-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 25 Aug 2019 11:03:02 +0200 Source: tiff Binary: libtiff5 libtiffxx5 libtiff5-dev libtiff-tools libtiff-opengl libtiff-doc Architecture: source all amd64 Version: 4.0.3-12.3+deb8u9 Distribution: jessie-security Urgency: high Maintainer: Ondřej Surý <ondrej@debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Description: libtiff-doc - TIFF manipulation and conversion documentation libtiff-opengl - TIFF manipulation and conversion tools libtiff-tools - TIFF manipulation and conversion tools libtiff5 - Tag Image File Format (TIFF) library libtiff5-dev - Tag Image File Format library (TIFF), development files libtiffxx5 - Tag Image File Format (TIFF) library -- C++ interface Changes: tiff (4.0.3-12.3+deb8u9) jessie-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2019-14973 Wrong handling off integer overflow checks, that are based on undefined compiler behavior, might result in an application crash. Checksums-Sha1: db60e6e8c7c836edd4e2746be91bae988f906228 2399 tiff_4.0.3-12.3+deb8u9.dsc 652e97b78f1444237a82cbcfe014310e776eb6f0 2051630 tiff_4.0.3.orig.tar.gz 321d0bda71f6fc7366010d473f8557377d04811f 70408 tiff_4.0.3-12.3+deb8u9.debian.tar.xz 889c82f697ab87f418cb6ed62b9df88bccdfef3b 372308 libtiff-doc_4.0.3-12.3+deb8u9_all.deb 7bf1f41076c2ee3c018f7a874d994b7b5f78ce61 223176 libtiff5_4.0.3-12.3+deb8u9_amd64.deb d3c1c7aa8c485b07d504abe3ed28452cd56d5b72 81890 libtiffxx5_4.0.3-12.3+deb8u9_amd64.deb 8622eb157cbc8575423e513eb10406052d175ddb 345366 libtiff5-dev_4.0.3-12.3+deb8u9_amd64.deb b666bf7d36ba6b0bbe386331dccbd40e02450b43 275110 libtiff-tools_4.0.3-12.3+deb8u9_amd64.deb 224eab1dcafc9f4541c5aa82cf9ec0d5d350f82d 86784 libtiff-opengl_4.0.3-12.3+deb8u9_amd64.deb Checksums-Sha256: f7832a72c22181f67650585cb1e58c8b4f943dffde644c587861c4734265c6e1 2399 tiff_4.0.3-12.3+deb8u9.dsc ea1aebe282319537fb2d4d7805f478dd4e0e05c33d0928baba76a7c963684872 2051630 tiff_4.0.3.orig.tar.gz 26ffa9eb31ec9af6854489503bc3b35cc3ea9f65f1d5aee5bdd8566de12802e0 70408 tiff_4.0.3-12.3+deb8u9.debian.tar.xz 4801f728e6d5699ea967abbbdbce509b9d05a95e94c50cec2950bdc90c495af9 372308 libtiff-doc_4.0.3-12.3+deb8u9_all.deb fbd0eab4bddfbf481b9918043cd227151bb9f93e937f54f526735718125b9d1c 223176 libtiff5_4.0.3-12.3+deb8u9_amd64.deb 6e08ccced2c30716a981fc6aea1ad3ec8328abff752114e09305a7354ac20c7e 81890 libtiffxx5_4.0.3-12.3+deb8u9_amd64.deb ef0cb092bf8b50577c7853ea9a39fc8dff806847b353859035b0d1f1f472e864 345366 libtiff5-dev_4.0.3-12.3+deb8u9_amd64.deb db68aa24649b93b0e550475f28f355d14192b178b69f0afec3c01db0b3ee0458 275110 libtiff-tools_4.0.3-12.3+deb8u9_amd64.deb 079572094afea7957176d5d96ead2d53d2b5d2aab70c7db8a6af269852383861 86784 libtiff-opengl_4.0.3-12.3+deb8u9_amd64.deb Files: 2d50f7e52e5a8a4b9b4962846e2d1298 2399 libs optional tiff_4.0.3-12.3+deb8u9.dsc 051c1068e6a0627f461948c365290410 2051630 libs optional tiff_4.0.3.orig.tar.gz 975622dd7f50396ce54db98780ef91ff 70408 libs optional tiff_4.0.3-12.3+deb8u9.debian.tar.xz a80a64542982e8b1196364ed228c9ed2 372308 doc optional libtiff-doc_4.0.3-12.3+deb8u9_all.deb 5886e8bb18eeadef1e93beb53559d5f3 223176 libs optional libtiff5_4.0.3-12.3+deb8u9_amd64.deb 60e2a7317d57179932be3cbd7d714b0f 81890 libs optional libtiffxx5_4.0.3-12.3+deb8u9_amd64.deb 2994aa6abb48a25a1bce2b1b19ec7bbe 345366 libdevel optional libtiff5-dev_4.0.3-12.3+deb8u9_amd64.deb 907d618476cb88a15ba84a912ac6baa4 275110 graphics optional libtiff-tools_4.0.3-12.3+deb8u9_amd64.deb 049716227fd16dd8cc146424df77213e 86784 graphics optional libtiff-opengl_4.0.3-12.3+deb8u9_amd64.deb -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAl1iwcxfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYRyjzD/9QPSFJs7SPOt+VN77+JbHkAc/+f+Hk Qw/DU3Wrx50uLpFVxreoaLgFTlamj6EKbruCgKYVm6VFq8Ukl6YhNndd2u97mdmR 4cayBc/nLD/W9VPNFIE7XGgACvwJzH7pzvUM1i52mAgpiaAwEJuRb7L/4bUlJifl RpzNNmShr5dgY367TGXiJJ938tKD6GXs2uQHHdCG1Cl9ZI+e/LflkZ64itavvtMS wkw5mWTW2YUeLQf7zuDoRbL98Ivwr6jQrMsA85BpN68PdZwkxdKAzmsSoMWsYhp3 /1j9FQiU37rqHNyII6dV8+J3K17Gq7eEZuklantotMUuPsI55yW5WzaOu7YxJtAk J2n2WDFpkzjOJYsYszLwlTzED3S/xBSWS/bSy/TcUuAa5JLdlrOhlYv0om+0E2Vk 3B815aYEOdQQ1D+eD3j49oMHxjfZ2i4Ft5ZHUlpj+FZnp3snOjuRtqVHhjYkcmEn b77PJUPJ2bCibOBFkUlsA5GdZOkZdBLygnf+EzbYIfLnxs4e5xZvY4+8pl++oGVV BMjuMLqP6AORuemjSEcfCu5kuOKIvds4vCib1ZH9Dh0J0siwOiR1AJ4HiNBR3jIg C7ZjiSFalWFDLgV2qUOPS/WiFfdPd4NPQnfWQwdVAg5v1A1a3nbT1w9Dzs6zqK34 SzAiTPEv2KuZ8Q== =Dr7E -----END PGP SIGNATURE-----