FEDORA-2018-44c6f91560 — security update for libtiff

libtiff-4.0.9-9.fc27

FEDORA-2018-44c6f91560 created by nforro 3 years ago for Fedora 27

stable

Added fixes for:

CVE-2017-9935
CVE-2017-18013
CVE-2018-8905
CVE-2018-10963

How to install

sudo dnf upgrade --advisory=FEDORA-2018-44c6f91560

This update has been submitted for testing by nforro.

3 years ago

This update has been pushed to testing.

3 years ago

cserpentis commented & provided feedback 3 years ago

karma

works for me in a VM

filiperosset commented & provided feedback 3 years ago

karma

no regressions noted

hreindl commented & provided feedback 3 years ago

karma

works for me

This update has been submitted for batched by nforro.

3 years ago

This update has been submitted for stable by bodhi.

3 years ago

This update has been pushed to stable.

3 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

Builds

libtiff-4.0.9-9.fc27

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

3 years ago

in testing

3 years ago

in stable

3 years ago

BZ#1530441 CVE-2017-18013 libtiff: NULL pointer dereference in tif_print.c:TIFFPrintDirectory() causes crash [fedora-all]

BZ#1559705 CVE-2018-8905 libtiff: heap-based buffer overflow in tif_lzw.c:LZWDecodeCompat() allows for denial of service [fedora-all]

BZ#1579061 CVE-2018-10963 libtiff: reachable assertion in TIFFWriteDirectorySec function in tif_dirwrite.c [fedora-all]

libtiff-4.0.9-9.fc27

How to install

Automated Test Results