~ubuntu-branches/ubuntu/hardy/tiff/hardy-updates

From Revision 24 to 5

expand all

collapse all

Rev		Summary	Authors	Tags	Date	Diff	Files
24		* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via   PAGENUMBER, HALFTONEHINTS, YCBCRSUBSAMPLING, and DOTRANGE tags.   - debian/patches/z_CVE-2012-5581.patch: remove special cases of tags,     improve DOTRANGE tag case   - CVE-2012-5581	Seth Arnold	3.8.2-7ubuntu3.16	11 years ago
23		* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via   PixarLog compression format   - debian/patches/z_CVE-2012-4447.patch: fix buffer size in     libtiff/tif_pixarlog.c.   - CVE-2012-4447 * SECURITY UPDATE: denial of service and possible code execution via   crafted PPM image   - debian/patches/z_CVE-2012-4564.patch: check scanline_size in     tools/ppm2tiff.c.   - CVE-2012-4564	Marc Deslauriers	3.8.2-7ubuntu3.14	11 years ago
22		* SECURITY UPDATE: possible arbitrary code execution via hea... * SECURITY UPDATE: possible arbitrary code execution via heap overflow   in tiff2pdf.   - debian/patches/z_CVE-2012-3401.patch: properly set t2p->t2p_error in     tools/tiff2pdf.c.   - CVE-2012-3401	Marc Deslauriers	3.8.2-7ubuntu3.13	11 years ago
21		* SECURITY UPDATE: possible arbitrary code execution via buf... * SECURITY UPDATE: possible arbitrary code execution via buffer overflow   due to type-conversion flaw (LP: #1016324)   - debian/patches/z_CVE-2012-2088.patch: check for overflows in     libtiff/tif_strip.c and libtiff/tif_tile.c.   - CVE-2012-2088 * SECURITY UPDATE: possible arbitrary code execution via integer   overflows in tiff2pdf (LP: #1016324)   - debian/patches/z_CVE-2012-2113.patch: check for overflows in     tools/tiff2pdf.c.   - CVE-2012-2113	Marc Deslauriers	3.8.2-7ubuntu3.12	11 years ago
20		No-change rebuild to get lpia package. No-change rebuild to get lpia package.	Marc Deslauriers	3.8.2-7ubuntu3.11	12 years ago
19		* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via   tiffdump   - debian/patches/z_CVE-2010-4665.patch: prevent integer overflow in     tools/tiffdump.c.   - CVE-2010-4665 * SECURITY UPDATE: arbitrary code execution via size overflow   - debian/patches/z_CVE-2012-1173.patch: use TIFFSafeMultiply in     libtiff/tif_getimage.c, fix TIFFSafeMultiply in libtiff/tiffiop.h.   - CVE-2012-1173 * debian/patches/CVE-2010-1411.patch: updated to use actual upstream fix   and to get TIFFSafeMultiply macro.	Marc Deslauriers	3.8.2-7ubuntu3.10	12 years ago
18		* SECURITY UPDATE: arbitrary code execution via crafted * SECURITY UPDATE: arbitrary code execution via crafted   THUNDER_2BITDELTAS data   - debian/patches/z_CVE-2011-1167.patch: validate bitspersample and     make sure npixels is sane in libtiff/tif_thunder.c.   - CVE-2011-1167	Marc Deslauriers	3.8.2-7ubuntu3.9	13 years ago
17		* debian/patches/CVE-2011-0192.patch: update for regression ... * debian/patches/CVE-2011-0192.patch: update for regression in   processing of certain CCITTFAX4 files (LP: #731540).   - http://bugzilla.maptools.org/show_bug.cgi?id=2297	Kees Cook	3.8.2-7ubuntu3.8	13 years ago
16		* SECURITY UPDATE: denial of service via invalid ReferenceBl... * SECURITY UPDATE: denial of service via invalid ReferenceBlackWhite   values   - debian/patches/z_CVE-2010-2595.patch: validate values in     libtiff/tif_color.c.   - CVE-2010-2595 * SECURITY UPDATE: denial of service via devide-by-zero (LP: #593067)   - debian/patches/z_CVE-2010-2597.patch: properly initialize fields in     libtiff/tif_strip.c.   - CVE-2010-2597   - CVE-2010-2598 * SECURITY UPDATE: denial of service via out-of-order tags   - debian/patches/z_CVE-2010-2630.patch: correctly handle order in     libtiff/tif_dirread.c.   - CVE-2010-2630 * SECURITY UPDATE: denial of service and possible code exection via   YCBCRSUBSAMPLING tag   - debian/patches/z_CVE-2011-0191.patch: validate td_ycbcrsubsampling in     libtiff/tif_dir.c.   - CVE-2011-0191 * SECURITY UPDATE: denial of service and possible code execution via   buffer overflow in Fax4Decode   - debian/patches/z_CVE-2011-0192.patch: check length in     libtiff/tif_fax3.h.   - CVE-2011-0192	Marc Deslauriers	3.8.2-7ubuntu3.7	13 years ago
15		* SECURITY UPDATE: arbitrary code execution and crashes via ... * SECURITY UPDATE: arbitrary code execution and crashes via multiple   integer overflows.  Backported upstream fixes:   - debian/patches/CVE-2010-1411.patch   - debian/patches/fix-unknown-tags.patch	Kees Cook	3.8.2-7ubuntu3.6	13 years ago
14		* SECURITY UPDATE: arbitrary code execution via integer over... * SECURITY UPDATE: arbitrary code execution via integer overflows in   tiff2rgba and rgb2ycbcr   - debian/patches/CVE-2009-2347.patch: check for integer overflows in     tools/rgb2ycbcr.c and tools/tiff2rgba.c.   - CVE-2009-2347	Marc Deslauriers	3.8.2-7ubuntu3.4	14 years ago
13		* SECURITY UPDATE: denial of service via buffer underflow in... * SECURITY UPDATE: denial of service via buffer underflow in the   LZWDecodeCompat function (LP: #380149)   - debian/patches/CVE-2009-2285.patch: abort if code is bigger than     CODE_CLEAR in libtiff/tif_lzw.c.   - CVE-2009-2285	Marc Deslauriers	3.8.2-7ubuntu3.2	14 years ago
12		* SECURITY UPDATE: arbitrary code execution via LZW overflow... * SECURITY UPDATE: arbitrary code execution via LZW overflow. * Add debian/patches/CVE-2008-2327.patch: thanks to Jay Berkenbilt.	Kees Cook	3.8.2-7ubuntu3.1	15 years ago
11		Rebuild with recent g++ compiler version. Rebuild with recent g++ compiler version.	Matthias Klose	3.8.2-7ubuntu3	16 years ago
10		Fix package conflict. Fix package conflict.	Matthias Klose	3.8.2-7ubuntu2	16 years ago
9		* Move the html docs from libtiff4 into libtiff4-dev. * Move the html docs from libtiff4 into libtiff4-dev. * Set Ubuntu maintainer address.	Matthias Klose	3.8.2-7ubuntu1	16 years ago
8		Replace empty directories in /usr/share/doc with links durin... Replace empty directories in /usr/share/doc with links during package upgrade.  (Closes: #404631)	Jay Berkenbilt	3.8.2-7	17 years ago
7		* Add watch file * Add watch file * Tavis Ormandy of the Google Security Team discovered several problems   in the TIFF library.  The Common Vulnerabilities and Exposures project   identifies the following issues:    - CVE-2006-3459: a stack buffer overflow via TIFFFetchShortPair() in      tif_dirread.c    - CVE-2006-3460: A heap overflow vulnerability was discovered in the      jpeg decoder    - CVE-2006-3461: A heap overflow exists in the PixarLog decoder    - CVE-2006-3462: The NeXT RLE decoder was also vulnerable to a heap      overflow    - CVE-2006-3463: An infinite loop was discovered in      EstimateStripByteCounts()    - CVE-2006-3464: Multiple unchecked arithmetic operations were      uncovered, including a number of the range checking operations      deisgned to ensure the offsets specified in tiff directories are      legitimate.    - A number of codepaths were uncovered where assertions did not hold      true, resulting in the client application calling abort()    - CVE-2006-3465: A flaw was also uncovered in libtiffs custom tag      support	Jay Berkenbilt	3.8.2-6	17 years ago
6		Fix logic error that caused -q flag to be ignored when doing... Fix logic error that caused -q flag to be ignored when doing jpeg compression with tiff2pdf.  (Closes: #373102)	Jay Berkenbilt	3.8.2-5	17 years ago
5		* debian/patches/fix_43286_crasher.patch: * debian/patches/fix_43286_crasher.patch:   - upstream change, fix a crasher (Ubuntu: #43286)	Sebastien Bacher	3.7.4-1ubuntu3	17 years ago

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.1