2020.12.19 19:42 "[Tiff] Libtiff 4.2.0 is released", by Bob Friesenhahn
libtiff 4.2.0 is now available. Read about this release at http://www.simplesystems.org/libtiff/v4.2.0.html or https://libtiff.gitlab.io/libtiff/v4.2.0.html or http://libtiff.maptools.org/v4.2.0.html.
This release is a product of Even Rouault, Thomas Bernard, and several others.
These two files are available with the associated sha1sum:
The release files are also signed with my private PGP key, and the associated signature files have ".sig" extensions.
As usual, a great many security issues have been fixed in the software. The large number of issues fixed are due to participating in Google's oss-fuzz project (as well as Coverity) and are not due to the software being abnormally insecure. Libtiff has become quite robust.
The library should be upward compatable (drop in replacement without re-compiling dependent programs) with any 4.0.X release since it preserves the previously-existing ABI.
GraphicsMagick Maintainer, http://www.GraphicsMagick.org/
Public Key, http://www.simplesystems.org/users/bfriesen/public-key.txt