FEDORA-2018-44c6f91560 — security update for libtiff

stable

libtiff-4.0.9-9.fc27

FEDORA-2018-44c6f91560 created by nforro 7 years ago for Fedora 27

Added fixes for:

CVE-2017-9935
CVE-2017-18013
CVE-2018-8905
CVE-2018-10963

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-44c6f91560

This update has been submitted for testing by nforro.

7 years ago

This update has been pushed to testing.

7 years ago

cserpentis commented & provided feedback 7 years ago

karma

works for me in a VM

filiperosset commented & provided feedback 7 years ago

karma

no regressions noted

hreindl commented & provided feedback 7 years ago

karma

works for me

This update has been submitted for batched by nforro.

7 years ago

This update has been submitted for stable by bodhi.

7 years ago

This update has been pushed to stable.

7 years ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

7 years ago

in testing

7 years ago

in stable

7 years ago

Builds

libtiff-4.0.9-9.fc27

BZ#1530441 CVE-2017-18013 libtiff: NULL pointer dereference in tif_print.c:TIFFPrintDirectory() causes crash [fedora-all]

BZ#1559705 CVE-2018-8905 libtiff: heap-based buffer overflow in tif_lzw.c:LZWDecodeCompat() allows for denial of service [fedora-all]

BZ#1579061 CVE-2018-10963 libtiff: reachable assertion in TIFFWriteDirectorySec function in tif_dirwrite.c [fedora-all]

libtiff-4.0.9-9.fc27

Automated Test Results

ignored