Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [day] [month] [year] [list]
Date: Tue, 22 Nov 2016 08:40:15 -0600 (CST)
From: Bob Friesenhahn <bfriesen@...ple.dallas.tx.us>
To: oss-security@...ts.openwall.com
Subject: Libtiff 4.0.7 release fixes many security issues

It is perhaps not broadly known that libtiff 4.0.7 was released on 
November 20th, and it addresses a great many security issues.

The release notes may be read at 
"http://www.simplesystems.org/libtiff/v4.0.7.html".

The release notes are based on information which was available when 
the bug was reported or the commit made.  If there was a CVE number, 
it was made note of.  If there was a vendor issue number, that was 
made note of.  Many issues may have had CVEs assigned later and (due 
to lack of resources and incomplete information) we did not attempt to 
investigate and back-annotate the change logs with CVE numbers.

Bob
-- 
Bob Friesenhahn
bfriesen@...ple.dallas.tx.us, http://www.simplesystems.org/users/bfriesen/
GraphicsMagick Maintainer,    http://www.GraphicsMagick.org/

Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ