~ubuntu-branches/ubuntu/trusty/tiff/trusty-security : changes

~ubuntu-branches/ubuntu/trusty/tiff/trusty-security » Changes from revision 36

From Revision 36 to 17

Rev	Summary	Authors	Tags	Date
36	* SECURITY REGRESSION: regression when saving TIFF files wit... * SECURITY REGRESSION: regression when saving TIFF files with compression predictor (LP: #1439186) - debian/patches/CVE-2014-8128-5.patch: disable until proper upstream fix is available.	Marc Deslauriers	4.0.3-7ubuntu0.3	9 years ago
35	* SECURITY UPDATE: Fix multiple security issues * SECURITY UPDATE: Fix multiple security issues - debian/patches/CVE-2014-81xx-1.patch to CVE-2014-81xx-11.patch - debian/patches/CVE-2014-8128-5.patch - debian/patches/CVE-2014-9655-1.patch to CVE-2014-9655-3.patch - debian/patches/read_overrun.patch - debian/patches/estimatestripbytecounts_return_code.patch - debian/patches/CVE-2014-8130.patch - CVE-2014-8127 (partially) - CVE-2014-8128 - CVE-2014-8129 - CVE-2014-8130 - CVE-2014-9330 - CVE-2014-9655	Marc Deslauriers	4.0.3-7ubuntu0.2	9 years ago
34	* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution in gif2tiff tool - debian/patches/CVE-2013-4243.patch: check width and height in tools/gif2tiff.c. - CVE-2013-4243	Marc Deslauriers	4.0.3-7ubuntu0.1	9 years ago
33	Use dh-autoreconf to support new architectures in Ubuntu. Use dh-autoreconf to support new architectures in Ubuntu.	Jay Berkenbilt	4.0.3-7	10 years ago
32	Build using dh-autoreconf. Build using dh-autoreconf.	Matthias Klose	4.0.3-6ubuntu1	10 years ago
31	* Update standards to 3.9.5. No changes required. * Update standards to 3.9.5. No changes required. * libtiff4 -> libtiff5 transition. libtiff5-dev now provides libtiff-dev. libtiff5-alt-dev and libtiff4-dev are transitional packages that depend on libtiff5-dev. They will both be removed before jessie.	Jay Berkenbilt	4.0.3-6	10 years ago
30	* Merge from debian. Remaining changes: * Merge from debian. Remaining changes: - debian/control: Have libtiff5-dev Provide libtiff-dev	Jackson Doak	4.0.3-5ubuntu1	10 years ago
29	* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via heap overflow in tp_process_jpeg_strip(). - debian/patches/CVE-2013-1960.patch: improve tp_process_jpeg_strip() logic in tools/tiff2pdf.c. - CVE-2013-1960 * SECURITY UPDATE: denial of service via stack overflow with malformed image-length and resolution. - debian/patches/CVE-2013-1961.patch: replace use of sprintf() with snprintf() in contrib/dbs/xtiff/xtiff.c, libtiff/tif_codec.c, libtiff/tif_dirinfo.c, tools/rgb2ycbcr.c, tools/tiff2bw.c, tools/tiff2pdf.c, tools/tiff2ps.c, tools/tiffcrop.c, tools/tiffdither.c. - CVE-2013-1961	Marc Deslauriers	4.0.2-4ubuntu3	10 years ago
28	* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via crafted PPM image - debian/patches/CVE-2012-4564.patch: check scanline_size in tools/ppm2tiff.c. - CVE-2012-4564	Marc Deslauriers	4.0.2-4ubuntu2	11 years ago
27	* Resynchronize on Debian, remaining change * Resynchronize on Debian, remaining change * debian/control: Have libtiff5-dev Provide libtiff-dev	Sebastien Bacher	4.0.2-4ubuntu1	11 years ago
26	New upstream release New upstream release	Jay Berkenbilt	4.0.2-1	11 years ago
25	* SECURITY UPDATE: possible arbitrary code execution via buf... * SECURITY UPDATE: possible arbitrary code execution via buffer overflow due to type-conversion flaw (LP: #1016324) - debian/patches/CVE-2012-2088.patch: check for overflows in libtiff/tif_strip.c and libtiff/tif_tile.c. - CVE-2012-2088 * SECURITY UPDATE: possible arbitrary code execution via integer overflows in tiff2pdf (LP: #1016324) - debian/patches/CVE-2012-2113.patch: check for overflows in tools/tiff2pdf.c. - CVE-2012-2113	Marc Deslauriers	3.9.5-2ubuntu2	11 years ago
24	* SECURITY UPDATE: arbitrary code execution via size overflo... * SECURITY UPDATE: arbitrary code execution via size overflow - debian/patches/CVE-2012-1173.patch: use TIFFSafeMultiply in libtiff/tif_getimage.c, fix TIFFSafeMultiply in libtiff/tiffiop.h. - CVE-2012-1173	Marc Deslauriers	3.9.5-2ubuntu1	12 years ago
23	Implemented mulitarch and and PIE build for security hardeni... Implemented mulitarch and and PIE build for security hardening by integrating the changes from the Ubuntu tiff packages. Thanks to Marc Deslauriers and anyone else who did the actual work.	Jay Berkenbilt	3.9.5-2	12 years ago
22	* Merge from debian unstable. Remaining changes: * Merge from debian unstable. Remaining changes: - Enable multiarch build - debian/control: update depends for multiarch toolchain - debian/.install: update /usr/lib paths - debian/rules: - add --libdir to DEB_CONFIGURE_EXTRA_FLAGS - update library path for .la files - debian/{control,rules}: enable PIE build for security hardening Dropped patches: - CVE-2010-2482.patch: upstream - CVE-2010-2595.patch: upstream - CVE-2010-2597.patch: upstream - CVE-2010-2630.patch: upstream - CVE-2011-0192.patch: upstream - CVE-2011-1167.patch: upstream - CVE-2009-5022.patch: upstream	Marc Deslauriers	3.9.5-1ubuntu1	12 years ago
21	* SECURITY UPDATE: arbitrary code execution via malformed JP... * SECURITY UPDATE: arbitrary code execution via malformed JPEG - debian/patches/CVE-2009-5022.patch: check width in libtiff/tif_ojpeg.c. - CVE-2009-5022	Marc Deslauriers	3.9.4-5ubuntu6	13 years ago
20	* SECURITY UPDATE: arbitrary code execution via crafted * SECURITY UPDATE: arbitrary code execution via crafted THUNDER_2BITDELTAS data - debian/patches/CVE-2011-1167.patch: validate bitspersample and make sure npixels is sane in libtiff/tif_thunder.c. - CVE-2011-1167	Marc Deslauriers	3.9.4-5ubuntu5	13 years ago
19	* Enable multiarch build (LP: #733501) * Enable multiarch build (LP: #733501) - debian/control: update depends for multiarch toolchain - debian/*.install: update /usr/lib paths - debian/rules: - add --libdir to DEB_CONFIGURE_EXTRA_FLAGS - update library path for .la files	Kees Cook	3.9.4-5ubuntu4	13 years ago
18	* debian/patches/CVE-2011-0192.patch: update for regression ... * debian/patches/CVE-2011-0192.patch: update for regression in processing of certain CCITTFAX4 files (LP: #731540). - http://bugzilla.maptools.org/show_bug.cgi?id=2297	Kees Cook	3.9.4-5ubuntu3	13 years ago
17	* SECURITY UPDATE: denial of service via invalid td_stripbyt... * SECURITY UPDATE: denial of service via invalid td_stripbytecount field (LP: #597246) - debian/patches/CVE-2010-2482.patch: look for missing strip byte counts in libtiff/tif_ojpeg.c, tools/tiffsplit.c. - CVE-2010-2482 * SECURITY UPDATE: denial of service via invalid ReferenceBlackWhite values - debian/patches/CVE-2010-2595.patch: validate values in libtiff/tif_color.c. - CVE-2010-2595 * SECURITY UPDATE: denial of service via devide-by-zero (LP: #593067) - debian/patches/CVE-2010-2597.patch: properly initialize fields in libtiff/tif_strip.c. - CVE-2010-2597 - CVE-2010-2598 * SECURITY UPDATE: denial of service via out-of-order tags - debian/patches/CVE-2010-2630.patch: correctly handle order in libtiff/tif_dirread.c. - CVE-2010-2630 * SECURITY UPDATE: denial of service and possible code execution via buffer overflow in Fax4Decode - debian/patches/CVE-2011-0192.patch: check length in libtiff/tif_fax3.h. - CVE-2011-0192	Marc Deslauriers	3.9.4-5ubuntu2	13 years ago

Older »