2_slack9.1.tgz

Updated package for Slackware 10.0:
libtiff-3.8.2-i486-2_slack10.0.tgz

Updated package for Slackware 10.1:
libtiff-3.8.2-i486-2_slack10.1.tgz

Updated package for Slackware 10.2:
libtiff-3.8.2-i486-2_slack10.2.tgz

Updated package for Slackware 11.0:
libtiff-3.8.2-i486-3_slack11.0.tgz

Updated package for Slackware 12.0:
libtiff-3.8.2-i486-4_slack12.0.tgz

Updated package for Slackware 12.1:
libtiff-3.8.2-i486-4_slack12.1.tgz

Updated package for Slackware 12.2:
libtiff-3.8.2-i486-4_slack12.2.tgz

Updated package for Slackware 13.0:
libtiff-3.8.2-i486-4_slack13.0.txz

Updated package for Slackware x86_64 13.0:
libtiff-3.8.2-x86_64-4_slack13.0.txz

Updated package for Slackware 13.1:
libtiff-3.9.4-i486-1_slack13.1.txz

Updated package for Slackware x86_64 13.1:
libtiff-3.9.4-x86_64-1_slack13.1.txz

Updated package for Slackware -current:
libtiff-3.9.4-i486-1.txz

Updated package for Slackware x86_64 -current:
libtiff-3.9.4-x86_64-1.txz


MD5 signatures:
+-------------+

Slackware 9.0 package:
c38a88c8084f3967eb9edf6b5fd0caa8  libtiff-3.8.2-i386-2_slack9.0.tgz

Slackware 9.1 package:
825a5c065e3d282b602368a3f9615a54  libtiff-3.8.2-i486-2_slack9.1.tgz

Slackware 10.0 package:
339b81c7b3a93975befa61e320f6c384  libtiff-3.8.2-i486-2_slack10.0.tgz

Slackware 10.1 package:
9c5fb4c9b467fb7fdc1b262027de12ed  libtiff-3.8.2-i486-2_slack10.1.tgz

Slackware 10.2 package:
1f33480c8da08982a417cc4c89daf1dd  libtiff-3.8.2-i486-2_slack10.2.tgz

Slackware 11.0 package:
3b5d3c4f84a58eaf59cf911c87fffe94  libtiff-3.8.2-i486-3_slack11.0.tgz

Slackware 12.0 package:
f4e6738e11bb43999a9ad383070c0a37  libtiff-3.8.2-i486-4_slack12.0.tgz

Slackware 12.1 package:
e6e4e9ee16529a706e5def3bec247312  libtiff-3.8.2-i486-4_slack12.1.tgz

Slackware 12.2 package:
d259c69e06f91c532377856f3dc7d07d  libtiff-3.8.2-i486-4_slack12.2.tgz

Slackware 13.0 package:
5d9b2f249ec7c816b119920994f8b6a7  libtiff-3.8.2-i486-4_slack13.0.txz

Slackware x86_64 13.0 package:
cba93decce7063d7179f37d1b7e074be  libtiff-3.8.2-x86_64-4_slack13.0.txz

Slackware 13.1 package:
d9da15c41ba17a348a8e052ae0e64750  libtiff-3.9.4-i486-1_slack13.1.txz

Slackware x86_64 13.1 package:
f173686da98205b32950e9d23fbb0d32  libtiff-3.9.4-x86_64-1_slack13.1.txz

Slackware -current package:
c5067a3a1ffaedd8cfe7737927ba36c2  l/libtiff-3.9.4-i486-1.txz

Slackware x86_64 -current package:
953bac895882fb63cf1af2c29a7693aa  l/libtiff-3.9.4-x86_64-1.txz


Installation instructions:
+------------------------+

Upgrade the package as root:
# upgradepkg libtiff-3.9.4-i486-1_slack13.1.txz


+-----+

Slackware Linux Security Team
http://slackware.com/gpg-key

 This e-mail address is being protected from spam bots, you need JavaScript enabled to view it