Automated analysis has detected that the following third party packages have had vulnerabilities publicly reported. 

NOTE: There may be several bugs listed below - in almost all cases, all bugs can be quickly addressed by upgrading to the latest version of the package.

Package Name: media-libs/tiff
Package Version: [cpe:/a:libtiff:libtiff:4.0.6 cpe:/a:libtiff:libtiff:4.0.8 cpe:/a:libtiff_project:libtiff:4.0.6 cpe:/a:libtiff_project:libtiff:4.0.8]

Advisory: CVE-2015-8781
  Details: https://vomit.googleplex.com/advisory?id=CVE/CVE-2015-8781
  CVSS severity score: 4.3/10.0
  Confidence: high
  Description:

tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds write) via an invalid number of samples per pixel in a LogL compressed TIFF image, a different vulnerability than CVE-2015-8782.
Advisory: CVE-2015-8782
  Details: https://vomit.googleplex.com/advisory?id=CVE/CVE-2015-8782
  CVSS severity score: 4.3/10.0
  Confidence: high
  Description:

tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds writes) via a crafted TIFF image, a different vulnerability than CVE-2015-8781.
Advisory: CVE-2015-8783
  Details: https://vomit.googleplex.com/advisory?id=CVE/CVE-2015-8783
  CVSS severity score: 4.3/10.0
  Confidence: high
  Description:

tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds reads) via a crafted TIFF image.
Advisory: CVE-2015-8784
  Details: https://vomit.googleplex.com/advisory?id=CVE/CVE-2015-8784
  CVSS severity score: 4.3/10.0
  Confidence: high
  Description:

The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image, as demonstrated by libtiff5.tif.