-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 13 May 2018 17:00:04 -0400 Source: tiff3 Binary: libtiff4 libtiffxx0c2 libtiff4-dev Architecture: source amd64 Version: 3.9.6-11+deb7u11 Distribution: wheezy-security Urgency: high Maintainer: Jay Berkenbilt <qjb@debian.org> Changed-By: Hugo Lefeuvre <hle@debian.org> Description: libtiff4 - Tag Image File Format (TIFF) library (old version) libtiff4-dev - Tag Image File Format (TIFF) library (old version), development f libtiffxx0c2 - Tag Image File Format (TIFF) library (old version) -- C++ interfa Closes: 893806 Changes: tiff3 (3.9.6-11+deb7u11) wheezy-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2018-8905: heap-based buffer overflow occurs in LZWDecodeCompat() (Closes: #893806). Checksums-Sha1: 455bbd565e512de982f166837fa0db8ba144046d 1619 tiff3_3.9.6-11+deb7u11.dsc 9d8393893f7ea1bd3f42b00822c6233641d575aa 52618 tiff3_3.9.6-11+deb7u11.debian.tar.gz e22ec94a5b40c80c339d2b9f93224c892516173c 206644 libtiff4_3.9.6-11+deb7u11_amd64.deb d641702b9fd1545cc284e42e27ff7f1677bf30a3 66024 libtiffxx0c2_3.9.6-11+deb7u11_amd64.deb 76130093eca8492f410050366990203a0da82bce 342104 libtiff4-dev_3.9.6-11+deb7u11_amd64.deb Checksums-Sha256: 0077bf7558b308fd10dce02317b5c2d37af05a5f2982648c3c8bef689d46d735 1619 tiff3_3.9.6-11+deb7u11.dsc 11cfc05ddaa9b4ab601d157ca17da276085ae8db8576be99c16bae5be02f27f3 52618 tiff3_3.9.6-11+deb7u11.debian.tar.gz 6a43bd2b148e17f339e6d5d074354085d57dc706062a5d0aea8476d28d18704a 206644 libtiff4_3.9.6-11+deb7u11_amd64.deb f6ac32f4cf81c7dfe51f02803167644617336d0c024b6cf370ab6401b04741fc 66024 libtiffxx0c2_3.9.6-11+deb7u11_amd64.deb a1dc68a76dd121452127990ab11e4fc9d9b22d13d36ff22fcc94c98eb838dc7f 342104 libtiff4-dev_3.9.6-11+deb7u11_amd64.deb Files: 8fea08ea2265115e684cd33e9062dbde 1619 oldlibs optional tiff3_3.9.6-11+deb7u11.dsc a5c98a18e029eb6b35d2340e08885909 52618 oldlibs optional tiff3_3.9.6-11+deb7u11.debian.tar.gz 33d0820b2f4c034aada4451adfbf7e59 206644 oldlibs optional libtiff4_3.9.6-11+deb7u11_amd64.deb 4c5ee259088f5d7c6b97c515e29f330f 66024 oldlibs optional libtiffxx0c2_3.9.6-11+deb7u11_amd64.deb d2eae96347cbb0767936e2ddcbb76c3d 342104 libdevel optional libtiff4-dev_3.9.6-11+deb7u11_amd64.deb -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEE5LpPtQuYJzvmooL3LVy48vb3khkFAlr4r8gACgkQLVy48vb3 khklXQf/ZH8/MuoPbiEieAk5YAGDRS7ft6gs0SV+iXnYzp1KQxc1MnkZSYuIiuU9 gaVlIjZG97cv4d9wlOu1ssQFqIZN/tFNGkPvCjFdNtHK5kyqk733Z/t2firRLZXD DDD3hrsnuZYmqH3Hu4Ask9DaQW+qabqUXcKCQOjRygtIszrvMvsnZtCAfVy0w1KC Hg5yssPk5ZlBLjMwPG5S13Yv1Ql6ku4K+j/zY1I5qZ7gUbJh+yDyF0j80BbRKtHN f2hXIjXcKwjMyA6W9vpDOLQKAqdMReZm5z8OxsFrVyyKJiJ329wvEAoBu6YlW/0m MRCU75m0rOaDK9PeUZ8mjknC9cx3dw== =Ewgp -----END PGP SIGNATURE-----