Re: CVE-2017-9935 / tiff

2017-11-16 Thread Brian May
Brian May writes: > --- tiff-4.0.8.orig/libtiff/tif_dir.c > +++ tiff-4.0.8/libtiff/tif_dir.c > @@ -1065,6 +1065,9 @@ > if (td->td_samplesperpixel - td->td_extrasamples > 1) { > *va_arg(ap, uint16**) = > td->td_transferfunction[1]; >

Re: CVE-2017-9935 / tiff

2017-11-16 Thread Brian May
Looks like this patch is required first, before fixing the problem I referred to earlier, otherwise we use pointers in tiff2pdf that were never initialized. At least for the version in wheezy. Another solution would ensure the values are NULL before calling TIFFGetField - this would mean we only u

Re: CVE-2017-9935 / tiff

2017-11-16 Thread Brian May
Brian May writes: > I added a comment to the upstream bug report: > > http://bugzilla.maptools.org/show_bug.cgi?id=2704#c14 Anybody got a sample (good) tiff file with transfer function tables? I am a bit puzzled, as per last comment in upstream bug report, because the tiff2pdf seems to be readi

Re: About libreoffice CVE

2017-11-16 Thread Raphael Hertzog
Hi, On Thu, 16 Nov 2017, Emilio Pozuelo Monfort wrote: > Well, it's there... > > libreoffice (Emilio Pozuelo) > NOTE: regression update, see: > NOTE: https://lists.debian.org/debian-lts/2017/05/msg00012.html Argh, sorry, I did not even check the entry... I only checked the output of bin/revi

Re: About libreoffice CVE

2017-11-16 Thread Emilio Pozuelo Monfort
On 16/11/17 09:39, Raphael Hertzog wrote: > On Tue, 14 Nov 2017, Emilio Pozuelo Monfort wrote: >> Yes, that was added back then due to a regression with the fix for >> https://security-tracker.debian.org/tracker/CVE-2017-3157 > > When you add an entry back for some reason, please document that > r

Re: About libreoffice CVE

2017-11-16 Thread Raphael Hertzog
On Tue, 14 Nov 2017, Emilio Pozuelo Monfort wrote: > Yes, that was added back then due to a regression with the fix for > https://security-tracker.debian.org/tracker/CVE-2017-3157 When you add an entry back for some reason, please document that reason... this entry in dla-needed.txt is useless if