~ubuntu-branches/ubuntu/dapper/tiff/dapper-updates

• Changes
• Files

~ubuntu-branches/ubuntu/dapper/tiff/dapper-updates » Changes from revision 14

From Revision 14

expand all

collapse all

Rev		Summary	Authors	Tags	Date	Diff	Files
14		* SECURITY UPDATE: arbitrary code execution via crafted * SECURITY UPDATE: arbitrary code execution via crafted   THUNDER_2BITDELTAS data   - debian/patches/z_CVE-2011-1167.patch: validate bitspersample and     make sure npixels is sane in libtiff/tif_thunder.c.   - CVE-2011-1167	Marc Deslauriers	3.7.4-1ubuntu3.11	13 years ago
13		* debian/patches/CVE-2011-0192.patch: update for regression ... * debian/patches/CVE-2011-0192.patch: update for regression in   processing of certain CCITTFAX4 files (LP: #731540).   - http://bugzilla.maptools.org/show_bug.cgi?id=2297	Kees Cook	3.7.4-1ubuntu3.10	13 years ago
12		* SECURITY UPDATE: denial of service via invalid ReferenceBl... * SECURITY UPDATE: denial of service via invalid ReferenceBlackWhite   values   - debian/patches/z_CVE-2010-2595.patch: validate values in     libtiff/tif_color.c.   - CVE-2010-2595 * SECURITY UPDATE: denial of service via devide-by-zero (LP: #593067)   - debian/patches/z_CVE-2010-2597.patch: properly initialize fields in     libtiff/tif_strip.c.   - CVE-2010-2597   - CVE-2010-2598 * SECURITY UPDATE: denial of service via out-of-order tags   - debian/patches/z_CVE-2010-2630.patch: correctly handle order in     libtiff/tif_dirread.c.   - CVE-2010-2630 * SECURITY UPDATE: denial of service and possible code exection via   YCBCRSUBSAMPLING tag   - debian/patches/z_CVE-2011-0191.patch: validate td_ycbcrsubsampling in     libtiff/tif_dir.c.   - CVE-2011-0191 * SECURITY UPDATE: denial of service and possible code execution via   buffer overflow in Fax4Decode   - debian/patches/z_CVE-2011-0192.patch: check length in     libtiff/tif_fax3.h.   - CVE-2011-0192	Marc Deslauriers	3.7.4-1ubuntu3.9	13 years ago
11		* SECURITY UPDATE: arbitrary code execution and crashes via ... * SECURITY UPDATE: arbitrary code execution and crashes via multiple   integer overflows.  Backported upstream fixes:   - debian/patches/CVE-2010-1411.patch   - debian/patches/fix-unknown-tags.patch	Kees Cook	3.7.4-1ubuntu3.8	13 years ago
10		* SECURITY UPDATE: arbitrary code execution via integer over... * SECURITY UPDATE: arbitrary code execution via integer overflows in   tiff2rgba and rgb2ycbcr   - debian/patches/CVE-2009-2347.patch: check for integer overflows in     tools/rgb2ycbcr.c and tools/tiff2rgba.c.   - CVE-2009-2347	Marc Deslauriers	3.7.4-1ubuntu3.6	14 years ago
9		* SECURITY UPDATE: denial of service via buffer underflow in... * SECURITY UPDATE: denial of service via buffer underflow in the   LZWDecodeCompat function (LP: #380149)   - debian/patches/CVE-2009-2285.patch: abort if code is bigger than     CODE_CLEAR in libtiff/tif_lzw.c.   - CVE-2009-2285	Marc Deslauriers	3.7.4-1ubuntu3.4	14 years ago
8		* SECURITY UPDATE: arbitrary code execution via LZW overflow... * SECURITY UPDATE: arbitrary code execution via LZW overflow. * Add debian/patches/CVE-2008-2327.patch: thanks to Jay Berkenbilt.	Kees Cook	3.7.4-1ubuntu3.3	15 years ago
7		* SECURITY UPDATE: Arbitrary code execution with crafted TIF... * SECURITY UPDATE: Arbitrary code execution with crafted TIFF files, found   by Tavis Ormandy of the Google Security Team. * Add debian/patches/CVE-2006-3459-3465.patch:   - CVE-2006-3459: a stack buffer overflow via TIFFFetchShortPair() in     tif_dirread.c   - CVE-2006-3460: A heap overflow vulnerability was discovered in the     jpeg decoder   - CVE-2006-3461: A heap overflow exists in the PixarLog decoder   - CVE-2006-3462: The NeXT RLE decoder was also vulnerable to a heap     overflow   - CVE-2006-3463: An infinite loop was discovered in     EstimateStripByteCounts()   - CVE-2006-3464: Multiple unchecked arithmetic operations were     uncovered, including a number of the range checking operations     deisgned to ensure the offsets specified in tiff directories are     legitimate.   - A number of codepaths were uncovered where assertions did not hold     true, resulting in the client application calling abort()   - CVE-2006-3465: A flaw was also uncovered in libtiffs custom tag     support	Martin Pitt	3.7.4-1ubuntu3.2	17 years ago
6		* SECURITY UPDATE: Arbitrary command execution with crafted ... * SECURITY UPDATE: Arbitrary command execution with crafted long file names. * Add debian/patches/tiffsplit-fname-overflow.patch:   - tools/tiffsplit.c: Use snprintf instead of strcpy for copying the     user-specified file name into a statically sized buffer.   - CVE-2006-2656 * Add debian/patches/tiff2pdf-octal-printf.patch:   - tools/tiff2pdf.c: Fix buffer overflow due to wrong printf for octal     signed char (it printed a signed integer, which overflew the buffer and     was wrong anyway).	Martin Pitt	3.7.4-1ubuntu3.1	17 years ago
5		* debian/patches/fix_43286_crasher.patch: * debian/patches/fix_43286_crasher.patch:   - upstream change, fix a crasher (Ubuntu: #43286)	Sebastien Bacher	3.7.4-1ubuntu3	17 years ago
4		* SECURITY UPDATE: DoS and arbitrary code execution with cra... * SECURITY UPDATE: DoS and arbitrary code execution with crafted TIFF files. * Add debian/patches/3.8.1-security-fixes.patch: Backported security   relevant fixes from stable 3.8.1 release:   - libtiff/tif_dirread.c: Fix error reporting in TIFFFetchAnyArray()     (%d in format string without corresponding integer argument).     [CVE-2006-2024]   - libtiff/{tif_pixarlog.c, tif_fax3.c, tif_zip.c}: Properly     restore setfield/getfield methods in cleanup functions to avoid crash on     invalid files. [CVE-2006-2024]   - libtiff/{tif_predict.c, tif_predict.h}: Added new function     TIFFPredictorCleanup() to restore parent decode/encode/field methods.     [CVE-2006-2024]   - libtiff/tif_dirread.c: Check for integer overflow in TIFFFetchData().     [CVE-2006-2025]   - libtiff/tif_jpeg.c: Properly restore setfield/getfield methods in     cleanup functions to avoid double free(). [CVE-2006-2026]   - libtiff/tif_color.c: Check for out-of-bounds values in TIFFXYZToRGB().     [CVE-2006-2120] * See http://bugzilla.remotesensing.org/show_bug.cgi?id=1102 for reproducer   images.	Martin Pitt	3.7.4-1ubuntu2	17 years ago
3		* Synchronize to Debian. * Synchronize to Debian. * Only change left: xlibmesa-gl-dev -> libgl1-mesa-dev build dependency   change.	Martin Pitt	3.7.4-1ubuntu1	18 years ago
2		* New maintainer (thanks Joy!) * New maintainer (thanks Joy!) * Applied patch by Dmitry V. Levin to fix a segmentation fault   [tools/tiffdump.c, CAN-2004-1183]   Thanks to Martin Schulze for forwarding the patch. * Fixed section of -dev package (devel -> libdevel)	Jay Berkenbilt	3.6.1-5	19 years ago
1		Import upstream version 3.6.1 Import upstream version 3.6.1	Fabio M. Di Nitto	upstream-3.6.1	19 years ago

Loggerhead is a web-based interface for Breezy
Version: 2.0.1