==========================================================Ubuntu Security Notice USN-954-1              June 21, 2010
tiff vulnerabilities
CVE-2010-1411, CVE-2010-2065, CVE-2010-2067
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 8.04 LTS
Ubuntu 9.04
Ubuntu 9.10
Ubuntu 10.04 LTS

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
  libtiff4                        3.7.4-1ubuntu3.8

Ubuntu 8.04 LTS:
  libtiff4                        3.8.2-7ubuntu3.6

Ubuntu 9.04:
  libtiff4                        3.8.2-11ubuntu0.9.04.6

Ubuntu 9.10:
  libtiff4                        3.8.2-13ubuntu0.3

Ubuntu 10.04 LTS:
  libtiff4                        3.9.2-2ubuntu0.3

After a standard system update you need to restart your session to make
all the necessary changes.

Details follow:

Kevin Finisterre discovered that the TIFF library did not correctly handle
certain image structures.  If a user or automated system were tricked
into opening a specially crafted TIFF image, a remote attacker could
execute arbitrary code with user privileges, or crash the application,
leading to a denial of service. (CVE-2010-1411)

Dan Rosenberg and Sauli Pahlman discovered multiple flaws in the TIFF
library.  If a user or automated system were into opening a specially
crafted TIFF image, a remote attacker could execute arbitrary code
with user privileges, or crash the application, leading to a denial
of service. (Only Ubuntu 10.04 LTS was affected.) (CVE-2010-2065,
CVE-2010-2067)


Updated packages for Ubuntu 6.06 LTS:

  Source archives:

          Size/MD5:    23040 b840c801a3d7fc4d0a1053d6fabbe707
          Size/MD5:      803 d68889478f2962e9b31033bebc892e89
          Size/MD5:  1280113 02cf5c3820bda83b35bb35b45ae27005

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   221050 4d3f5ef363350aa5ade8af964f8cb3ab
          Size/MD5:   282864 3ab150b16046d29337ba739f09ffee98
          Size/MD5:   476068 717cb178af7ec2759268c50fd9257300
          Size/MD5:    44808 e94b7ae7d8c4ed4125db7276f84df640
          Size/MD5:    49990 ad2f88b3d31e6ce02cc727f834f67fa6

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   206022 713177b3875929efae2c3ff8089067a4
          Size/MD5:   259564 da2b2a54a49072deb1099928d4d21e4f
          Size/MD5:   462376 7672d9dab7dfb1c1f80465aedb91c68e
          Size/MD5:    44808 6b927f6f57aa78861af48514ddac5918
          Size/MD5:    49330 5206a97516a0b6f76e423c2f90b8cfee

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   239948 68f3cdaac63717128344589f976ae975
          Size/MD5:   288748 96e81fafcef3b4245c80ced08cc5752a
          Size/MD5:   476678 9ee3902c1570f7b9cb458e6ed844abb1
          Size/MD5:    47040 399804bdbcfbd3d38b976957ffec738b
          Size/MD5:    51672 ba92c41d9105bb80729ff263f7955e63

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   208940 c67ceaa5d1c09987d580c438874c17f6
          Size/MD5:   270628 7df1a1ad75e42a84af970eab83163089
          Size/MD5:   467240 2b85c23af3d8b6c9a82e65736949c131
          Size/MD5:    44742 e69373d50bf9c942cbf6d8825bca352b
          Size/MD5:    49878 e8d0bef67675fdb392e77625f435d219

Updated packages for Ubuntu 8.04 LTS:

  Source archives:

          Size/MD5:    21457 7abcb4908ccce79993653514228664a7
          Size/MD5:      899 0a7f751ae5fd3a5cb4dbbef7ab8beba1
          Size/MD5:  1333780 e6ec4ab957ef49d5aabc38b7a376910b

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   186468 23fd6541a3233e1bb4cda603aaa78284
          Size/MD5:   571232 95be000d64194a48d01273015edde173
          Size/MD5:   131246 c272d2494f48d401a6390ef591770e2a
          Size/MD5:     5074 aab0bfd607ea51554611263913f5de9a
          Size/MD5:    10498 6ca030143c795181a60c4839614ab325

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   175322 65ce19d8e649dd9213fdd45dfa10c090
          Size/MD5:   552732 64759cd5ab6f5f9b4afbc32dbbff901d
          Size/MD5:   123000 f58e75e4d5e334b476fd100ba33edf72
          Size/MD5:     5042 586e14ed6fef1ce1eda11624b297f97f
          Size/MD5:     9940 65217cbdc3ed7c176ab115834d34030e

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:   177018 da50f84cda9ef32d65a5f28ac7e04d8c
          Size/MD5:   555182 e7e9c90796c183e66bf34d72837e49c3
          Size/MD5:   124212 e8439778d4c95a5ad750b9d69a6eb309
          Size/MD5:     4916 09d01db63f70bd66c3a92720ad888281
          Size/MD5:     9980 4bd91c80378208cd35678ead71081ab6

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   223478 71bdc0445e1e63b91ecd6d5cdb3d362c
          Size/MD5:   577308 c893f853e3d834379fe34e6d98541500
          Size/MD5:   134610 5ca1d77cac23b098008d3079e3d462a4
          Size/MD5:     7510 d920d8082d30de0499af5038556fbaa7
          Size/MD5:    13286 2cf13645039e3ef9ae085f33b709ec60

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   178868 16fd5d7a68d5c119f1cfcfbc7d0f720b
          Size/MD5:   558590 cef1b1501e6b71beb717da7f110a9829
          Size/MD5:   122704 1f07fe414230660e0608a4753f5fa456
          Size/MD5:     4804 836d935afee73d163417e77eae1b5eba
          Size/MD5:    10700 0ff671fb6a490f6bbf318bc566b9b68e

Updated packages for Ubuntu 9.04:

  Source archives:

          Size/MD5:    41278 b5e24df5393ac8d3f0c4ea3f065ae4b3
          Size/MD5:     1367 fd03c6190254db93870f7ccd575272d1
          Size/MD5:  1333780 e6ec4ab957ef49d5aabc38b7a376910b

  Architecture independent packages:

          Size/MD5:   334870 026f8704147696147176f69e92682c28

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   191638 c93bc89ad72f5c63476d9fe3ecf5ca0d
          Size/MD5:   250894 d997f30871a19214988da6cd251328b9
          Size/MD5:   134574 80146acc32c9391baf2ce1c3a8e519c8
          Size/MD5:     6284 bd1c39ad7746d911e30871c8939d3988
          Size/MD5:    11902 d12ea8aabdc9a7e67d998115c49e902f

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   176254 38eef2617f8e1fc8b8fbfce314e0d3e9
          Size/MD5:   233732 1d104561bc6950d1b7cadbab771f353c
          Size/MD5:   126548 22359cfdca9c56ff2fb01853315f2639
          Size/MD5:     6274 de4dccef0ce17f4a698aba609b33e73c
          Size/MD5:    11244 2297033448604abce36ceed918685799

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:   178544 7895fa9f7ed7e6310953384cf14b44ac
          Size/MD5:   236174 a49ffa36dcd626470f6406945f2a9b07
          Size/MD5:   128182 c15737bbdb79e4ad6747ff1122c9010a
          Size/MD5:     6132 6c41518edbf30a79fa5c619da6345a2c
          Size/MD5:    11280 45e30b64c92200cc30ff35c076734f7c

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   221288 3592d9842997a658007ac326caaed2a7
          Size/MD5:   256768 834993c1049aca8c12420b92c92f28fb
          Size/MD5:   137538 49b4a1e944f909ca495b525c2633a735
          Size/MD5:     8730 01803cafeea784dbc818a5e0b280722f
          Size/MD5:    14234 2ba3cc6f57abce5c990eef8d7c6fbceb

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   183806 f2a9bbe1f571d06e74fc955ac8f59b72
          Size/MD5:   238044 12858b8bde77b383f1089e8989394b38
          Size/MD5:   124424 bf09c05c0bc3ec5c21ebdefbb095faa6
          Size/MD5:     5978 952a5bf270a59b0f873dd1c6a1f67175
          Size/MD5:    12022 629b0b70778ecd8fe824f3254cf27b90

Updated packages for Ubuntu 9.10:

  Source archives:

          Size/MD5:    41121 c0ab3072d29ea0360ba47217778d4901
          Size/MD5:     1343 03d22a022fc88888d9d8935e0df737bf
          Size/MD5:  1333780 e6ec4ab957ef49d5aabc38b7a376910b

  Architecture independent packages:

          Size/MD5:   334670 5cc39d1960ed0eaa84b0cef574f9019a

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   193172 904b26a40f81337d896afb4dc99b6dac
          Size/MD5:   251358 a2c45975bc8789e05a1fac873c54afdb
          Size/MD5:   135204 747b17ea960047cfe980951780e16343
          Size/MD5:     6330 1784c3b86fe6a9a68f8411b7ad816d4a
          Size/MD5:    12006 24240bf743cd23ce670b4b486a7408a6

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   175842 008409a183baa37db8c1c45a8f094a44
          Size/MD5:   231870 56bb188c4596af1b901be03032d9a617
          Size/MD5:   124248 3708797ed53d0d0b58769ff729ff18c0
          Size/MD5:     6446 cb3263d1be21404f7cb72866fdf6ad2a
          Size/MD5:    11302 628741204ad187f2d66f724c49ee47f7

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:   177048 64a59e0441238751d0e74e47e414d27e
          Size/MD5:   234210 73343fb5872ff0d51c90ffc1cc841c9f
          Size/MD5:   125892 2f7f51f21359bec31fdb219176d46517
          Size/MD5:     6314 5bd86ff35a7592a8cb6cc4fe5a19073f
          Size/MD5:    11342 36a53ad5737a7381f123f9ba65efb694

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   191502 c6b963c4009baaa04afe123c7ec99f9c
          Size/MD5:   256282 8110d1fade42b772fbc2072ea209eb97
          Size/MD5:   136778 dbba3ac2c70dbf380fe242bd68c53fa3
          Size/MD5:     6736 1f111239548e12c69db166e59a190b3c
          Size/MD5:    12086 0d49955b527ff8a6ff4943120ba553c5

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   184286 06388a8d95b34d4bfb7247c47c07906c
          Size/MD5:   236968 4208eb62edba48bbd6d280eedda2a0a4
          Size/MD5:   124514 a6446a90d3e9d5629f8105603c9474dd
          Size/MD5:     6100 76a69eccc98c82be32b0481df58d3de9
          Size/MD5:    12026 c23e8ab257390fe565ebf103a8edaeb9

Updated packages for Ubuntu 10.04:

  Source archives:

          Size/MD5:    17310 779fdd57e79090bedcec10b26eaf08ec
          Size/MD5:     1339 7d001b20ea0677cb63bbb4becf8ff69f
          Size/MD5:  1419742 93e56e421679c591de7552db13384cb8

  Architecture independent packages:

          Size/MD5:   342306 e17c62cb61768cd0885bd5c71caa7f67

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   252274 0b359ab56d43865968c690765ef96a23
          Size/MD5:   269444 364252fef2d31f9a59be006a60c6794e
          Size/MD5:   148610 19d95336d35bffd635787ac1174c6716
          Size/MD5:     6390 7236b5c267df2ae7fbb805768c4d6314
          Size/MD5:    12034 ad15f0ac0f19016a4498c3f22f90de43

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   232412 def529fa30067e222a10ce03fb4651e2
          Size/MD5:   246484 3f78b62e3e411a05fcf9f97a9f77f21c
          Size/MD5:   136176 0fae675d248b4ab7cf77018d860a55ce
          Size/MD5:     6492 fb5a44eaef7ee218d83a4482bd331c69
          Size/MD5:    11290 c9ee0da107d51715c41bc5513a302532

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   253470 7fbf59b850974984a419f752830da31b
          Size/MD5:   275072 a174c0a69bbe402b3d17a0085e69952d
          Size/MD5:   150222 e460e28329d5754c4670647d08a2c9fb
          Size/MD5:     6774 f5f491424e932a100199e8274d7b8eef
          Size/MD5:    12098 c18d01ecf566a05ef689b2224bf0c343

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   248748 fc6cc955db82161bffe7ebf0dd5a4aea
          Size/MD5:   257150 ccb51b6b25aa92dc09140d0fda8ef2b5
          Size/MD5:   142870 5644962072cf924c15a559f9a0f00ddc
          Size/MD5:     6238 d11701e3eb25d8201e363314c5ea4bbb
          Size/MD5:    11922 be82dd608f5e01be8117b48eaa567ca0