~ubuntu-branches/ubuntu/lucid/tiff/lucid-security

From Revision 23 to 4

expand all

collapse all

Rev		Summary	Authors	Tags	Date	Diff	Files
23		* SECURITY REGRESSION: regression when saving TIFF files wit... * SECURITY REGRESSION: regression when saving TIFF files with compression   predictor (LP: #1439186)   - debian/patches/CVE-2014-8128-5.patch: disable until proper upstream     fix is available.	Marc Deslauriers	3.9.2-2ubuntu0.16	9 years ago
22		* SECURITY UPDATE: Fix multiple security issues * SECURITY UPDATE: Fix multiple security issues   - debian/patches/CVE-2014-81xx-1.patch to CVE-2014-81xx-11.patch   - debian/patches/CVE-2014-8128-5.patch   - debian/patches/CVE-2014-9655-1.patch to CVE-2014-9655-3.patch   - debian/patches/read_overrun.patch   - debian/patches/CVE-2014-8130.patch   - CVE-2014-8127 (partially)   - CVE-2014-8128   - CVE-2014-8129   - CVE-2014-8130   - CVE-2014-9330   - CVE-2014-9655	Marc Deslauriers	3.9.2-2ubuntu0.15	9 years ago
21		* SECURITY UPDATE: denial of service via buffer overflow in ... * SECURITY UPDATE: denial of service via buffer overflow in gif2tiff   - debian/patches/CVE-2013-4231.patch: validate datasize in     tools/gif2tiff.c.   - CVE-2013-4231 * SECURITY UPDATE: denial of service via use-after-free in tiff2pdf   - debian/patches/CVE-2013-4232.patch: properly exit on error in     tools/tiff2pdf.c.   - CVE-2013-4232 * SECURITY UPDATE: denial of service and possible code execution in   gif2tiff tool   - debian/patches/CVE-2013-4243.patch: check width and height in     tools/gif2tiff.c.   - CVE-2013-4243 * SECURITY UPDATE: denial of service and possible code execution in   gif2tiff tool LZW decompressor   - debian/patches/CVE-2013-4244.patch: validate code size in     tools/gif2tiff.c.   - CVE-2013-4244	Marc Deslauriers	3.9.2-2ubuntu0.14	9 years ago
20		* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via heap   overflow in tp_process_jpeg_strip().   - debian/patches/CVE-2013-1960.patch: improve tp_process_jpeg_strip()     logic in tools/tiff2pdf.c.   - CVE-2013-1960 * SECURITY UPDATE: denial of service via stack overflow with malformed   image-length and resolution.   - debian/patches/CVE-2013-1961.patch: replace use of sprintf() with     snprintf() in contrib/dbs/xtiff/xtiff.c, libtiff/tif_codec.c,     libtiff/tif_dirinfo.c, tools/rgb2ycbcr.c, tools/tiff2bw.c,     tools/tiff2pdf.c, tools/tiff2ps.c, tools/tiffcrop.c,     tools/tiffdither.c.   - CVE-2013-1961	Marc Deslauriers	3.9.2-2ubuntu0.13	10 years ago
19		* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via   PAGENUMBER, HALFTONEHINTS, YCBCRSUBSAMPLING, and DOTRANGE tags.   - debian/patches/CVE-2012-5581.patch: remove special cases of tags,     improve DOTRANGE tag case   - CVE-2012-5581	Seth Arnold	3.9.2-2ubuntu0.12	11 years ago
18		* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via   PixarLog compression format   - debian/patches/CVE-2012-4447.patch: fix buffer size in     libtiff/tif_pixarlog.c.   - CVE-2012-4447 * SECURITY UPDATE: denial of service and possible code execution via   crafted PPM image   - debian/patches/CVE-2012-4564.patch: check scanline_size in     tools/ppm2tiff.c.   - CVE-2012-4564	Marc Deslauriers	3.9.2-2ubuntu0.11	11 years ago
17		* SECURITY UPDATE: possible arbitrary code execution via hea... * SECURITY UPDATE: possible arbitrary code execution via heap overflow   in tiff2pdf.   - debian/patches/CVE-2012-3401.patch: properly set t2p->t2p_error in     tools/tiff2pdf.c.   - CVE-2012-3401	Marc Deslauriers	3.9.2-2ubuntu0.10	11 years ago
16		* SECURITY UPDATE: possible arbitrary code execution via buf... * SECURITY UPDATE: possible arbitrary code execution via buffer overflow   due to type-conversion flaw (LP: #1016324)   - debian/patches/CVE-2012-2088.patch: check for overflows in     libtiff/tif_strip.c and libtiff/tif_tile.c.   - CVE-2012-2088 * SECURITY UPDATE: possible arbitrary code execution via integer   overflows in tiff2pdf (LP: #1016324)   - debian/patches/CVE-2012-2113.patch: check for overflows in     tools/tiff2pdf.c.   - CVE-2012-2113	Marc Deslauriers	3.9.2-2ubuntu0.9	11 years ago
15		* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via   tiffdump   - debian/patches/CVE-2010-4665.patch: prevent integer overflow in     tools/tiffdump.c.   - CVE-2010-4665 * SECURITY UPDATE: arbitrary code execution via size overflow   - debian/patches/CVE-2012-1173.patch: use TIFFSafeMultiply in     libtiff/tif_getimage.c, fix TIFFSafeMultiply in libtiff/tiffiop.h.   - CVE-2012-1173 * debian/patches/CVE-2010-1411.patch: updated to use actual upstream fix   and to get TIFFSafeMultiply macro.	Marc Deslauriers	3.9.2-2ubuntu0.8	12 years ago
14		* SECURITY UPDATE: arbitrary code execution via malformed JP... * SECURITY UPDATE: arbitrary code execution via malformed JPEG   - debian/patches/CVE-2009-5022.patch: check width in     libtiff/tif_ojpeg.c.   - CVE-2009-5022	Marc Deslauriers	3.9.2-2ubuntu0.7	13 years ago
13		* SECURITY UPDATE: arbitrary code execution via crafted * SECURITY UPDATE: arbitrary code execution via crafted   THUNDER_2BITDELTAS data   - debian/patches/CVE-2011-1167.patch: validate bitspersample and     make sure npixels is sane in libtiff/tif_thunder.c.   - CVE-2011-1167	Marc Deslauriers	3.9.2-2ubuntu0.6	13 years ago
12		* debian/patches/CVE-2011-0192.patch: update for regression ... * debian/patches/CVE-2011-0192.patch: update for regression in   processing of certain CCITTFAX4 files (LP: #731540).   - http://bugzilla.maptools.org/show_bug.cgi?id=2297	Kees Cook	3.9.2-2ubuntu0.5	13 years ago
11		* SECURITY UPDATE: denial of service via invalid td_stripbyt... * SECURITY UPDATE: denial of service via invalid td_stripbytecount field   (LP: #597246)   - debian/patches/CVE-2010-2482.patch: look for missing strip byte     counts in libtiff/tif_ojpeg.c, tools/tiffsplit.c.   - CVE-2010-2482 * SECURITY UPDATE: denial of service via invalid ReferenceBlackWhite   values   - debian/patches/CVE-2010-2595.patch: validate values in     libtiff/tif_color.c.   - CVE-2010-2595 * SECURITY UPDATE: denial of service via devide-by-zero (LP: #593067)   - debian/patches/CVE-2010-2597.patch: properly initialize fields in     libtiff/tif_strip.c.   - CVE-2010-2597   - CVE-2010-2598 * SECURITY UPDATE: denial of service via out-of-order tags   - debian/patches/CVE-2010-2630.patch: correctly handle order in     libtiff/tif_dirread.c.   - CVE-2010-2630 * SECURITY UPDATE: denial of service and possible code execution via   heap corruption in JPEGDecodeRaw   - debian/patches/CVE-2010-3087.patch: check for overflows in     libtiff/tif_jpeg.c, libtiff/tif_strip.c.   - CVE-2010-3087 * SECURITY UPDATE: denial of service and possible code execution via   buffer overflow in Fax4Decode   - debian/patches/CVE-2011-0192.patch: check length in     libtiff/tif_fax3.h.   - CVE-2011-0192	Marc Deslauriers	3.9.2-2ubuntu0.4	13 years ago
10		* SECURITY UPDATE: arbitrary code execution and crashes via ... * SECURITY UPDATE: arbitrary code execution and crashes via multiple   integer overflows.  Backported upstream fixes:   - debian/patches/CVE-2010-1411.patch   - debian/patches/CVE-2010-2065.patch   - debian/patches/CVE-2010-2067.patch   - debian/patches/fix-64bit-flip.patch   - debian/patches/fix-ycbcr-oob-read.patch   - debian/patches/fix-unknown-tags.patch	Kees Cook	3.9.2-2ubuntu0.3	13 years ago
9		* Include patch from upstream to fix problems with TIFFReadS... * Include patch from upstream to fix problems with TIFFReadScanline()   and ycbcr-encoded JPEG images.  (Closes: #510792) * Fix some manual page spelling errors found by lintian.	Jay Berkenbilt	3.9.2-2	14 years ago
8		New upstream release New upstream release	Jay Berkenbilt	3.9.2-1	14 years ago
7		New upstream release New upstream release	Jay Berkenbilt	3.9.1-1	14 years ago
6		* Apply patches to fix CVE-2009-2347, which covers two integ... * Apply patches to fix CVE-2009-2347, which covers two integer overflow   conditions. * LZW patch from last update addressed CVE-2009-2285.  Renamed the patch   to make this clearer.	Jay Berkenbilt	3.8.2-13	14 years ago
5		* Apply patch to fix crash in lzw decoder that can be caused... * Apply patch to fix crash in lzw decoder that can be caused by certain   invalid image files.  (Closes: #534137) * No longer ignore errors in preinst * Fixed new lintian warnings; updated standards version to 3.8.2.	Jay Berkenbilt	3.8.2-12	14 years ago
4		* Apply security patches (CVE-2008-2327) * Apply security patches (CVE-2008-2327) * Convert patch system to quilt * Create README.source * Set standards version to 3.8.0	Jay Berkenbilt	3.8.2-11	15 years ago

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.1