Date: Tue, 22 Nov 2016 08:40:15 -0600 (CST) From: Bob Friesenhahn <bfriesen@...ple.dallas.tx.us> To: oss-security@...ts.openwall.com Subject: Libtiff 4.0.7 release fixes many security issues It is perhaps not broadly known that libtiff 4.0.7 was released on November 20th, and it addresses a great many security issues. The release notes may be read at "http://www.simplesystems.org/libtiff/v4.0.7.html". The release notes are based on information which was available when the bug was reported or the commit made. If there was a CVE number, it was made note of. If there was a vendor issue number, that was made note of. Many issues may have had CVEs assigned later and (due to lack of resources and incomplete information) we did not attempt to investigate and back-annotate the change logs with CVE numbers. Bob -- Bob Friesenhahn bfriesen@...ple.dallas.tx.us, http://www.simplesystems.org/users/bfriesen/ GraphicsMagick Maintainer, http://www.GraphicsMagick.org/
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Powered by Openwall GNU/*/Linux - Powered by OpenVZ