Automated analysis has detected that the following third party packages have had vulnerabilities publicly reported. 

NOTE: There may be several bugs listed below - in almost all cases, all bugs can be quickly addressed by upgrading to the latest version of the package.

Package Name: media-libs/tiff
Package Version: [cpe:/a:libtiff:libtiff:4.0.6 cpe:/a:libtiff:libtiff:4.0.7 cpe:/a:libtiff_project:libtiff:4.0.6 cpe:/a:libtiff_project:libtiff:4.0.7]

Advisory: CVE-2017-7592
  Details: https://vomit.googleplex.com/advisory?id=CVE/CVE-2017-7592
  CVSS severity score: 6.8/10.0
  Confidence: high
  Description:

The putagreytile function in tif_getimage.c in LibTIFF 4.0.7 has a left-shift undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
Advisory: CVE-2017-7593
  Details: https://vomit.googleplex.com/advisory?id=CVE/CVE-2017-7593
  CVSS severity score: 4.3/10.0
  Confidence: high
  Description:

tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image.
Advisory: CVE-2017-7594
  Details: https://vomit.googleplex.com/advisory?id=CVE/CVE-2017-7594
  CVSS severity score: 4.3/10.0
  Confidence: high
  Description:

The OJPEGReadHeaderInfoSecTablesDcTable function in tif_ojpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (memory leak) via a crafted image.
Advisory: CVE-2017-7595
  Details: https://vomit.googleplex.com/advisory?id=CVE/CVE-2017-7595
  CVSS severity score: 4.3/10.0
  Confidence: high
  Description:

The JPEGSetupEncode function in tiff_jpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image.
Advisory: CVE-2017-7596
  Details: https://vomit.googleplex.com/advisory?id=CVE/CVE-2017-7596
  CVSS severity score: 6.8/10.0
  Confidence: high
  Description:

LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
Advisory: CVE-2017-7597
  Details: https://vomit.googleplex.com/advisory?id=CVE/CVE-2017-7597
  CVSS severity score: 6.8/10.0
  Confidence: high
  Description:

tif_dirread.c in LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
Advisory: CVE-2017-7598
  Details: https://vomit.googleplex.com/advisory?id=CVE/CVE-2017-7598
  CVSS severity score: 4.3/10.0
  Confidence: high
  Description:

tif_dirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image.
Advisory: CVE-2017-7599
  Details: https://vomit.googleplex.com/advisory?id=CVE/CVE-2017-7599
  CVSS severity score: 6.8/10.0
  Confidence: high
  Description:

LibTIFF 4.0.7 has an "outside the range of representable values of type short" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
Advisory: CVE-2017-7600
  Details: https://vomit.googleplex.com/advisory?id=CVE/CVE-2017-7600
  CVSS severity score: 6.8/10.0
  Confidence: high
  Description:

LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
Advisory: CVE-2017-7601
  Details: https://vomit.googleplex.com/advisory?id=CVE/CVE-2017-7601
  CVSS severity score: 6.8/10.0
  Confidence: high
  Description:

LibTIFF 4.0.7 has a "shift exponent too large for 64-bit type long" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
Advisory: CVE-2017-7602
  Details: https://vomit.googleplex.com/advisory?id=CVE/CVE-2017-7602
  CVSS severity score: 6.8/10.0
  Confidence: high
  Description:

LibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.