FEDORA-2018-48f74c8eb2 — security update for libtiff

stable

libtiff-4.0.9-13.fc28

FEDORA-2018-48f74c8eb2 created by nforro 5 years ago for Fedora 28

Fix for CVE-2018-17100 and CVE-2018-17101.

Fix for CVE-2018-10779.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-48f74c8eb2

This update has been submitted for testing by nforro.

5 years ago

This update has obsoleted libtiff-4.0.9-12.fc28, and has inherited its bugs and notes.

5 years ago

This update has been pushed to testing.

5 years ago

cserpentis commented & provided feedback 5 years ago

karma

works for me in a VM

pwalter commented & provided feedback 5 years ago

karma

Works

bojan commented & provided feedback 5 years ago

karma

No regressions.

hreindl commented & provided feedback 5 years ago

karma

works for me

filiperosset commented & provided feedback 5 years ago

karma

no regressions noted

This update has been submitted for batched by nforro.

5 years ago

This update has been submitted for stable by bodhi.

5 years ago

This update has been pushed to stable.

5 years ago

Please login to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

libtiff-4.0.9-13.fc28

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

5 years ago

in testing

5 years ago

in stable

5 years ago

BZ#1577316 CVE-2018-10779 CVE-2018-10801 libtiff: various flaws [fedora-all]

BZ#1631070 CVE-2018-17100 libtiff: Integer overflow in multiply_ms in tools/ppm2tiff.c [fedora-all]

BZ#1631079 CVE-2018-17101 libtiff: Two out-of-bounds writes in cpTags in tools/tiff2bw.c and tools/pal2rgb.c [fedora-all]

libtiff-4.0.9-13.fc28

Automated Test Results

ignored