[ubuntu/trusty-proposed] tiff 4.0.3-5ubuntu1 (Accepted)

[Jackson Doak]

tiff (4.0.3-5ubuntu1) trusty; urgency=low

  * Merge from debian. Remaining changes:
    - debian/control: Have libtiff5-dev Provide libtiff-dev

tiff (4.0.3-5) unstable; urgency=low

  * Replace shlibs file with symbols file
  * Update standards to 3.9.4

tiff (4.0.3-4) unstable; urgency=low

  * Complete Multi-Arch conversion for dev packages.  (Closes: #689085)

tiff (4.0.3-3) unstable; urgency=high

  * Incorporated fixes to security issues CVE-2013-4244.

tiff (4.0.3-2) unstable; urgency=high

  * Incorporated fixes to security issues CVE-2013-4231, CVE-2013-4232.
    (Closes: #719303)

tiff (4.0.3-1) unstable; urgency=low

  * Acknowledge/incorporate NMU.  Thanks!
  * New upstream version.  Patches incorporated:
     CVE-2012-3401.patch
     CVE-2012-4447.patch
  * Add build dependency on autotools-dev to help porters.

tiff (4.0.2-6+nmu1) unstable; urgency=high

  * Non-maintainer upload by the Security Team.
  * Fix cve-2013-1960: heap-based buffer overlow in tiff2pdf
    (closes: #706675).
  * Fix cve-2013-1961: stack-based buffer overflow in tiff2pdf
    (closes: #706674).

tiff (4.0.2-6) unstable; urgency=high

  * Fix /usr/share/doc symlink to directory transition.  When upgrading
    from very old versions (pre 3.8.2-8), /usr/share/doc may contain
    symbolic links that should be removed.  (Closes: #687645)

tiff (4.0.2-5) unstable; urgency=high

  * Add fix for CVE-2012-4564, a heap-buffer overflow.  Thanks Adrian La
    Duca for doing all the work to prepare this upload.  (Closes: #692345)

Date: Thu, 24 Oct 2013 19:37:42 +1100
Changed-By: Jackson Doak <noskcaj at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/trusty/+source/tiff/4.0.3-5ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 24 Oct 2013 19:37:42 +1100
Source: tiff
Binary: libtiff5 libtiffxx5 libtiff5-dev libtiff5-alt-dev libtiff-tools libtiff-opengl libtiff-doc
Architecture: source
Version: 4.0.3-5ubuntu1
Distribution: trusty
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Jackson Doak <noskcaj at ubuntu.com>
Description: 
 libtiff-doc - TIFF manipulation and conversion documentation
 libtiff-opengl - TIFF manipulation and conversion tools
 libtiff-tools - TIFF manipulation and conversion tools
 libtiff5   - Tag Image File Format (TIFF) library
 libtiff5-alt-dev - Tag Image File Format library (TIFF), alternative development fil
 libtiff5-dev - Tag Image File Format library (TIFF), development files
 libtiffxx5 - Tag Image File Format (TIFF) library -- C++ interface
Closes: 687645 689085 692345 706674 706675 719303
Changes: 
 tiff (4.0.3-5ubuntu1) trusty; urgency=low
 .
   * Merge from debian. Remaining changes:
     - debian/control: Have libtiff5-dev Provide libtiff-dev
 .
 tiff (4.0.3-5) unstable; urgency=low
 .
   * Replace shlibs file with symbols file
   * Update standards to 3.9.4
 .
 tiff (4.0.3-4) unstable; urgency=low
 .
   * Complete Multi-Arch conversion for dev packages.  (Closes: #689085)
 .
 tiff (4.0.3-3) unstable; urgency=high
 .
   * Incorporated fixes to security issues CVE-2013-4244.
 .
 tiff (4.0.3-2) unstable; urgency=high
 .
   * Incorporated fixes to security issues CVE-2013-4231, CVE-2013-4232.
     (Closes: #719303)
 .
 tiff (4.0.3-1) unstable; urgency=low
 .
   * Acknowledge/incorporate NMU.  Thanks!
   * New upstream version.  Patches incorporated:
      CVE-2012-3401.patch
      CVE-2012-4447.patch
   * Add build dependency on autotools-dev to help porters.
 .
 tiff (4.0.2-6+nmu1) unstable; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Fix cve-2013-1960: heap-based buffer overlow in tiff2pdf
     (closes: #706675).
   * Fix cve-2013-1961: stack-based buffer overflow in tiff2pdf
     (closes: #706674).
 .
 tiff (4.0.2-6) unstable; urgency=high
 .
   * Fix /usr/share/doc symlink to directory transition.  When upgrading
     from very old versions (pre 3.8.2-8), /usr/share/doc may contain
     symbolic links that should be removed.  (Closes: #687645)
 .
 tiff (4.0.2-5) unstable; urgency=high
 .
   * Add fix for CVE-2012-4564, a heap-buffer overflow.  Thanks Adrian La
     Duca for doing all the work to prepare this upload.  (Closes: #692345)
Checksums-Sha1: 
 ab46a506fbad7bf1b85c645e0a899f6486486dc5 2248 tiff_4.0.3-5ubuntu1.dsc
 652e97b78f1444237a82cbcfe014310e776eb6f0 2051630 tiff_4.0.3.orig.tar.gz
 f54caf33839b7ea817227d8b2b573083e3c0cf1d 24280 tiff_4.0.3-5ubuntu1.debian.tar.gz
Checksums-Sha256: 
 efa8288d480152dacc5cf083d9d17391a28189ba8a4fc4a9976a122ba073860e 2248 tiff_4.0.3-5ubuntu1.dsc
 ea1aebe282319537fb2d4d7805f478dd4e0e05c33d0928baba76a7c963684872 2051630 tiff_4.0.3.orig.tar.gz
 5423b931535db77d73e8ed04f8c7498feed30b70cfd0f824c5dbe7843c961fee 24280 tiff_4.0.3-5ubuntu1.debian.tar.gz
Files: 
 a0cd932820902832296a7e8e331c04dd 2248 libs optional tiff_4.0.3-5ubuntu1.dsc
 051c1068e6a0627f461948c365290410 2051630 libs optional tiff_4.0.3.orig.tar.gz
 30453902bda1268a8cfccf879bb53792 24280 libs optional tiff_4.0.3-5ubuntu1.debian.tar.gz
Original-Maintainer: Jay Berkenbilt <qjb at debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)
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=6MLV
-----END PGP SIGNATURE-----