-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2021-1bf4f2f13a 2021-04-21 21:39:57.068037 --------------------------------------------------------------------------------
Name : libtiff Product : Fedora 33 Version : 4.1.0 Release : 8.fc33 URL : http://www.simplesystems.org/libtiff/ Summary : Library of functions for manipulating TIFF format image files Description : The libtiff package contains a library of functions for manipulating TIFF (Tagged Image File Format) image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large.
The libtiff package should be installed if you need to manipulate TIFF format image files.
-------------------------------------------------------------------------------- Update Information:
Fixes for the following CVEs: * CVE-2020-35521 * CVE-2020-35522 * CVE-2020-35523 * CVE-2020-35524 -------------------------------------------------------------------------------- ChangeLog:
* Tue Apr 6 2021 Nikola Forr�� nforro@redhat.com - 4.1.0-8 - Fix CVE-2020-35521 (#1932035) and CVE-2020-35522 (#1932038) * Tue Apr 6 2021 Nikola Forr�� nforro@redhat.com - 4.1.0-7 - Fix CVE-2020-35523 (#1932043) and CVE-2020-35524 (#1932046) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1932035 - CVE-2020-35521 libtiff: Memory allocation failure in tiff2rgba [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1932035 [ 2 ] Bug #1932038 - CVE-2020-35522 libtiff: Memory allocation failure in tiff2rgba [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1932038 [ 3 ] Bug #1932043 - CVE-2020-35523 libtiff: Integer overflow in tif_getimage.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1932043 [ 4 ] Bug #1932046 - CVE-2020-35524 libtiff: Heap-based buffer overflow in TIFF2PDF tool [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1932046 --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-1bf4f2f13a' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------