[Bug 399267] [NEW] Sync tiff 3.8.2-13 (main) from Debian unstable (main).

Jamie Strandboge jamie at ubuntu.com
Tue Jul 14 13:35:12 BST 2009


Public bug reported:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 affects ubuntu/tiff
 status confirmed
 importance wishlist
 subscribe ubuntu-archive

Please sync tiff 3.8.2-13 (main) from Debian unstable (main).

Changelog since current karmic version 3.8.2-12:

tiff (3.8.2-13) unstable; urgency=high

  * Apply patches to fix CVE-2009-2347, which covers two integer overflow
    conditions.
  * LZW patch from last update addressed CVE-2009-2285.  Renamed the patch
    to make this clearer.

 -- Jay Berkenbilt <qjb at debian.org>  Sun, 12 Jul 2009 18:03:33 -0400


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)

iEYEARECAAYFAkpce3YACgkQW0JvuRdL8BrGEgCcDjxylHZfP4mFa2eBK4YS2XM/
jgkAnjZbmyFRKHINmdlww54IQz4nTZo/
=P+a5
-----END PGP SIGNATURE-----

** Affects: tiff (Ubuntu)
     Importance: Wishlist
         Status: Confirmed

-- 
Sync tiff 3.8.2-13 (main) from Debian unstable (main).
https://bugs.launchpad.net/bugs/399267
You received this bug notification because you are a member of Ubuntu
Package Archive Administrators, which is a direct subscriber.



More information about the ubuntu-archive mailing list