-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Fri, 29 Jun 2012 16:17:11 -0400 Source: tiff3 Binary: libtiff4 libtiffxx0c2 libtiff4-dev Architecture: source amd64 Version: 3.9.6-6 Distribution: unstable Urgency: high Maintainer: Jay Berkenbilt <qjb@debian.org> Changed-By: Jay Berkenbilt <qjb@debian.org> Description: libtiff4 - Tag Image File Format (TIFF) library (old version) libtiff4-dev - Tag Image File Format (TIFF) library (old version), development f libtiffxx0c2 - Tag Image File Format (TIFF) library (old version) -- C++ interfa Changes: tiff3 (3.9.6-6) unstable; urgency=high . * Incorporated fix to CVE-2012-2088, a buffer overflow with certain tiled tiff files. Note that CVE-2012-2113 is not fixed in this package, but it applies only to tiff2pdf, which is not packaged here. (It is packaged in the "tiff" source package, which is based on a newer version that doesn't have the problem.) Checksums-Sha1: 5d0414c0c36833d9a289cecc53bcdc80ad5c8553 1929 tiff3_3.9.6-6.dsc 476394070a0ada5f5ecdbb480539a476d5d40cd0 15296 tiff3_3.9.6-6.debian.tar.gz 484b94f0d053a4ba7121d98f5e584995ff7d1ecf 201674 libtiff4_3.9.6-6_amd64.deb ac4a5f38968d866c523dc4eda25d646b4261c85c 63032 libtiffxx0c2_3.9.6-6_amd64.deb 4b9bcf0c3534bcb2ca220fe3c3a6136da5bf9d8d 336528 libtiff4-dev_3.9.6-6_amd64.deb Checksums-Sha256: 2f1531aa6f86116c418cb7f9c30ce75548cf4df47eeb731985bacb0acfa65799 1929 tiff3_3.9.6-6.dsc 5946ad36aadf5b44b8e4d88ea1d5e7a4bf0d85d451a7d75f081da1f5ba573ab6 15296 tiff3_3.9.6-6.debian.tar.gz 45dbef48056a02839800937ee1a7e4d767f1b168bcf4f342b6aafa7fec13d588 201674 libtiff4_3.9.6-6_amd64.deb c36bb1b6af20d9c91066cb9cf1416ffd4bcb6c9477cd7f5dd4aaaafebe9103e1 63032 libtiffxx0c2_3.9.6-6_amd64.deb 077d1b70f08e4e401979b9cc032202cb8256eea9e780841d2c96f9277e8a59b5 336528 libtiff4-dev_3.9.6-6_amd64.deb Files: 5efe2cfc3ec35124c67c79e7288e18bb 1929 oldlibs optional tiff3_3.9.6-6.dsc 06e18a46b5dbdf14a5c4e8ee1c5b3a82 15296 oldlibs optional tiff3_3.9.6-6.debian.tar.gz 2db951af78ae3f655e7f102a2fb5b936 201674 oldlibs optional libtiff4_3.9.6-6_amd64.deb 80d7ece4ad6a1ee36a97a8bf642dc947 63032 oldlibs optional libtiffxx0c2_3.9.6-6_amd64.deb e222dedaa672065c1b82c339e0177c8c 336528 libdevel optional libtiff4-dev_3.9.6-6_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBAgAGBQJP7hC8AAoJEIp10QmYASx+70QP/0M041PXg+2n2ZWZIwzuQfza ByuecIQrh/bA67f6+Yr9s76/Bm9QQhp/79CchD0vGjrcx1KB02sn/3rs74spBLF7 QhhMTdz3f+ZnWxWBkn8yWMAVNPJxsvCV7nWwPnOTQqUaLKww3MrjWPASWqqYvwcR AAOqfuAggf4+cMxSOuVbhtG03dcFNTMmIM4RF+5EEeRSCTpgJgDZo3aMrbPuWJ4W WlZe8fC33CO0aYt2vxNxyI1UAHuxYft4Ngp6OJpmcZrnw2/x7w7JDMJQyIWhaUsp DNMJoxBomVy6XPqjYm5rmIXaUsVdccXzUlH2wDCj2RmuUItNTj8L/ANvQ2Iph3EP yYWNfHaegfR9hUJqwtL9yklkKvHWBhIPGdEsTCKZ5QfiBb/b37KkH243PVrhXWUR DAu+OVDLkMmHqCzcn6L3zxRtrehSytouKy+YqiRpmcF0rJeFedMepsOU5hv5cPzK mtH5Zk4AwAhhDo8nmObZD+JJlo74R5pRoky47nhvJEMhDSbHAkZM3rxlczLfxeqg M2TNtLhM0YsQTiSB16nOfQRJregDxk047Gk7GBlg7O5nB16HJtXDGz9ChaOxyPSr h9Oq5bqaGntkKsSilNBCao3DpSqvUA0Qr2k/kiIztAbnrpxzHlqgGLaaBnzFgcPq Xi4YYu0x0it5JeT8af4+ =Qc7V -----END PGP SIGNATURE----- Accepted: libtiff4-dev_3.9.6-6_amd64.deb to main/t/tiff3/libtiff4-dev_3.9.6-6_amd64.deb libtiff4_3.9.6-6_amd64.deb to main/t/tiff3/libtiff4_3.9.6-6_amd64.deb libtiffxx0c2_3.9.6-6_amd64.deb to main/t/tiff3/libtiffxx0c2_3.9.6-6_amd64.deb tiff3_3.9.6-6.debian.tar.gz to main/t/tiff3/tiff3_3.9.6-6.debian.tar.gz tiff3_3.9.6-6.dsc to main/t/tiff3/tiff3_3.9.6-6.dsc