[DebianGIS-dev] r2140 - packages/dans-gdal-scripts/tags

2009-04-07 Thread frankie
Author: frankie
Date: 2009-04-07 08:06:28 + (Tue, 07 Apr 2009)
New Revision: 2140

Added:
   packages/dans-gdal-scripts/tags/0.14-1/
Log:
[svn-buildpackage] Tagging dans-gdal-scripts (0.14-1)


___
Pkg-grass-devel mailing list
Pkg-grass-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/pkg-grass-devel


[DebianGIS-dev] r2141 - packages/geotiff/libgeotiff-dfsg/trunk/debian

2009-04-07 Thread frankie
Author: frankie
Date: 2009-04-07 11:00:22 + (Tue, 07 Apr 2009)
New Revision: 2141

Added:
   packages/geotiff/libgeotiff-dfsg/trunk/debian/listgeo.1
Modified:
   packages/geotiff/libgeotiff-dfsg/trunk/debian/changelog
   packages/geotiff/libgeotiff-dfsg/trunk/debian/rules
Log:
Added listgeo man page.


Modified: packages/geotiff/libgeotiff-dfsg/trunk/debian/changelog
===
--- packages/geotiff/libgeotiff-dfsg/trunk/debian/changelog 2009-04-07 
08:06:28 UTC (rev 2140)
+++ packages/geotiff/libgeotiff-dfsg/trunk/debian/changelog 2009-04-07 
11:00:22 UTC (rev 2141)
@@ -1,9 +1,9 @@
-libgeotiff-dfsg (1.2.5-2) UNRELEASED; urgency=low
+libgeotiff-dfsg (1.2.5-2) unstable; urgency=low
 
-  * NOT RELEASED YET
   * Changed build-dep: proj - libproj-dev.
+  * Added listgeo.1 manpage, taken from trac. 
 
- -- Francesco Paolo Lovergine fran...@debian.org  Mon, 30 Mar 2009 11:43:59 
+0200
+ -- Francesco Paolo Lovergine fran...@debian.org  Tue, 07 Apr 2009 12:58:00 
+0200
 
 libgeotiff-dfsg (1.2.5-1) unstable; urgency=low
 

Added: packages/geotiff/libgeotiff-dfsg/trunk/debian/listgeo.1
===
--- packages/geotiff/libgeotiff-dfsg/trunk/debian/listgeo.1 
(rev 0)
+++ packages/geotiff/libgeotiff-dfsg/trunk/debian/listgeo.1 2009-04-07 
11:00:22 UTC (rev 2141)
@@ -0,0 +1,50 @@
+\ TITLE: listgeo Man Pages
+\ AUTHOR: Marco Cecchetti mrc.i...@gmail.com
+\ 
+.TH LISTGEO 1 October 2008 libgeotiff 1.2.5 listgeo Manual Pages
+.SH NAME
+listgeo \- dump geotiff metadata
+
+.SH SYNOPSIS
+.B listgeo 
+[\-tfw] [\-no_norm] [\-proj4] [\-t \fIDIR\fP] file
+.SH DESCRIPTION
+
+.PP
+The program listgeo takes a GeoTIFF file as input and dumps to the standard 
+output a GeoTIFF metadata file, which is human readable, and may also be 
+used as input to other programs which use the GTIFImport routine, such as 
+geotifcp.
+
+.SH OPTIONS
+.1
+listgeo accepts the following options:
+.TP 6
+.B \-d
+report lat/long corners in decimal degrees instead of DMS
+.TP 6 
+.B \-tfw 
+Generate a .tfw (ESRI TIFF World) file for the target file
+.TP 6
+.B \-no-norm
+Don't report 'normalized' parameter values
+.TP 6 
+.B \-proj4 
+Report PROJ.4 equivelent projection definition
+.TP 6
+.B \-t \fIDIR\fP
+force to look in \fIDIR\fP for EPSG_CVS files, overriding default behaviour
+
+.SH OTHER INFO
+This program is distribuited with libgeotiff software. The home page is 
located 
+at http://www.remotesensing.org/geotiff/geotiff.html. Here you can find links
+about other relating projects. A mailing list about libgeotiff development is
+currenctly active at geot...@lists.maptools.org.
+
+.SH AUTHORS
+Niles Ritter, Frank Warmerdam warmer...@pobox.com, Derrick J. Brashear 
+sha...@dementia.org and many others contribuitors.
+
+.SH SEE ALSO
+.BR geotifcp (1) 
+

Modified: packages/geotiff/libgeotiff-dfsg/trunk/debian/rules
===
--- packages/geotiff/libgeotiff-dfsg/trunk/debian/rules 2009-04-07 08:06:28 UTC 
(rev 2140)
+++ packages/geotiff/libgeotiff-dfsg/trunk/debian/rules 2009-04-07 11:00:22 UTC 
(rev 2141)
@@ -80,6 +80,7 @@
dh_testroot
dh_installchangelogs ChangeLog
dh_installdocs
+   dh_installman $(CURDIR)/debian/listgeo.1
dh_installexamples
dh_install --list-missing --autodest
dh_link


___
Pkg-grass-devel mailing list
Pkg-grass-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/pkg-grass-devel


[DebianGIS-dev] proj 4.6.1-4 MIGRATED to testing

2009-04-07 Thread Debian testing watch
FYI: The status of the proj source package
in Debian's testing distribution has changed.

  Previous version: 4.6.1-1
  Current version:  4.6.1-4

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See http://release.debian.org/testing-watch/ for more information.

___
Pkg-grass-devel mailing list
Pkg-grass-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/pkg-grass-devel


[DebianGIS-dev] libgeotiff-dfsg 1.2.5-1 MIGRATED to testing

2009-04-07 Thread Debian testing watch
FYI: The status of the libgeotiff-dfsg source package
in Debian's testing distribution has changed.

  Previous version: 1.2.4-4
  Current version:  1.2.5-1

-- 
This email is automatically generated once a day.  As the installation of
new packages into testing happens multiple times a day you will receive
later changes on the next day.
See http://release.debian.org/testing-watch/ for more information.

___
Pkg-grass-devel mailing list
Pkg-grass-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/pkg-grass-devel


[DebianGIS-dev] Bug#523027: mapserver: multiple vulnerabilities

2009-04-07 Thread Michael S. Gilbert
Package: mapserver
Severity: important
Tags: security

Hi,
the following CVE (Common Vulnerabilities  Exposures) ids were
published for mapserver.

CVE-2009-0839[0]:
| Stack-based buffer overflow in mapserv.c in mapserv in MapServer 4.x
| before 4.10.4 and 5.x before 5.2.2, when the server has a map with a
| long IMAGEPATH or NAME attribute, allows remote attackers to execute
| arbitrary code via a crafted id parameter in a query action.

CVE-2009-0840[1]:
| Heap-based buffer underflow in the readPostBody function in cgiutil.c
| in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows
| remote attackers to have an unknown impact via a negative value in the
| Content-Length HTTP header.

CVE-2009-0841[2]:
| Directory traversal vulnerability in mapserv.c in mapserv in MapServer
| 4.x before 4.10.4 and 5.x before 5.2.2, when running on Windows with
| Cygwin, allows remote attackers to create arbitrary files via a ..
| (dot dot) in the id parameter.

CVE-2009-0842[3]:
| mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows
| remote attackers to read arbitrary invalid .map files via a full
| pathname in the map parameter, which triggers the display of partial
| file contents within an error message, as demonstrated by a
| /tmp/sekrut.map symlink.

CVE-2009-0843[4]:
| The msLoadQuery function in mapserv in MapServer 4.x before 4.10.4 and
| 5.x before 5.2.2 allows remote attackers to determine the existence of
| arbitrary files via a full pathname in the queryfile parameter, which
| triggers different error messages depending on whether this pathname
| exists.

CVE-2009-1176[5]:
| mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before
| 5.2.2 does not ensure that the string holding the id parameter ends in
| a '\0' character, which allows remote attackers to conduct
| buffer-overflow attacks or have unspecified other impact via a long id
| parameter in a query action.

CVE-2009-1177[6]:
| Multiple stack-based buffer overflows in maptemplate.c in mapserv in
| MapServer 4.x before 4.10.4 and 5.x before 5.2.2 have unknown impact
| and remote attack vectors.

Please coordinate with the security team to prepare packages for the
stable releases.

If you fix the vulnerabilities please also make sure to include the
CVE ids in your changelog entry.

For further information see:

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0839
http://security-tracker.debian.net/tracker/CVE-2009-0839
[1] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0840
http://security-tracker.debian.net/tracker/CVE-2009-0840
[2] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0841
http://security-tracker.debian.net/tracker/CVE-2009-0841
[3] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0842
http://security-tracker.debian.net/tracker/CVE-2009-0842
[4] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0843
http://security-tracker.debian.net/tracker/CVE-2009-0843
[5] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1176
http://security-tracker.debian.net/tracker/CVE-2009-1176
[6] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1177
http://security-tracker.debian.net/tracker/CVE-2009-1177



___
Pkg-grass-devel mailing list
Pkg-grass-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/pkg-grass-devel