2020.12.19 19:42 "[Tiff] Libtiff 4.2.0 is released", by Bob Friesenhahn

libtiff 4.2.0 is now available. Read about this release at http://www.simplesystems.org/libtiff/v4.2.0.html or https://libtiff.gitlab.io/libtiff/v4.2.0.html or http://libtiff.maptools.org/v4.2.0.html.

This release is a product of Even Rouault, Thomas Bernard, and several others.

These two files are available with the associated sha1sum:

400ff865beb34499633dd1095fe438995e6da707 tiff-4.2.0.tar.gz
c756749f64db6fb1c34a80cbcd2939f5947e38d9 tiff-4.2.0.zip

The release files are also signed with my private PGP key, and the associated signature files have ".sig" extensions.

As usual, a great many security issues have been fixed in the software. The large number of issues fixed are due to participating in Google's oss-fuzz project (as well as Coverity) and are not due to the software being abnormally insecure. Libtiff has become quite robust.

The library should be upward compatable (drop in replacement without re-compiling dependent programs) with any 4.0.X release since it preserves the previously-existing ABI.


Bob Friesenhahn
bfriesen@simple.dallas.tx.us, http://www.simplesystems.org/users/bfriesen/
GraphicsMagick Maintainer, http://www.GraphicsMagick.org/
Public Key, http://www.simplesystems.org/users/bfriesen/public-key.txt