-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Wed, 7 Jun 2006 17:52:12 -0400 Source: tiff Binary: libtiff-opengl libtiffxx0c2 libtiff4 libtiff-tools libtiff4-dev Architecture: source i386 Version: 3.8.2-4 Distribution: unstable Urgency: high Maintainer: Jay Berkenbilt <qjb@debian.org> Changed-By: Jay Berkenbilt <qjb@debian.org> Description: libtiff-opengl - TIFF manipulation and conversion tools libtiff-tools - TIFF manipulation and conversion tools libtiff4 - Tag Image File Format (TIFF) library libtiff4-dev - Tag Image File Format library (TIFF), development files libtiffxx0c2 - Tag Image File Format (TIFF) library -- C++ interface Closes: 371064 Changes: tiff (3.8.2-4) unstable; urgency=high . * SECURITY UPDATE: Arbitrary command execution with crafted TIF files. Thanks to Martin Pitt. (Closes: #371064) * Add debian/patches/tiff2pdf-octal-printf.patch: - tools/tiff2pdf.c: Fix buffer overflow due to wrong printf for octal signed char (it printed a signed integer, which overflew the buffer and was wrong anyway). - CVE-2006-2193 Files: 1d2a210b3a76388a91f33f1ef9674ff0 749 libs optional tiff_3.8.2-4.dsc 02371e77982d248a55dfdb524963b0fa 9735 libs optional tiff_3.8.2-4.diff.gz 6205317d3079cb4ddbddcaf45bd1d4d2 482060 libs optional libtiff4_3.8.2-4_i386.deb 7d7bdb36f048551405fb6bf4c02c304e 5128 libs optional libtiffxx0c2_3.8.2-4_i386.deb 1611f320796f072c08999bb66a4f56c0 233788 libdevel optional libtiff4-dev_3.8.2-4_i386.deb 9b3ffc86e9c77ac1cfec3045f8c28eee 176900 graphics optional libtiff-tools_3.8.2-4_i386.deb fb3703800ea33d46c9790c8fb6032cd5 9734 graphics optional libtiff-opengl_3.8.2-4_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (GNU/Linux) iD8DBQFEh0yyEBVk6taI4KcRAph0AKDrwvBLPC5aKNQxnl47jGrynSQYxgCgtF4x 4L8A5Nhg82+tF/3Ke5qUtQU= =1bLD -----END PGP SIGNATURE----- Accepted: libtiff-opengl_3.8.2-4_i386.deb to pool/main/t/tiff/libtiff-opengl_3.8.2-4_i386.deb libtiff-tools_3.8.2-4_i386.deb to pool/main/t/tiff/libtiff-tools_3.8.2-4_i386.deb libtiff4-dev_3.8.2-4_i386.deb to pool/main/t/tiff/libtiff4-dev_3.8.2-4_i386.deb libtiff4_3.8.2-4_i386.deb to pool/main/t/tiff/libtiff4_3.8.2-4_i386.deb libtiffxx0c2_3.8.2-4_i386.deb to pool/main/t/tiff/libtiffxx0c2_3.8.2-4_i386.deb tiff_3.8.2-4.diff.gz to pool/main/t/tiff/tiff_3.8.2-4.diff.gz tiff_3.8.2-4.dsc to pool/main/t/tiff/tiff_3.8.2-4.dsc