The reason why the bug didn't appear in 4.0.3-7ubuntu0.3 seems to be that they disabled the patch that fixed CVE-2014-8128. https://bugs.launchpad.net/ubuntu/+source/tiff/+bug/1439186
-- jussi.hukka...@gmail.com What if this weren't a hypothetical question?
