This bug was fixed in the package tiff - 4.0.3-9
Sponsored for Artur Rona (ari-tczew)
---------------
tiff (4.0.3-9) unstable; urgency=medium
* Fix for CVE-2013-4243 (validation for gif2tiff) from Red Hat. (Closes:
#742917)
-- Jay Berkenbilt <[email protected]> Sat, 21 Jun 2014 18:12:40 -0400
** Changed in: tiff (Ubuntu)
Status: New => Fix Released
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2013-4243
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to tiff in Ubuntu.
https://bugs.launchpad.net/bugs/1333429
Title:
Sync tiff 4.0.3-9 (main) from Debian unstable (main)
Status in “tiff” package in Ubuntu:
Fix Released
Bug description:
Please sync tiff 4.0.3-9 (main) from Debian unstable (main)
Explanation of the Ubuntu delta and why it can be dropped:
* SECURITY UPDATE: denial of service and possible code execution in
gif2tiff tool
- debian/patches/CVE-2013-4243.patch: check width and height in
tools/gif2tiff.c.
- CVE-2013-4243
Debian has merged Ubuntu changes.
Changelog entries since current utopic version 4.0.3-8ubuntu1:
tiff (4.0.3-9) unstable; urgency=medium
* Fix for CVE-2013-4243 (validation for gif2tiff) from Red Hat. (Closes:
#742917)
-- Jay Berkenbilt <[email protected]> Sat, 21 Jun 2014 18:12:40 -0400
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/tiff/+bug/1333429/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
