~ubuntu-branches/ubuntu/maverick/tiff/maverick-updates : changes

~ubuntu-branches/ubuntu/maverick/tiff/maverick-updates » Changes from revision 18

From Revision 18

Rev	Summary	Authors	Tags	Date
18	* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via tiffdump - debian/patches/CVE-2010-4665.patch: prevent integer overflow in tools/tiffdump.c. - CVE-2010-4665 * SECURITY UPDATE: arbitrary code execution via size overflow - debian/patches/CVE-2012-1173.patch: use TIFFSafeMultiply in libtiff/tif_getimage.c, fix TIFFSafeMultiply in libtiff/tiffiop.h. - CVE-2012-1173	Marc Deslauriers	3.9.4-2ubuntu0.5	12 years ago
17	* SECURITY UPDATE: arbitrary code execution via malformed JP... * SECURITY UPDATE: arbitrary code execution via malformed JPEG - debian/patches/CVE-2009-5022.patch: check width in libtiff/tif_ojpeg.c. - CVE-2009-5022	Marc Deslauriers	3.9.4-2ubuntu0.4	13 years ago
16	* SECURITY UPDATE: arbitrary code execution via crafted * SECURITY UPDATE: arbitrary code execution via crafted THUNDER_2BITDELTAS data - debian/patches/CVE-2011-1167.patch: validate bitspersample and make sure npixels is sane in libtiff/tif_thunder.c. - CVE-2011-1167	Marc Deslauriers	3.9.4-2ubuntu0.3	13 years ago
15	* debian/patches/CVE-2011-0192.patch: update for regression ... * debian/patches/CVE-2011-0192.patch: update for regression in processing of certain CCITTFAX4 files (LP: #731540). - http://bugzilla.maptools.org/show_bug.cgi?id=2297	Kees Cook	3.9.4-2ubuntu0.2	13 years ago
14	* SECURITY UPDATE: denial of service via invalid td_stripbyt... * SECURITY UPDATE: denial of service via invalid td_stripbytecount field (LP: #597246) - debian/patches/CVE-2010-2482.patch: look for missing strip byte counts in libtiff/tif_ojpeg.c, tools/tiffsplit.c. - CVE-2010-2482 * SECURITY UPDATE: denial of service via invalid combination of SamplesPerPixel and Photometric values (LP: #591605) - debian/patches/CVE-2010-2483.patch: validate samplesperpixel in libtiff/tif_getimage.c. - CVE-2010-2483 * SECURITY UPDATE: denial of service via invalid ReferenceBlackWhite values - debian/patches/CVE-2010-2595.patch: validate values in libtiff/tif_color.c. - CVE-2010-2595 * SECURITY UPDATE: denial of service via devide-by-zero (LP: #593067) - debian/patches/CVE-2010-2597.patch: properly initialize fields in libtiff/tif_strip.c. - CVE-2010-2597 - CVE-2010-2598 * SECURITY UPDATE: denial of service via out-of-order tags - debian/patches/CVE-2010-2630.patch: correctly handle order in libtiff/tif_dirread.c. - CVE-2010-2630 * SECURITY UPDATE: denial of service and possible code execution via heap corruption in JPEGDecodeRaw - debian/patches/CVE-2010-3087.patch: check for overflows in libtiff/tif_jpeg.c, libtiff/tif_strip.c. - CVE-2010-3087 * SECURITY UPDATE: denial of service and possible code execution via buffer overflow in Fax4Decode - debian/patches/CVE-2011-0192.patch: check length in libtiff/tif_fax3.h. - CVE-2011-0192	Marc Deslauriers	3.9.4-2ubuntu0.1	13 years ago
13	Incorporated patch to fix CVE-2010-2233, which fixes a speci... Incorporated patch to fix CVE-2010-2233, which fixes a specific failure of tif_getimage on 64-bit platforms.	Jay Berkenbilt	3.9.4-2	13 years ago
12	New upstream release New upstream release	Jay Berkenbilt	3.9.4-1	13 years ago
11	* SECURITY UPDATE: arbitrary code execution via multiple int... * SECURITY UPDATE: arbitrary code execution via multiple integer overflows. Backported upstream fixes: - debian/patches/CVE-2010-1411.patch - debian/patches/CVE-2010-2065.patch - debian/patches/CVE-2010-2067.patch - debian/patches/fix-64bit-flip.patch	Kees Cook	3.9.2-3ubuntu1	13 years ago
10	* Depend on libjpeg-dev instead of libjpeg62-dev. (Closes: ... * Depend on libjpeg-dev instead of libjpeg62-dev. (Closes: #569242) * Change source format to '3.0 (quilt)' * Update standards version to 3.8.4. No changes required.	Jay Berkenbilt	3.9.2-3	14 years ago
9	* Include patch from upstream to fix problems with TIFFReadS... * Include patch from upstream to fix problems with TIFFReadScanline() and ycbcr-encoded JPEG images. (Closes: #510792) * Fix some manual page spelling errors found by lintian.	Jay Berkenbilt	3.9.2-2	14 years ago
8	New upstream release New upstream release	Jay Berkenbilt	3.9.2-1	14 years ago
7	New upstream release New upstream release	Jay Berkenbilt	3.9.1-1	14 years ago
6	* Apply patches to fix CVE-2009-2347, which covers two integ... * Apply patches to fix CVE-2009-2347, which covers two integer overflow conditions. * LZW patch from last update addressed CVE-2009-2285. Renamed the patch to make this clearer.	Jay Berkenbilt	3.8.2-13	14 years ago
5	* Apply patch to fix crash in lzw decoder that can be caused... * Apply patch to fix crash in lzw decoder that can be caused by certain invalid image files. (Closes: #534137) * No longer ignore errors in preinst * Fixed new lintian warnings; updated standards version to 3.8.2.	Jay Berkenbilt	3.8.2-12	14 years ago
4	* Apply security patches (CVE-2008-2327) * Apply security patches (CVE-2008-2327) * Convert patch system to quilt * Create README.source * Set standards version to 3.8.0	Jay Berkenbilt	3.8.2-11	15 years ago
3	Apply patches from Drew Yao of Apple Product Security to fix Apply patches from Drew Yao of Apple Product Security to fix CVE-2008-2327, a potential buffer underflow in the LZW decoder (tif_lzw.c).	Jay Berkenbilt	3.8.2-7+etch1	15 years ago
2	* New maintainer (thanks Joy!) * New maintainer (thanks Joy!) * Applied patch by Dmitry V. Levin to fix a segmentation fault [tools/tiffdump.c, CAN-2004-1183] Thanks to Martin Schulze for forwarding the patch. * Fixed section of -dev package (devel -> libdevel)	Jay Berkenbilt	3.6.1-5	19 years ago
1	Import upstream version 3.6.1 Import upstream version 3.6.1	Fabio M. Di Nitto	upstream-3.6.1	19 years ago