~ubuntu-branches/ubuntu/oneiric/tiff/oneiric-security

• Changes
• Files

~ubuntu-branches/ubuntu/oneiric/tiff/oneiric-security » Changes from revision 27

From Revision 27 to 8

expand all

collapse all

Rev		Summary	Authors	Tags	Date	Diff	Files
27		* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via   PAGENUMBER, HALFTONEHINTS, YCBCRSUBSAMPLING, and DOTRANGE tags.   - debian/patches/CVE-2012-5581.patch: remove special cases of tags,     improve DOTRANGE tag case   - CVE-2012-5581	Seth Arnold	3.9.5-1ubuntu1.5	11 years ago
26		* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via   PixarLog compression format   - debian/patches/CVE-2012-4447.patch: fix buffer size in     libtiff/tif_pixarlog.c.   - CVE-2012-4447 * SECURITY UPDATE: denial of service and possible code execution via   crafted PPM image   - debian/patches/CVE-2012-4564.patch: check scanline_size in     tools/ppm2tiff.c.   - CVE-2012-4564	Marc Deslauriers	3.9.5-1ubuntu1.4	11 years ago
25		* SECURITY UPDATE: possible arbitrary code execution via hea... * SECURITY UPDATE: possible arbitrary code execution via heap overflow   in tiff2pdf.   - debian/patches/CVE-2012-3401.patch: properly set t2p->t2p_error in     tools/tiff2pdf.c.   - CVE-2012-3401	Marc Deslauriers	3.9.5-1ubuntu1.3	11 years ago
24		* SECURITY UPDATE: possible arbitrary code execution via buf... * SECURITY UPDATE: possible arbitrary code execution via buffer overflow   due to type-conversion flaw (LP: #1016324)   - debian/patches/CVE-2012-2088.patch: check for overflows in     libtiff/tif_strip.c and libtiff/tif_tile.c.   - CVE-2012-2088 * SECURITY UPDATE: possible arbitrary code execution via integer   overflows in tiff2pdf (LP: #1016324)   - debian/patches/CVE-2012-2113.patch: check for overflows in     tools/tiff2pdf.c.   - CVE-2012-2113	Marc Deslauriers	3.9.5-1ubuntu1.2	11 years ago
23		* SECURITY UPDATE: arbitrary code execution via size overflo... * SECURITY UPDATE: arbitrary code execution via size overflow   - debian/patches/CVE-2012-1173.patch: use TIFFSafeMultiply in     libtiff/tif_getimage.c, fix TIFFSafeMultiply in libtiff/tiffiop.h.   - CVE-2012-1173	Marc Deslauriers	3.9.5-1ubuntu1.1	12 years ago
22		* Merge from debian unstable. Remaining changes: * Merge from debian unstable. Remaining changes:   - Enable multiarch build     - debian/control: update depends for multiarch toolchain     - debian/*.install: update /usr/lib paths     - debian/rules:       - add --libdir to DEB_CONFIGURE_EXTRA_FLAGS       - update library path for .la files   - debian/{control,rules}: enable PIE build for security hardening * Dropped patches:   - CVE-2010-2482.patch: upstream   - CVE-2010-2595.patch: upstream   - CVE-2010-2597.patch: upstream   - CVE-2010-2630.patch: upstream   - CVE-2011-0192.patch: upstream   - CVE-2011-1167.patch: upstream   - CVE-2009-5022.patch: upstream	Marc Deslauriers	3.9.5-1ubuntu1	12 years ago
21		* SECURITY UPDATE: arbitrary code execution via malformed JP... * SECURITY UPDATE: arbitrary code execution via malformed JPEG   - debian/patches/CVE-2009-5022.patch: check width in     libtiff/tif_ojpeg.c.   - CVE-2009-5022	Marc Deslauriers	3.9.4-5ubuntu6	13 years ago
20		* SECURITY UPDATE: arbitrary code execution via crafted * SECURITY UPDATE: arbitrary code execution via crafted   THUNDER_2BITDELTAS data   - debian/patches/CVE-2011-1167.patch: validate bitspersample and     make sure npixels is sane in libtiff/tif_thunder.c.   - CVE-2011-1167	Marc Deslauriers	3.9.4-5ubuntu5	13 years ago
19		* Enable multiarch build (LP: #733501) * Enable multiarch build (LP: #733501)   - debian/control: update depends for multiarch toolchain   - debian/*.install: update /usr/lib paths   - debian/rules:     - add --libdir to DEB_CONFIGURE_EXTRA_FLAGS     - update library path for .la files	Kees Cook	3.9.4-5ubuntu4	13 years ago
18		* debian/patches/CVE-2011-0192.patch: update for regression ... * debian/patches/CVE-2011-0192.patch: update for regression in   processing of certain CCITTFAX4 files (LP: #731540).   - http://bugzilla.maptools.org/show_bug.cgi?id=2297	Kees Cook	3.9.4-5ubuntu3	13 years ago
17		* SECURITY UPDATE: denial of service via invalid td_stripbyt... * SECURITY UPDATE: denial of service via invalid td_stripbytecount field   (LP: #597246)   - debian/patches/CVE-2010-2482.patch: look for missing strip byte     counts in libtiff/tif_ojpeg.c, tools/tiffsplit.c.   - CVE-2010-2482 * SECURITY UPDATE: denial of service via invalid ReferenceBlackWhite   values   - debian/patches/CVE-2010-2595.patch: validate values in     libtiff/tif_color.c.   - CVE-2010-2595 * SECURITY UPDATE: denial of service via devide-by-zero (LP: #593067)   - debian/patches/CVE-2010-2597.patch: properly initialize fields in     libtiff/tif_strip.c.   - CVE-2010-2597   - CVE-2010-2598 * SECURITY UPDATE: denial of service via out-of-order tags   - debian/patches/CVE-2010-2630.patch: correctly handle order in     libtiff/tif_dirread.c.   - CVE-2010-2630 * SECURITY UPDATE: denial of service and possible code execution via   buffer overflow in Fax4Decode   - debian/patches/CVE-2011-0192.patch: check length in     libtiff/tif_fax3.h.   - CVE-2011-0192	Marc Deslauriers	3.9.4-5ubuntu2	13 years ago
16		debian/{control,rules}: enable PIE build for security harden... debian/{control,rules}: enable PIE build for security hardening (Closes: #613759).	Kees Cook	3.9.4-5ubuntu1	13 years ago
15		Incorporated fix to CVE-2010-3087, a potential denial of ser... Incorporated fix to CVE-2010-3087, a potential denial of service exploitable with a specially crafted TIFF file.  (Closes: #600188)	Jay Berkenbilt	3.9.4-5	13 years ago
14		Incorporated fix to CVE-2010-2483, "fix crash on OOB reads i... Incorporated fix to CVE-2010-2483, "fix crash on OOB reads in putcontig8bitYCbCr11tile".  (Closes: #595064)	Jay Berkenbilt	3.9.4-4	13 years ago
13		Incorporated patch to fix CVE-2010-2233, which fixes a speci... Incorporated patch to fix CVE-2010-2233, which fixes a specific failure of tif_getimage on 64-bit platforms.	Jay Berkenbilt	3.9.4-2	13 years ago
12		New upstream release New upstream release	Jay Berkenbilt	3.9.4-1	13 years ago
11		* SECURITY UPDATE: arbitrary code execution via multiple int... * SECURITY UPDATE: arbitrary code execution via multiple integer   overflows.  Backported upstream fixes:   - debian/patches/CVE-2010-1411.patch   - debian/patches/CVE-2010-2065.patch   - debian/patches/CVE-2010-2067.patch   - debian/patches/fix-64bit-flip.patch	Kees Cook	3.9.2-3ubuntu1	13 years ago
10		* Depend on libjpeg-dev instead of libjpeg62-dev. (Closes: ... * Depend on libjpeg-dev instead of libjpeg62-dev.  (Closes: #569242) * Change source format to '3.0 (quilt)' * Update standards version to 3.8.4.  No changes required.	Jay Berkenbilt	3.9.2-3	14 years ago
9		* Include patch from upstream to fix problems with TIFFReadS... * Include patch from upstream to fix problems with TIFFReadScanline()   and ycbcr-encoded JPEG images.  (Closes: #510792) * Fix some manual page spelling errors found by lintian.	Jay Berkenbilt	3.9.2-2	14 years ago
8		New upstream release New upstream release	Jay Berkenbilt	3.9.2-1	14 years ago

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.1