-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 17 Jun 2013 01:27:17 +0000 Source: tiff Binary: libtiff5 libtiffxx5 libtiff5-dev libtiff5-alt-dev libtiff-tools libtiff-opengl libtiff-doc Architecture: source all amd64 Version: 4.0.2-6+deb7u1 Distribution: stable-security Urgency: high Maintainer: Jay Berkenbilt <qjb@debian.org> Changed-By: Michael Gilbert <mgilbert@debian.org> Description: libtiff-doc - TIFF manipulation and conversion documentation libtiff-opengl - TIFF manipulation and conversion tools libtiff-tools - TIFF manipulation and conversion tools libtiff5 - Tag Image File Format (TIFF) library libtiff5-alt-dev - Tag Image File Format library (TIFF), alternative development fil libtiff5-dev - Tag Image File Format library (TIFF), development files libtiffxx5 - Tag Image File Format (TIFF) library -- C++ interface Closes: 706674 706675 Changes: tiff (4.0.2-6+deb7u1) stable-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix cve-2013-1960: heap-based buffer overlow in tiff2pdf (closes: #706675). * Fix cve-2013-1961: stack-based buffer overflow in tiff2pdf (closes: #706674). Checksums-Sha1: 4d29dfad98b27716bbce4e67c2119c0fb989626d 2848 tiff_4.0.2-6+deb7u1.dsc d84b7b33a6cfb3d15ca386c8c16b05047f8b5352 2022814 tiff_4.0.2.orig.tar.gz f192e3c558016011caf9ef8602eb889dc0223703 22686 tiff_4.0.2-6+deb7u1.debian.tar.gz d7e2ffc416ab2c45e6de40b144a76a97d48b44ea 413228 libtiff-doc_4.0.2-6+deb7u1_all.deb faf12592570115587cd8515c04a29ee6648494b8 234394 libtiff5_4.0.2-6+deb7u1_amd64.deb 384aea24c9cb5902af363e980c3e8eda55752226 73424 libtiffxx5_4.0.2-6+deb7u1_amd64.deb d41c6d7f157055a2430087b4ce7efbcbf9c0e7bf 376610 libtiff5-dev_4.0.2-6+deb7u1_amd64.deb 4f84762f5be6ff84a62522d31211cce271b2cc7c 296552 libtiff5-alt-dev_4.0.2-6+deb7u1_amd64.deb 4de3f1f18e9e3eb0d0ccd7a6bf250793173aca29 335824 libtiff-tools_4.0.2-6+deb7u1_amd64.deb 592de6a0b8270efac6915b541bf4c5dda3b47d02 78966 libtiff-opengl_4.0.2-6+deb7u1_amd64.deb Checksums-Sha256: 5f944ef011bb4285934522168e9671503ce173bb2de1edfd718a193ca93679ce 2848 tiff_4.0.2-6+deb7u1.dsc aa29f1f5bfe3f443c3eb4dac472ebde15adc8ff0464b83376f35e3b2fef935da 2022814 tiff_4.0.2.orig.tar.gz 6f4be45ef68b5edc157f3f233611bb76cd5de773943b993ec56f1f32a4d216bc 22686 tiff_4.0.2-6+deb7u1.debian.tar.gz bab53d8f655d39b9f8dc78edbfe3c2e4f3f353a5325370e2397ffd2ab0de75ad 413228 libtiff-doc_4.0.2-6+deb7u1_all.deb 80322fdb880b72f44ddb254455a10befdfcdb57973c1d0d63e7d9812c1392ad2 234394 libtiff5_4.0.2-6+deb7u1_amd64.deb 1bbdb8cbfe4f4655fea4d53b70101d05e9415ee3998ecad519a434b94c86fff6 73424 libtiffxx5_4.0.2-6+deb7u1_amd64.deb 48e500813972ef7741cef689fa61b6d6e5e7cb11698da68cbc71e51cfb86be0b 376610 libtiff5-dev_4.0.2-6+deb7u1_amd64.deb ed9148e0707306fae2956c71e5c80b657b739de41953c0aec54b503a278c86c0 296552 libtiff5-alt-dev_4.0.2-6+deb7u1_amd64.deb d7fa359c01ad30f42a3b044cac8ccadc7b598a68a9ae9e16c29b327a779729a7 335824 libtiff-tools_4.0.2-6+deb7u1_amd64.deb 7c0a677bea9e6cc439ee69090ae5131edadebf98cd0c00a112f2a7b079ff83ce 78966 libtiff-opengl_4.0.2-6+deb7u1_amd64.deb Files: 3ec4f3046789270c0cb1a52efb0bb1b4 2848 libs optional tiff_4.0.2-6+deb7u1.dsc 04a08fa1e07e696e820a0c3f32465a13 2022814 libs optional tiff_4.0.2.orig.tar.gz f40ec185909fd358065e666162117a77 22686 libs optional tiff_4.0.2-6+deb7u1.debian.tar.gz c162b64c9ff7b4a541cd8373b6331730 413228 doc optional libtiff-doc_4.0.2-6+deb7u1_all.deb 4bdb741aa420e195582f3700d13eb77a 234394 libs optional libtiff5_4.0.2-6+deb7u1_amd64.deb 9a79be0c6c98fb9c4cc97c3ac8208362 73424 libs optional libtiffxx5_4.0.2-6+deb7u1_amd64.deb 3bb94165a2f6fa954db322885ebcad85 376610 libdevel optional libtiff5-dev_4.0.2-6+deb7u1_amd64.deb c7934928d8f736303a78910a2695c6ba 296552 libdevel optional libtiff5-alt-dev_4.0.2-6+deb7u1_amd64.deb e562b655c637699f53c4c5b85db720c8 335824 graphics optional libtiff-tools_4.0.2-6+deb7u1_amd64.deb 7cb559e48cd258fe993609d7ed8173e9 78966 graphics optional libtiff-opengl_4.0.2-6+deb7u1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQQcBAEBCAAGBQJRvnBxAAoJELjWss0C1vRzL9If/jJH40qCbVcpf0DhZSm0zRkt OeyFfnBi3ArjoMscWTSxZAHNTULzXsjhnqAzcCOZiEOn08bsmpndo7rHp2vAME3F u5iAgs+aOgD4bvzgyO8gz4bBQgaKHqiKS24PZ7v33cko4QQJwzMdxVfLuCzyDgYo uAgo41Ydk23U9fxns4k39Sgh7G0fDqZh5Gckmh3RnqYizj1a/wXPcj1NHEDqr/2/ mjuWlm7navxcNeVVCEd8HAvjb6WLg8V3cmSRUOPKf0jVWWAsLEFsFXadVuKuRs8k PS9E76E4z7bAKhniJHLc9sh7QxRlKLzOJ2LYEtM1iQ2BiF6ta6Bt+tOxg3yrvYjt BY9DMne67UvKzctTcT/B59SLXSqYRYAQcdliXqFsXP1jH1U+Vf0Q/HMvxRU1neDZ 9cbEZtT/MHBKv+/ywJOVqJxjwDh6TlkkIeoIgC3s332IXCPtGAuBZSjw7jzlsFZO s6ixM0x2reJOeRrnz9UKI6JYf+Adj5Mlkq8Ek6qRSu+kJDcpGm4sbpIdIn2C+6Xg /KANRwur0HVNj0m4cj+eO+lSUVINRHJ3v+vKLuqrFbgWGKpf/t1+Td2QQaD0TDue HYWahNiRd0ZueIqbuOe+8eHd2Hl+Fm8T8IigOLyhgq+q3qvXiJVNzapCROg4dr3b htSSihBgzx+PgI67k4kKWSVrA9H0dg2Dzg/g4LhMcG0jHtTF+GlHfUYcfkOmn4AX 9bI3WvmSyp5pEcytCfeXbTRrcojYOx9TUR8fxjak82X5o0cBtyvq3Iy08fBvUO1+ 6yZ2zIMpik1qGXa/wv+H+sUq68C5hu3+vAnApiqKi/dexwVs5nc+erJAgmsXrx1J hEbGaoZjlligp+AFKRr19IBZuPEX6iy+Pg/Rc2eUmeFwVG8Cr81rmpagLsLFco71 v4dHPTEG6qHI4+PRXskPrGLgHhpN0driMmS0TwSKwTr5IDYTnbxRwDBu5sLKxgtA kAwLSaFDGoVVW1ST6GqUOwWb11pp/JPI9Yqj6OOuRltyDe4q7KEHnnGtzs72e2Jt E9rLjGKQX/55VRXeiQwobLmkEMKr2v1Vn3fUqCvnEya8H9dXQUPsOKDSTjM3LQSI kKnbuCbGNmYQ68YnEvGmQq8vEMQLZDYr2r7CrvfPG052FnYJ87eEY0yC3AvcBZyj ytyusha2W6E2zgALKh/vgUT8NqkTF9RF6t3pdw9SsObeEePaA6xNNeGUPrSDgjiC VVSrTwPCzWQxqHBo+u4QeA1bM20cDyeOxakTwF/bN3JJ9d7nMpGLWcYiV8MTJNpI /e0NsggbyP23NTQTlXUX8+ieIqSdiBq6D434r3Wx72fKEjbrJkyLXcdZ2jxQpSA= =hgub -----END PGP SIGNATURE-----