-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 31 Oct 2016 15:56:56 +0000 Source: tiff Binary: libtiff5 libtiffxx5 libtiff5-dev libtiff-tools libtiff-opengl libtiff-doc Architecture: source all amd64 Version: 4.0.6-3 Distribution: unstable Urgency: high Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org> Description: libtiff-doc - TIFF manipulation and conversion documentation libtiff-opengl - TIFF manipulation and conversion tools libtiff-tools - TIFF manipulation and conversion tools libtiff5 - Tag Image File Format (TIFF) library libtiff5-dev - Tag Image File Format library (TIFF), development files libtiffxx5 - Tag Image File Format (TIFF) library -- C++ interface Closes: 806118 820363 820364 820366 827484 842046 842361 Changes: tiff (4.0.6-3) unstable; urgency=high . * Fix architecture independent only build (closes: #806118). * Fix CVE-2015-8668 , CVE-2016-3619 , CVE-2016-3620 (closes: #820363), CVE-2016-3621 (closes: #820364) and CVE-2016-5319 with removing bmp2tiff (closes: #820364). * Fix CVE-2016-3186 and CVE-2016-5102 with removing gif2tiff. * Fix CVE-2016-3631 (closes: #820366), CVE-2016-3632 , CVE-2016-3633 , CVE-2016-3634 and CVE-2016-8331 with removing thumbnail. * Backport upstream fix for CVE-2016-3623 and CVE-2016-3624 . * Backport upstream fix for CVE-2016-5652 (closes: #842361). * Backport upstream fix for CVE-2016-3658 . * Removed vulnerable, unsupported tools (closes: #827484, #842046). * Comment out Vcs fields for now. Checksums-Sha1: 6ac594135986bfc8582960ef5363a2f3d5d0da4b 2125 tiff_4.0.6-3.dsc 41442e7e0e7e52f26c5904e702f1a42d44a0eb16 22272 tiff_4.0.6-3.debian.tar.xz d031abfb56b856d7bd9ac513221c9d37eeaa2288 379998 libtiff-doc_4.0.6-3_all.deb 2c61e0190c481b57697416ff71712138e452b1a8 14168 libtiff-opengl-dbgsym_4.0.6-3_amd64.deb afe9b2261a4a63339a3d2d1196856a32b5e3fa86 89684 libtiff-opengl_4.0.6-3_amd64.deb 8478d69d2b25bb22d665c7132e64103d5902bd1e 368220 libtiff-tools-dbgsym_4.0.6-3_amd64.deb 35e9ab5ca68612e7b0aafcc972fa1f41dc264931 280586 libtiff-tools_4.0.6-3_amd64.deb 243b949e5d090c4d48c496d5b5a44bd449e3681a 364606 libtiff5-dbgsym_4.0.6-3_amd64.deb 499919b774164c43ba1601e1c69de320f13ed900 345336 libtiff5-dev_4.0.6-3_amd64.deb 72c0e6fa1eac961744647882a03c8c4099ad51bd 223642 libtiff5_4.0.6-3_amd64.deb 03440cd5d36aa2a9b86c8c69550d63c517745c29 21030 libtiffxx5-dbgsym_4.0.6-3_amd64.deb 6976a5c87b56b90f0b67a9cdf58e10062b515812 85006 libtiffxx5_4.0.6-3_amd64.deb Checksums-Sha256: 4630f34a2f56a90eff104bf01dcb843f21683f883eb4135f52782af111deaae2 2125 tiff_4.0.6-3.dsc cc650116c1dafed9c3721302f91e5e79b670f46712ebf2b86dea989c102e5c94 22272 tiff_4.0.6-3.debian.tar.xz fa0889b7e6f5fedbb2d7bdf3b690554626b7df127ef87d80854d8cc0f4fb8c6b 379998 libtiff-doc_4.0.6-3_all.deb f173c0b0b733e677318361754d4b780886fe736924ff7c3c4b6663c834087f60 14168 libtiff-opengl-dbgsym_4.0.6-3_amd64.deb 3f00e3ec6e6380aa3b844b9ca00436cb53980653f615ec52208e9fced6cd66f8 89684 libtiff-opengl_4.0.6-3_amd64.deb 9ed11b5e9e6cfe306b5d2ebbe4f7ec8e02b687a021cd7f6a201c1c11303fdbed 368220 libtiff-tools-dbgsym_4.0.6-3_amd64.deb 8fa576acbeed1684b40ae5df2e01f9a9dac441047ff31ee6c36d7cc0c81038d9 280586 libtiff-tools_4.0.6-3_amd64.deb 2f4b68d804b6bead2e75b57080f34f0b434603259078e93071eecc1b723e1c5d 364606 libtiff5-dbgsym_4.0.6-3_amd64.deb a7a9d4a12f3f7ecc3046f547e355cb603188f6fda01c1004f95e8fe73d6f36bf 345336 libtiff5-dev_4.0.6-3_amd64.deb aa9a7cb3a97a2d905ce64c70bbfca5be786f748626201ab63080d8c4b65b90b9 223642 libtiff5_4.0.6-3_amd64.deb a494a6d7a6839a26de4aa8b8bf9bc77f1d7fff0ec40d949f8418682c827e9812 21030 libtiffxx5-dbgsym_4.0.6-3_amd64.deb abc0ebebf8cc9a6d435d7de2a9727ef88f22e372c5913cccf1e269375d25e246 85006 libtiffxx5_4.0.6-3_amd64.deb Files: 0a8a138bc6008f744876b7a5c8691b16 2125 libs optional tiff_4.0.6-3.dsc fcb21a8a386503cbd362af98c60365e0 22272 libs optional tiff_4.0.6-3.debian.tar.xz 8eaa2492b836296d796fc390be952965 379998 doc optional libtiff-doc_4.0.6-3_all.deb 32d324c30e02c212d77dc6c14ef288b1 14168 debug extra libtiff-opengl-dbgsym_4.0.6-3_amd64.deb e256eed1e6dea1bc8438b3eb489b6662 89684 graphics optional libtiff-opengl_4.0.6-3_amd64.deb b14d2a5183f86e062e8a5d254ce806e7 368220 debug extra libtiff-tools-dbgsym_4.0.6-3_amd64.deb 4a0480d8fbdb951930ff019de29ad4ca 280586 graphics optional libtiff-tools_4.0.6-3_amd64.deb 0ed4f33d0e2cffd10823177fe026708a 364606 debug extra libtiff5-dbgsym_4.0.6-3_amd64.deb 5eb7d7aaf9ac58b01da3c4afe1dc580d 345336 libdevel optional libtiff5-dev_4.0.6-3_amd64.deb 9258ce56617e521e2da40302f198d1f4 223642 libs optional libtiff5_4.0.6-3_amd64.deb 543149b9327c224d748e0bc8644c45f7 21030 debug extra libtiffxx5-dbgsym_4.0.6-3_amd64.deb 50c3e8d4ae3341d410a7de912aac1a4a 85006 libs optional libtiffxx5_4.0.6-3_amd64.deb -----BEGIN PGP SIGNATURE----- iQIcBAEBCAAGBQJYF4kNAAoJENzjEOeGTMi/0Y0P/1pEjOoOUGV5YcZaPvQEH8Rf nyvWN6t0ScPsPX4QF+8pHa1dI562Hw0M89Xpxv2zyB6XosejtdNLXppTt70MnYw6 P/2/tiHh/S/OWTfsVNEmIDy4X02JOziYc3JenczXDZx3UX8UYxybFXLO0M/Fcceh 0uFNIbk7Z+3UeODC7r/zks2B3L8mVQki7y3Iol7ePxRJseQlKmg0SCfWhCH07cn3 H00a5Na4shIvGbOl597RL8gmuZ6aeYlMyjB0xpIvUg34POoL3nhc2K53qNKjpV2s WP8kHk5QU3aEv6qj1oxHdFqUhCxd0E48W8xFmED02zg/0eP3y5iMPD/d9yWwsHF/ ZPuheE4LwPSy33KNFg5q4E08UhvYDrqWrgJEBl11FrPCPS4AHBPjI8AO1xJyNsjD EeFJpLUPQ1bPu/K8i6cQk9Eh3jPq/Sz2fWX0J8eqpap/vFp2E5Q8gJIfVhHM9J8S js5MTlTJh0S1sxhbsW93ZcluVs6Hom9wp1p/XnTvYuy0/sm6UcN66ez1N+Acqmfe Cupwd01THiR9RR9GDgI440lD9WA6WUXhN47oZMjnqoPCLXzIzLT2rfMX8v5Sn2AM 55ybTa1WhR0ToNb0rlCa9RJf5Zzf/3m9XOenUOO/yCY2tKfTce0EblrUIbp+xiXF AuqM8VzIbk5XDIALDMZ7 =+Sd1 -----END PGP SIGNATURE-----