~ubuntu-branches/ubuntu/quantal/tiff/quantal-security : changes

~ubuntu-branches/ubuntu/quantal/tiff/quantal-security » Changes from revision 31

From Revision 31 to 12

Rev	Summary	Authors	Tags	Date
31	* SECURITY UPDATE: denial of service via buffer overflow in ... * SECURITY UPDATE: denial of service via buffer overflow in gif2tiff - debian/patches/CVE-2013-4231.patch: validate datasize in tools/gif2tiff.c. - CVE-2013-4231 * SECURITY UPDATE: denial of service via use-after-free in tiff2pdf - debian/patches/CVE-2013-4232.patch: properly exit on error in tools/tiff2pdf.c. - CVE-2013-4232 * SECURITY UPDATE: denial of service and possible code execution in gif2tiff tool - debian/patches/CVE-2013-4243.patch: check width and height in tools/gif2tiff.c. - CVE-2013-4243 * SECURITY UPDATE: denial of service and possible code execution in gif2tiff tool LZW decompressor - debian/patches/CVE-2013-4244.patch: validate code size in tools/gif2tiff.c. - CVE-2013-4244	Marc Deslauriers	4.0.2-1ubuntu2.3	9 years ago
30	* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via heap overflow in tp_process_jpeg_strip(). - debian/patches/CVE-2013-1960.patch: improve tp_process_jpeg_strip() logic in tools/tiff2pdf.c. - CVE-2013-1960 * SECURITY UPDATE: denial of service via stack overflow with malformed image-length and resolution. - debian/patches/CVE-2013-1961.patch: replace use of sprintf() with snprintf() in contrib/dbs/xtiff/xtiff.c, libtiff/tif_codec.c, libtiff/tif_dirinfo.c, tools/rgb2ycbcr.c, tools/tiff2bw.c, tools/tiff2pdf.c, tools/tiff2ps.c, tools/tiffcrop.c, tools/tiffdither.c. - CVE-2013-1961	Marc Deslauriers	4.0.2-1ubuntu2.2	10 years ago
29	* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via PixarLog compression format - debian/patches/CVE-2012-4447.patch: fix buffer size in libtiff/tif_pixarlog.c. - CVE-2012-4447 * SECURITY UPDATE: denial of service and possible code execution via crafted PPM image - debian/patches/CVE-2012-4564.patch: check scanline_size in tools/ppm2tiff.c. - CVE-2012-4564	Marc Deslauriers	4.0.2-1ubuntu2.1	11 years ago
28	* SECURITY UPDATE: possible arbitrary code execution via hea... * SECURITY UPDATE: possible arbitrary code execution via heap overflow in tiff2pdf. - debian/patches/CVE-2012-3401.patch: properly set t2p->t2p_error in tools/tiff2pdf.c. - CVE-2012-3401	Marc Deslauriers	4.0.2-1ubuntu2	11 years ago
27	* debian/control: * debian/control: - Have libtiff5-dev Provide libtiff-dev	Michael Terry	4.0.2-1ubuntu1	11 years ago
26	New upstream release New upstream release	Jay Berkenbilt	4.0.2-1	11 years ago
25	* SECURITY UPDATE: possible arbitrary code execution via buf... * SECURITY UPDATE: possible arbitrary code execution via buffer overflow due to type-conversion flaw (LP: #1016324) - debian/patches/CVE-2012-2088.patch: check for overflows in libtiff/tif_strip.c and libtiff/tif_tile.c. - CVE-2012-2088 * SECURITY UPDATE: possible arbitrary code execution via integer overflows in tiff2pdf (LP: #1016324) - debian/patches/CVE-2012-2113.patch: check for overflows in tools/tiff2pdf.c. - CVE-2012-2113	Marc Deslauriers	3.9.5-2ubuntu2	11 years ago
24	* SECURITY UPDATE: arbitrary code execution via size overflo... * SECURITY UPDATE: arbitrary code execution via size overflow - debian/patches/CVE-2012-1173.patch: use TIFFSafeMultiply in libtiff/tif_getimage.c, fix TIFFSafeMultiply in libtiff/tiffiop.h. - CVE-2012-1173	Marc Deslauriers	3.9.5-2ubuntu1	12 years ago
23	Implemented mulitarch and and PIE build for security hardeni... Implemented mulitarch and and PIE build for security hardening by integrating the changes from the Ubuntu tiff packages. Thanks to Marc Deslauriers and anyone else who did the actual work.	Jay Berkenbilt	3.9.5-2	12 years ago
22	* Merge from debian unstable. Remaining changes: * Merge from debian unstable. Remaining changes: - Enable multiarch build - debian/control: update depends for multiarch toolchain - debian/.install: update /usr/lib paths - debian/rules: - add --libdir to DEB_CONFIGURE_EXTRA_FLAGS - update library path for .la files - debian/{control,rules}: enable PIE build for security hardening Dropped patches: - CVE-2010-2482.patch: upstream - CVE-2010-2595.patch: upstream - CVE-2010-2597.patch: upstream - CVE-2010-2630.patch: upstream - CVE-2011-0192.patch: upstream - CVE-2011-1167.patch: upstream - CVE-2009-5022.patch: upstream	Marc Deslauriers	3.9.5-1ubuntu1	12 years ago
21	* SECURITY UPDATE: arbitrary code execution via malformed JP... * SECURITY UPDATE: arbitrary code execution via malformed JPEG - debian/patches/CVE-2009-5022.patch: check width in libtiff/tif_ojpeg.c. - CVE-2009-5022	Marc Deslauriers	3.9.4-5ubuntu6	13 years ago
20	* SECURITY UPDATE: arbitrary code execution via crafted * SECURITY UPDATE: arbitrary code execution via crafted THUNDER_2BITDELTAS data - debian/patches/CVE-2011-1167.patch: validate bitspersample and make sure npixels is sane in libtiff/tif_thunder.c. - CVE-2011-1167	Marc Deslauriers	3.9.4-5ubuntu5	13 years ago
19	* Enable multiarch build (LP: #733501) * Enable multiarch build (LP: #733501) - debian/control: update depends for multiarch toolchain - debian/*.install: update /usr/lib paths - debian/rules: - add --libdir to DEB_CONFIGURE_EXTRA_FLAGS - update library path for .la files	Kees Cook	3.9.4-5ubuntu4	13 years ago
18	* debian/patches/CVE-2011-0192.patch: update for regression ... * debian/patches/CVE-2011-0192.patch: update for regression in processing of certain CCITTFAX4 files (LP: #731540). - http://bugzilla.maptools.org/show_bug.cgi?id=2297	Kees Cook	3.9.4-5ubuntu3	13 years ago
17	* SECURITY UPDATE: denial of service via invalid td_stripbyt... * SECURITY UPDATE: denial of service via invalid td_stripbytecount field (LP: #597246) - debian/patches/CVE-2010-2482.patch: look for missing strip byte counts in libtiff/tif_ojpeg.c, tools/tiffsplit.c. - CVE-2010-2482 * SECURITY UPDATE: denial of service via invalid ReferenceBlackWhite values - debian/patches/CVE-2010-2595.patch: validate values in libtiff/tif_color.c. - CVE-2010-2595 * SECURITY UPDATE: denial of service via devide-by-zero (LP: #593067) - debian/patches/CVE-2010-2597.patch: properly initialize fields in libtiff/tif_strip.c. - CVE-2010-2597 - CVE-2010-2598 * SECURITY UPDATE: denial of service via out-of-order tags - debian/patches/CVE-2010-2630.patch: correctly handle order in libtiff/tif_dirread.c. - CVE-2010-2630 * SECURITY UPDATE: denial of service and possible code execution via buffer overflow in Fax4Decode - debian/patches/CVE-2011-0192.patch: check length in libtiff/tif_fax3.h. - CVE-2011-0192	Marc Deslauriers	3.9.4-5ubuntu2	13 years ago
16	debian/{control,rules}: enable PIE build for security harden... debian/{control,rules}: enable PIE build for security hardening (Closes: #613759).	Kees Cook	3.9.4-5ubuntu1	13 years ago
15	Incorporated fix to CVE-2010-3087, a potential denial of ser... Incorporated fix to CVE-2010-3087, a potential denial of service exploitable with a specially crafted TIFF file. (Closes: #600188)	Jay Berkenbilt	3.9.4-5	13 years ago
14	Incorporated fix to CVE-2010-2483, "fix crash on OOB reads i... Incorporated fix to CVE-2010-2483, "fix crash on OOB reads in putcontig8bitYCbCr11tile". (Closes: #595064)	Jay Berkenbilt	3.9.4-4	13 years ago
13	Incorporated patch to fix CVE-2010-2233, which fixes a speci... Incorporated patch to fix CVE-2010-2233, which fixes a specific failure of tif_getimage on 64-bit platforms.	Jay Berkenbilt	3.9.4-2	13 years ago
12	New upstream release New upstream release	Jay Berkenbilt	3.9.4-1	13 years ago

Older »