~ubuntu-branches/ubuntu/natty/tiff/natty-updates : changes

~ubuntu-branches/ubuntu/natty/tiff/natty-updates » Changes from revision 24

From Revision 18

Rev	Summary	Authors	Tags	Date
18	* debian/patches/CVE-2011-0192.patch: update for regression ... * debian/patches/CVE-2011-0192.patch: update for regression in processing of certain CCITTFAX4 files (LP: #731540). - http://bugzilla.maptools.org/show_bug.cgi?id=2297	Kees Cook	3.9.4-5ubuntu3	13 years ago
17	* SECURITY UPDATE: denial of service via invalid td_stripbyt... * SECURITY UPDATE: denial of service via invalid td_stripbytecount field (LP: #597246) - debian/patches/CVE-2010-2482.patch: look for missing strip byte counts in libtiff/tif_ojpeg.c, tools/tiffsplit.c. - CVE-2010-2482 * SECURITY UPDATE: denial of service via invalid ReferenceBlackWhite values - debian/patches/CVE-2010-2595.patch: validate values in libtiff/tif_color.c. - CVE-2010-2595 * SECURITY UPDATE: denial of service via devide-by-zero (LP: #593067) - debian/patches/CVE-2010-2597.patch: properly initialize fields in libtiff/tif_strip.c. - CVE-2010-2597 - CVE-2010-2598 * SECURITY UPDATE: denial of service via out-of-order tags - debian/patches/CVE-2010-2630.patch: correctly handle order in libtiff/tif_dirread.c. - CVE-2010-2630 * SECURITY UPDATE: denial of service and possible code execution via buffer overflow in Fax4Decode - debian/patches/CVE-2011-0192.patch: check length in libtiff/tif_fax3.h. - CVE-2011-0192	Marc Deslauriers	3.9.4-5ubuntu2	13 years ago
16	debian/{control,rules}: enable PIE build for security harden... debian/{control,rules}: enable PIE build for security hardening (Closes: #613759).	Kees Cook	3.9.4-5ubuntu1	13 years ago
15	Incorporated fix to CVE-2010-3087, a potential denial of ser... Incorporated fix to CVE-2010-3087, a potential denial of service exploitable with a specially crafted TIFF file. (Closes: #600188)	Jay Berkenbilt	3.9.4-5	13 years ago
14	Incorporated fix to CVE-2010-2483, "fix crash on OOB reads i... Incorporated fix to CVE-2010-2483, "fix crash on OOB reads in putcontig8bitYCbCr11tile". (Closes: #595064)	Jay Berkenbilt	3.9.4-4	13 years ago
13	Incorporated patch to fix CVE-2010-2233, which fixes a speci... Incorporated patch to fix CVE-2010-2233, which fixes a specific failure of tif_getimage on 64-bit platforms.	Jay Berkenbilt	3.9.4-2	13 years ago
12	New upstream release New upstream release	Jay Berkenbilt	3.9.4-1	13 years ago
11	* SECURITY UPDATE: arbitrary code execution via multiple int... * SECURITY UPDATE: arbitrary code execution via multiple integer overflows. Backported upstream fixes: - debian/patches/CVE-2010-1411.patch - debian/patches/CVE-2010-2065.patch - debian/patches/CVE-2010-2067.patch - debian/patches/fix-64bit-flip.patch	Kees Cook	3.9.2-3ubuntu1	13 years ago
10	* Depend on libjpeg-dev instead of libjpeg62-dev. (Closes: ... * Depend on libjpeg-dev instead of libjpeg62-dev. (Closes: #569242) * Change source format to '3.0 (quilt)' * Update standards version to 3.8.4. No changes required.	Jay Berkenbilt	3.9.2-3	14 years ago
9	* Include patch from upstream to fix problems with TIFFReadS... * Include patch from upstream to fix problems with TIFFReadScanline() and ycbcr-encoded JPEG images. (Closes: #510792) * Fix some manual page spelling errors found by lintian.	Jay Berkenbilt	3.9.2-2	14 years ago
8	New upstream release New upstream release	Jay Berkenbilt	3.9.2-1	14 years ago
7	New upstream release New upstream release	Jay Berkenbilt	3.9.1-1	14 years ago
6	* Apply patches to fix CVE-2009-2347, which covers two integ... * Apply patches to fix CVE-2009-2347, which covers two integer overflow conditions. * LZW patch from last update addressed CVE-2009-2285. Renamed the patch to make this clearer.	Jay Berkenbilt	3.8.2-13	14 years ago
5	* Apply patch to fix crash in lzw decoder that can be caused... * Apply patch to fix crash in lzw decoder that can be caused by certain invalid image files. (Closes: #534137) * No longer ignore errors in preinst * Fixed new lintian warnings; updated standards version to 3.8.2.	Jay Berkenbilt	3.8.2-12	14 years ago
4	* Apply security patches (CVE-2008-2327) * Apply security patches (CVE-2008-2327) * Convert patch system to quilt * Create README.source * Set standards version to 3.8.0	Jay Berkenbilt	3.8.2-11	15 years ago
3	Apply patches from Drew Yao of Apple Product Security to fix Apply patches from Drew Yao of Apple Product Security to fix CVE-2008-2327, a potential buffer underflow in the LZW decoder (tif_lzw.c).	Jay Berkenbilt	3.8.2-7+etch1	15 years ago
2	* New maintainer (thanks Joy!) * New maintainer (thanks Joy!) * Applied patch by Dmitry V. Levin to fix a segmentation fault [tools/tiffdump.c, CAN-2004-1183] Thanks to Martin Schulze for forwarding the patch. * Fixed section of -dev package (devel -> libdevel)	Jay Berkenbilt	3.6.1-5	19 years ago
1	Import upstream version 3.6.1 Import upstream version 3.6.1	Fabio M. Di Nitto	upstream-3.6.1	19 years ago