---

Current Version: v4.0.3
Previous Version: v4.0.2
Master FTP Site: ftp.remotesensing.org, directory pub/libtiff
Master HTTP Site: http://www.remotesensing.org/libtiff

---

This document describes the changes made to the software between the previous and current versions (see above). If you don't find something listed here, then it was not done in this timeframe, or it was not considered important enough to be mentioned. The following information is located here:

• Major Changes
• Changes in the software configuration
• Changes in libtiff
• Changes in the tools
• Changes in the contrib area

• None

• Updated to use Automake 1.12.4. Avoids security problem with 'make distcheck' (CVE-2012-3386).

• Various memory buffer access fixes.
• Fix handling when writing RGBA jpeg compressed imagery (http://trac.osgeo.org/gdal/ticket/4732).
• Fix to work properly with IJG JPEG 7+.
• New functions TIFFFieldTag(), TIFFFieldName(), TIFFFieldDataType(), TIFFFieldPassCount(), TIFFFieldReadCount(), TIFFFieldWriteCount() to use as external accessors for the opaque type TIFFField.
• Fix bug rewriting image tiles in a compressed file (http://trac.osgeo.org/gdal/ticket/4771).
• Add TIFF/FX tag support in libtiff.

• tiff2pdf: Fail when TIFFSetDirectory() fails. This prevents core dumps or perhaps even arbitrary code execution when processing a corrupt input file (CVE-2012-3401).
• tiff2pdf: Fix two places where t2p_error didn't get set after a malloc failure. No crash risk AFAICS, but the program might not report exit code 1 as desired.

• None