desktop-packages team mailing list archive

[Marc Deslauriers <marc.deslauriers@xxxxxxxxxxxxx>]

Thanks for reporting this issue. I will release tiff updates shortly
that disable the patch until upstream decides on a final fix.

** Also affects: tiff (Ubuntu Utopic)
   Importance: Undecided
       Status: New

** Also affects: tiff (Ubuntu Precise)
   Importance: Undecided
       Status: New

** Also affects: tiff (Ubuntu Lucid)
   Importance: Undecided
       Status: New

** Also affects: tiff (Ubuntu Vivid)
   Importance: Undecided
       Status: New

** Also affects: tiff (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Changed in: tiff (Ubuntu Lucid)
     Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

** Changed in: tiff (Ubuntu Precise)
     Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

** Changed in: tiff (Ubuntu Trusty)
     Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

** Changed in: tiff (Ubuntu Utopic)
     Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

** Changed in: tiff (Ubuntu Vivid)
     Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

** Changed in: tiff (Ubuntu Lucid)
       Status: New => Confirmed

** Changed in: tiff (Ubuntu Precise)
       Status: New => Confirmed

** Changed in: tiff (Ubuntu Trusty)
       Status: New => Confirmed

** Changed in: tiff (Ubuntu Utopic)
       Status: New => Confirmed

** Changed in: tiff (Ubuntu Vivid)
       Status: New => Confirmed

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to tiff in Ubuntu.
https://bugs.launchpad.net/bugs/1439186

Title:
  [REGRESSION] Predictor tag fails to be written correctly

Status in tiff package in Ubuntu:
  Confirmed
Status in tiff source package in Lucid:
  Confirmed
Status in tiff source package in Precise:
  Confirmed
Status in tiff source package in Trusty:
  Confirmed
Status in tiff source package in Utopic:
  Confirmed
Status in tiff source package in Vivid:
  Confirmed

Bug description:
  The patch debian/patches/CVE-2014-8128-5.patch appears to break saving TIFF files with compression predictor.
  It seems the data is correctly saved, but the "predictor" tag is not, which prevents reading the data correctly again.

  This happens both on precise (release 3.9.5-2ubuntu1.7) and on trusty
  (release 4.0.3-7ubuntu0.2).

  I'm attaching an example TIFF file "small.tiff" for showing the
  behaviour. It is compressed in LZW without predictor, so it is
  written/read correctly.

  However, if you recompress it with this command, the error happens:
  $ tiffcp -c lzw:2 small.tiff small-c2.tiff

  Then displaying it in eog shows a completely different image. Tiffinfo indicates a problem with the tags:
  $ tiffinfo small-c2-bad.tiff | grep Predictor
  TIFFReadDirectory: Warning, small-c2-bad.tiff: unknown field with tag 8224 (0x2020) encountered.

  Comparing it with a good version of the file (generated with a previous version of libtiff):
  $ tiffinfo small-c2-good.tiff | grep Predictor
    Predictor: horizontal differencing 2 (0x2)

  $ tiffcmp small-c2.tiff small-c2-good.tiff 
  TIFFReadDirectory: Warning, small-c2-bad.tiff: unknown field with tag 8224 (0x2020) encountered.
  Predictor tag appears only in small-c2-good.tiff

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/tiff/+bug/1439186/+subscriptions