Ubuntu
tiff package

tiff 3.9.2-2ubuntu0.13 source package in Ubuntu

Changelog

tiff (3.9.2-2ubuntu0.13) lucid-security; urgency=low

  * SECURITY UPDATE: denial of service and possible code execution via heap
    overflow in tp_process_jpeg_strip().
    - debian/patches/CVE-2013-1960.patch: improve tp_process_jpeg_strip()
      logic in tools/tiff2pdf.c.
    - CVE-2013-1960
  * SECURITY UPDATE: denial of service via stack overflow with malformed
    image-length and resolution.
    - debian/patches/CVE-2013-1961.patch: replace use of sprintf() with
      snprintf() in contrib/dbs/xtiff/xtiff.c, libtiff/tif_codec.c,
      libtiff/tif_dirinfo.c, tools/rgb2ycbcr.c, tools/tiff2bw.c,
      tools/tiff2pdf.c, tools/tiff2ps.c, tools/tiffcrop.c,
      tools/tiffdither.c.
    - CVE-2013-1961
 -- Marc Deslauriers <email address hidden>   Mon, 13 May 2013 11:29:22 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Lucid
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
tiff_3.9.2.orig.tar.gz 1.4 MiB 3cd566c19291ea3379115dd0d2ebcdefb6a7cf0511cc33e733ec3a500e10da69
tiff_3.9.2-2ubuntu0.13.diff.gz 34.6 KiB 6bfdef62134ab94ee5c9cb762bd83aaa414e10373e49ddc84d4e64ce9b9738f6
tiff_3.9.2-2ubuntu0.13.dsc 1.9 KiB 38de15e7966d87560c73be63d913961bbf42254ddaefb3ea1f1005f3e73ea3b6

View changes file

Binary packages built by this source

libtiff-doc: No summary available for libtiff-doc in ubuntu lucid.

No description available for libtiff-doc in ubuntu lucid.

libtiff-opengl: No summary available for libtiff-opengl in ubuntu lucid.

No description available for libtiff-opengl in ubuntu lucid.

libtiff-tools: No summary available for libtiff-tools in ubuntu lucid.

No description available for libtiff-tools in ubuntu lucid.

libtiff4: No summary available for libtiff4 in ubuntu lucid.

No description available for libtiff4 in ubuntu lucid.

libtiff4-dev: No summary available for libtiff4-dev in ubuntu lucid.

No description available for libtiff4-dev in ubuntu lucid.

libtiffxx0c2: No summary available for libtiffxx0c2 in ubuntu lucid.

No description available for libtiffxx0c2 in ubuntu lucid.