[El-errata] ELSA-2008-0848 Important: Enterprise Linux 4 libtiff security and bug fix update

Errata Announcements for Enterprise Linux el-errata at oss.oracle.com
Thu Aug 28 22:22:17 PDT 2008


Enterprise Linux Security Advisory ELSA-2008-0848

https://rhn.redhat.com/errata/RHSA-2008-0848.html

The following updated rpms for Enterprise Linux 4 have been uploaded to 
the Unbreakable Linux Network:

i386:
libtiff-3.6.1-12.el4_7.2.i386.rpm
libtiff-devel-3.6.1-12.el4_7.2.i386.rpm

x86_64:
libtiff-3.6.1-12.el4_7.2.i386.rpm
libtiff-3.6.1-12.el4_7.2.x86_64.rpm
libtiff-devel-3.6.1-12.el4_7.2.x86_64.rpm

ia64:
libtiff-3.6.1-12.el4_7.2.i386.rpm
libtiff-3.6.1-12.el4_7.2.ia64.rpm
libtiff-devel-3.6.1-12.el4_7.2.ia64.rpm


SRPMS:
http://oss.oracle.com/el4/SRPMS-updates/libtiff-3.6.1-12.el4_7.2.src.rpm


Description of changes:

[3.6.1-12.el4.2]
- Get rid of html pages for un-shipped programs, too
Resolves: #459404

[3.6.1-12.el4.1]
- Fix LZW decoding vulnerabilities (CVE-2008-2327)
Resolves: #458814
- Back-port fix for CVE-2006-2193
Resolves: #458814
- Remove sgi2tiff.1 and tiffsv.1, since they are for programs we don't ship
Resolves: #459404
- Remove fuzz in existing patches tiff-3.6.1-color.patch, 
tiffsplit-overflow.patch





More information about the El-errata mailing list