-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 31 May 2018 22:33:36 +0000 Source: tiff Binary: libtiff5 libtiffxx5 libtiff5-dev libtiff5-alt-dev libtiff-tools libtiff-opengl libtiff-doc Architecture: source all amd64 Version: 4.0.2-6+deb7u21 Distribution: wheezy-security Urgency: medium Maintainer: Ondřej Surý <ond...@debian.org> Changed-By: Holger Levsen <hol...@debian.org> Description: libtiff-doc - TIFF manipulation and conversion documentation libtiff-opengl - TIFF manipulation and conversion tools libtiff-tools - TIFF manipulation and conversion tools libtiff5 - Tag Image File Format (TIFF) library libtiff5-alt-dev - Tag Image File Format library (TIFF), alternative development fil libtiff5-dev - Tag Image File Format library (TIFF), development files libtiffxx5 - Tag Image File Format (TIFF) library -- C++ interface Closes: 869823 890441 Changes: tiff (4.0.2-6+deb7u21) wheezy-security; urgency=medium . * Non-maintainer upload by the LTS Team. * Fix CVE-2017-11613: avoid memory exhaustion in ChopUpSingleUncompressedStrip() (Closes: #869823). * Fix CVE-2018-5784: DoS via resource consumption: debian/patches/CVE-2018-5784.patch: fix infinite loop in contrib/addtiffo/tif_overview.c, tools/tiff2pdf.c, tools/tiffcrop.c. (Closes: #890441) Checksums-Sha1: 206b18be5a77fa033eda58697f4dedd17414d6fc 2210 tiff_4.0.2-6+deb7u21.dsc de7204fae8c40078802f9b9d801790a1b21072ac 88970 tiff_4.0.2-6+deb7u21.debian.tar.gz d4b89abd5fb0f801dba98a97d74ddc377af25a64 415668 libtiff-doc_4.0.2-6+deb7u21_all.deb 744367a75936e36ff8823caf9e3ad589ec1f13cc 241128 libtiff5_4.0.2-6+deb7u21_amd64.deb d4872e60cfd5ab5ef22c0a26e0e428dfaa94133d 77474 libtiffxx5_4.0.2-6+deb7u21_amd64.deb 92be50e26bb83f2b61297061b8c52d376ba46a29 383736 libtiff5-dev_4.0.2-6+deb7u21_amd64.deb 332047c6cee2211aff27aabeea1442c7f5d1f7d3 303944 libtiff5-alt-dev_4.0.2-6+deb7u21_amd64.deb ff46266670a246111e14675536e149bde7f32d1d 308398 libtiff-tools_4.0.2-6+deb7u21_amd64.deb 05f566170354fd3031c3998ae0bbef17eb010b5b 82894 libtiff-opengl_4.0.2-6+deb7u21_amd64.deb Checksums-Sha256: 8575bcf3ec82e60c95ae18729d5f1f2200b8748fbb6cfde01c5846d2de41bf0d 2210 tiff_4.0.2-6+deb7u21.dsc 1dd9be64549baefd1e243448825cb29ea0eda44d5a7e8be12836b6daf8930c53 88970 tiff_4.0.2-6+deb7u21.debian.tar.gz 6af00153ada54b30c85ac67601ee74fc4b7f66f7b2492cd0f0bb43caeaa902a0 415668 libtiff-doc_4.0.2-6+deb7u21_all.deb a06bf04b31161a9b8e7fc5f39bb1cbdfaedfd18e0a3137c378dd3e73a128df34 241128 libtiff5_4.0.2-6+deb7u21_amd64.deb 265900c26ac99c6df082f5dac83adeb072135ba501376d6d56b717ff7eefb003 77474 libtiffxx5_4.0.2-6+deb7u21_amd64.deb eb062680db7f85292b5b66d304d1327a568f41a665cab7b48cd8ba6ee6cd92c2 383736 libtiff5-dev_4.0.2-6+deb7u21_amd64.deb bd7f8627cfa35994d5e5e4ca786209ea4d5d92555d4062aa3f5264f4489e6fb3 303944 libtiff5-alt-dev_4.0.2-6+deb7u21_amd64.deb 9e0d2b40521a565a44ad89afba2569d3917b7c15a5dea3bf1e6a8fa86bf9d780 308398 libtiff-tools_4.0.2-6+deb7u21_amd64.deb e6d4e9c5917361a1a0ad8acf97ddcde23023535eee61f6d2aff0a58ae353fc0c 82894 libtiff-opengl_4.0.2-6+deb7u21_amd64.deb Files: b4f934b07252d0bc21b82ef3b43a37fa 2210 libs optional tiff_4.0.2-6+deb7u21.dsc 01172a03ae63afa11bf93c2be7b636a1 88970 libs optional tiff_4.0.2-6+deb7u21.debian.tar.gz c889ad242a637763d60623ace771d6de 415668 doc optional libtiff-doc_4.0.2-6+deb7u21_all.deb a4af15bfee9a81dab91e2c46bff4833d 241128 libs optional libtiff5_4.0.2-6+deb7u21_amd64.deb b3e27c4bbb8a4364e53d8cf1dad59c2d 77474 libs optional libtiffxx5_4.0.2-6+deb7u21_amd64.deb 373332082b0b0d63303f6c9da676c66b 383736 libdevel optional libtiff5-dev_4.0.2-6+deb7u21_amd64.deb eee2d75b61d6bff1d0ac3e22c0720a4d 303944 libdevel optional libtiff5-alt-dev_4.0.2-6+deb7u21_amd64.deb 53471b0b4a9b1843f6a27bdf837278e8 308398 graphics optional libtiff-tools_4.0.2-6+deb7u21_amd64.deb 1c3dbb0564158dec8643f2e396c5236a 82894 graphics optional libtiff-opengl_4.0.2-6+deb7u21_amd64.deb
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAlsQe1MACgkQCRq4Vgaa qhxS9A/+Js/PrL57yEQagiJqMsOpVFKKILxs54BBWwbXJH9f4IAMyqfg5gHfGfZE sCb/gUGGs0gUJ1MPFkqflzZ5ZD0FIORbPTv3LeY452Bi6wxJFphH0aV35OgY8Sxq l20gi8cQmgB51taOiw2nokptNcBUiRKT8VdAt/fBGqnMPA+juluTHyaQmDIbBQsk BwAO4vtPBkL8jDdrWOTD0n/vvPMmynHhvYfsMxK+Yt7xCV3QzhgLybwDuHuNkO9a o0hr5SZWEJOxpYESNwLGQh8hrupbt8Dt33Bk2m0SiFqcomcelaANXXsijhQrvJXW ZnB+/UzsoAoTLOUQN3n2qkNSj8rhPs/pb42bekMSvMjAN37F9UNyzFOPU9Se04/o w3lpaUTTKnwdvCmVfkZmN3u7jAUplpXFtCZngB7DjZAzys+noT5aqw3Ck57HmLNb A4EWFSTGXyl06TthwozjwBCwlqHjvqF9JFVIaG1H9FIlwGtTiwxXnhfErjEc7GQi Hp8lmXhWJCFjuaYc7GXU2/7HhDUs+IC9STVMWdssPHJ/JVkcRCWdRUtZxDixZfi8 rcXkt+nkphYTpmVK8/q3gbC4rYIyBfpW9TZ6C1qBUhl28uQy8EVLvVbjb5NmShTl A/SuPwTVc9WGHOCajr9Xob84BeKnOMX+16c3wYmE0GRSJMGq3R4= =9tGV -----END PGP SIGNATURE-----