[ubuntu/precise-updates] tiff 3.9.5-2ubuntu1.5 (Accepted)

[Ubuntu Archive Robot]

tiff (3.9.5-2ubuntu1.5) precise-security; urgency=low

  * SECURITY UPDATE: denial of service and possible code execution via heap
    overflow in tp_process_jpeg_strip().
    - debian/patches/CVE-2013-1960.patch: improve tp_process_jpeg_strip()
      logic in tools/tiff2pdf.c.
    - CVE-2013-1960
  * SECURITY UPDATE: denial of service via stack overflow with malformed
    image-length and resolution.
    - debian/patches/CVE-2013-1961.patch: replace use of sprintf() with
      snprintf() in contrib/dbs/xtiff/xtiff.c, libtiff/tif_codec.c,
      libtiff/tif_dirinfo.c, tools/rgb2ycbcr.c, tools/tiff2bw.c,
      tools/tiff2pdf.c, tools/tiff2ps.c, tools/tiffcrop.c,
      tools/tiffdither.c.
    - CVE-2013-1961

Date: 2013-05-13 18:15:17.990610+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/precise/+source/tiff/3.9.5-2ubuntu1.5
-------------- next part --------------
Sorry, changesfile not available.