~ubuntu-branches/ubuntu/precise/tiff/precise-security

• Changes
• Files

~ubuntu-branches/ubuntu/precise/tiff/precise-security » Changes from revision 32

From Revision 32 to 13

expand all

collapse all

Rev		Summary	Authors	Tags	Date	Diff	Files
32		* SECURITY REGRESSION: regression when saving TIFF files wit... * SECURITY REGRESSION: regression when saving TIFF files with compression   predictor (LP: #1439186)   - debian/patches/CVE-2014-8128-5.patch: disable until proper upstream     fix is available.	Marc Deslauriers	3.9.5-2ubuntu1.8	9 years ago
31		* SECURITY UPDATE: Fix multiple security issues * SECURITY UPDATE: Fix multiple security issues   - debian/patches/CVE-2014-81xx-1.patch to CVE-2014-81xx-11.patch   - debian/patches/CVE-2014-8128-5.patch   - debian/patches/CVE-2014-9655-1.patch to CVE-2014-9655-3.patch   - debian/patches/read_overrun.patch   - debian/patches/CVE-2014-8130.patch   - CVE-2014-8127 (partially)   - CVE-2014-8128   - CVE-2014-8129   - CVE-2014-8130   - CVE-2014-9330   - CVE-2014-9655	Marc Deslauriers	3.9.5-2ubuntu1.7	9 years ago
30		* SECURITY UPDATE: denial of service via buffer overflow in ... * SECURITY UPDATE: denial of service via buffer overflow in gif2tiff   - debian/patches/CVE-2013-4231.patch: validate datasize in     tools/gif2tiff.c.   - CVE-2013-4231 * SECURITY UPDATE: denial of service via use-after-free in tiff2pdf   - debian/patches/CVE-2013-4232.patch: properly exit on error in     tools/tiff2pdf.c.   - CVE-2013-4232 * SECURITY UPDATE: denial of service and possible code execution in   gif2tiff tool   - debian/patches/CVE-2013-4243.patch: check width and height in     tools/gif2tiff.c.   - CVE-2013-4243 * SECURITY UPDATE: denial of service and possible code execution in   gif2tiff tool LZW decompressor   - debian/patches/CVE-2013-4244.patch: validate code size in     tools/gif2tiff.c.   - CVE-2013-4244	Marc Deslauriers	3.9.5-2ubuntu1.6	9 years ago
29		* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via heap   overflow in tp_process_jpeg_strip().   - debian/patches/CVE-2013-1960.patch: improve tp_process_jpeg_strip()     logic in tools/tiff2pdf.c.   - CVE-2013-1960 * SECURITY UPDATE: denial of service via stack overflow with malformed   image-length and resolution.   - debian/patches/CVE-2013-1961.patch: replace use of sprintf() with     snprintf() in contrib/dbs/xtiff/xtiff.c, libtiff/tif_codec.c,     libtiff/tif_dirinfo.c, tools/rgb2ycbcr.c, tools/tiff2bw.c,     tools/tiff2pdf.c, tools/tiff2ps.c, tools/tiffcrop.c,     tools/tiffdither.c.   - CVE-2013-1961	Marc Deslauriers	3.9.5-2ubuntu1.5	10 years ago
28		* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via   PAGENUMBER, HALFTONEHINTS, YCBCRSUBSAMPLING, and DOTRANGE tags.   - debian/patches/CVE-2012-5581.patch: remove special cases of tags,     improve DOTRANGE tag case   - CVE-2012-5581	Seth Arnold	3.9.5-2ubuntu1.4	11 years ago
27		* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via   PixarLog compression format   - debian/patches/CVE-2012-4447.patch: fix buffer size in     libtiff/tif_pixarlog.c.   - CVE-2012-4447 * SECURITY UPDATE: denial of service and possible code execution via   crafted PPM image   - debian/patches/CVE-2012-4564.patch: check scanline_size in     tools/ppm2tiff.c.   - CVE-2012-4564	Marc Deslauriers	3.9.5-2ubuntu1.3	11 years ago
26		* SECURITY UPDATE: possible arbitrary code execution via hea... * SECURITY UPDATE: possible arbitrary code execution via heap overflow   in tiff2pdf.   - debian/patches/CVE-2012-3401.patch: properly set t2p->t2p_error in     tools/tiff2pdf.c.   - CVE-2012-3401	Marc Deslauriers	3.9.5-2ubuntu1.2	11 years ago
25		* SECURITY UPDATE: possible arbitrary code execution via buf... * SECURITY UPDATE: possible arbitrary code execution via buffer overflow   due to type-conversion flaw (LP: #1016324)   - debian/patches/CVE-2012-2088.patch: check for overflows in     libtiff/tif_strip.c and libtiff/tif_tile.c.   - CVE-2012-2088 * SECURITY UPDATE: possible arbitrary code execution via integer   overflows in tiff2pdf (LP: #1016324)   - debian/patches/CVE-2012-2113.patch: check for overflows in     tools/tiff2pdf.c.   - CVE-2012-2113	Marc Deslauriers	3.9.5-2ubuntu1.1	11 years ago
24		* SECURITY UPDATE: arbitrary code execution via size overflo... * SECURITY UPDATE: arbitrary code execution via size overflow   - debian/patches/CVE-2012-1173.patch: use TIFFSafeMultiply in     libtiff/tif_getimage.c, fix TIFFSafeMultiply in libtiff/tiffiop.h.   - CVE-2012-1173	Marc Deslauriers	3.9.5-2ubuntu1	12 years ago
23		Implemented mulitarch and and PIE build for security hardeni... Implemented mulitarch and and PIE build for security hardening by integrating the changes from the Ubuntu tiff packages.  Thanks to Marc Deslauriers and anyone else who did the actual work.	Jay Berkenbilt	3.9.5-2	12 years ago
22		* Merge from debian unstable. Remaining changes: * Merge from debian unstable. Remaining changes:   - Enable multiarch build     - debian/control: update depends for multiarch toolchain     - debian/*.install: update /usr/lib paths     - debian/rules:       - add --libdir to DEB_CONFIGURE_EXTRA_FLAGS       - update library path for .la files   - debian/{control,rules}: enable PIE build for security hardening * Dropped patches:   - CVE-2010-2482.patch: upstream   - CVE-2010-2595.patch: upstream   - CVE-2010-2597.patch: upstream   - CVE-2010-2630.patch: upstream   - CVE-2011-0192.patch: upstream   - CVE-2011-1167.patch: upstream   - CVE-2009-5022.patch: upstream	Marc Deslauriers	3.9.5-1ubuntu1	12 years ago
21		* SECURITY UPDATE: arbitrary code execution via malformed JP... * SECURITY UPDATE: arbitrary code execution via malformed JPEG   - debian/patches/CVE-2009-5022.patch: check width in     libtiff/tif_ojpeg.c.   - CVE-2009-5022	Marc Deslauriers	3.9.4-5ubuntu6	13 years ago
20		* SECURITY UPDATE: arbitrary code execution via crafted * SECURITY UPDATE: arbitrary code execution via crafted   THUNDER_2BITDELTAS data   - debian/patches/CVE-2011-1167.patch: validate bitspersample and     make sure npixels is sane in libtiff/tif_thunder.c.   - CVE-2011-1167	Marc Deslauriers	3.9.4-5ubuntu5	13 years ago
19		* Enable multiarch build (LP: #733501) * Enable multiarch build (LP: #733501)   - debian/control: update depends for multiarch toolchain   - debian/*.install: update /usr/lib paths   - debian/rules:     - add --libdir to DEB_CONFIGURE_EXTRA_FLAGS     - update library path for .la files	Kees Cook	3.9.4-5ubuntu4	13 years ago
18		* debian/patches/CVE-2011-0192.patch: update for regression ... * debian/patches/CVE-2011-0192.patch: update for regression in   processing of certain CCITTFAX4 files (LP: #731540).   - http://bugzilla.maptools.org/show_bug.cgi?id=2297	Kees Cook	3.9.4-5ubuntu3	13 years ago
17		* SECURITY UPDATE: denial of service via invalid td_stripbyt... * SECURITY UPDATE: denial of service via invalid td_stripbytecount field   (LP: #597246)   - debian/patches/CVE-2010-2482.patch: look for missing strip byte     counts in libtiff/tif_ojpeg.c, tools/tiffsplit.c.   - CVE-2010-2482 * SECURITY UPDATE: denial of service via invalid ReferenceBlackWhite   values   - debian/patches/CVE-2010-2595.patch: validate values in     libtiff/tif_color.c.   - CVE-2010-2595 * SECURITY UPDATE: denial of service via devide-by-zero (LP: #593067)   - debian/patches/CVE-2010-2597.patch: properly initialize fields in     libtiff/tif_strip.c.   - CVE-2010-2597   - CVE-2010-2598 * SECURITY UPDATE: denial of service via out-of-order tags   - debian/patches/CVE-2010-2630.patch: correctly handle order in     libtiff/tif_dirread.c.   - CVE-2010-2630 * SECURITY UPDATE: denial of service and possible code execution via   buffer overflow in Fax4Decode   - debian/patches/CVE-2011-0192.patch: check length in     libtiff/tif_fax3.h.   - CVE-2011-0192	Marc Deslauriers	3.9.4-5ubuntu2	13 years ago
16		debian/{control,rules}: enable PIE build for security harden... debian/{control,rules}: enable PIE build for security hardening (Closes: #613759).	Kees Cook	3.9.4-5ubuntu1	13 years ago
15		Incorporated fix to CVE-2010-3087, a potential denial of ser... Incorporated fix to CVE-2010-3087, a potential denial of service exploitable with a specially crafted TIFF file.  (Closes: #600188)	Jay Berkenbilt	3.9.4-5	13 years ago
14		Incorporated fix to CVE-2010-2483, "fix crash on OOB reads i... Incorporated fix to CVE-2010-2483, "fix crash on OOB reads in putcontig8bitYCbCr11tile".  (Closes: #595064)	Jay Berkenbilt	3.9.4-4	13 years ago
13		Incorporated patch to fix CVE-2010-2233, which fixes a speci... Incorporated patch to fix CVE-2010-2233, which fixes a specific failure of tif_getimage on 64-bit platforms.	Jay Berkenbilt	3.9.4-2	13 years ago

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.1