Changes in TIFF v4.0.3

References

Current Version

v4.0.3 (tag Release-v4-0-3)

Previous Version

v4.0.2

Master Download Site

https://download.osgeo.org/libtiff/

Master HTTP Site

https://download.osgeo.org/libtiff/

This document describes the changes made to the software between the previous and current versions (see above). If you don't find something listed here, then it was not done in this timeframe, or it was not considered important enough to be mentioned. The following information is located here:

Major changes

  • None

Software configuration changes

  • Updated to use Automake 1.12.4. Avoids security problem with make distcheck (CVE-2012-3386).

Library changes

Tools changes

  • tiff2pdf: Fail when TIFFSetDirectory() fails. This prevents core dumps or perhaps even arbitrary code execution when processing a corrupt input file (CVE-2012-3401).

  • tiff2pdf: Fix two places where t2p_error didn't get set after a malloc() failure. No crash risk AFAICS, but the program might not report exit code 1 as desired.

Contributed software changes

  • None