Format: 1.8 Date: Wed, 11 May 2022 17:09:42 +0200 Source: tiff Binary: libtiff5 libtiffxx5 libtiff5-dev libtiff-dev libtiff-tools libtiff-opengl libtiff-doc Architecture: amd64 all Version: 4.0.9-5ubuntu0.5 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: David Fernandez Gonzalez Description: libtiff-dev - Tag Image File Format library (TIFF), development files, current libtiff-doc - TIFF manipulation and conversion documentation libtiff-opengl - TIFF manipulation and conversion tools libtiff-tools - TIFF manipulation and conversion tools libtiff5 - Tag Image File Format (TIFF) library libtiff5-dev - Tag Image File Format library (TIFF), development files libtiffxx5 - Tag Image File Format (TIFF) library -- C++ interface Changes: tiff (4.0.9-5ubuntu0.5) bionic-security; urgency=medium . * SECURITY UPDATE: malloc failure in TIFF2RGBA tool - debian/patches/CVE-2020-35522.patch: enforce (configurable) memory limit in tools/tiff2rgba.c. - CVE-2020-35522 * SECURITY UPDATE: null pointer in TIFFReadDirectory - debian/patches/CVE-2022-0561.patch: add sanity check to ensure pointer provided to memcpy is not null in libtiff/tif_dirread.c. - CVE-2022-0561 * SECURITY UPDATE: null pointer in TIFFFetchStripThing - debian/patches/CVE-2022-0562.patch: add sanity check to ensure pointer provided to memcpy is not null in libtiff/tif_dirread.c. - CVE-2022-0562 * SECURITY UPDATE: denial of service through assertion failure. - debian/patches/CVE-2022-0865.patch: reset flags to initial state when file has multiple IFD and when bit reversal is needed in libtiff/tif_jbig.c. - CVE-2022-0865 * SECURITY UPDATE: heap buffer overflow in ExtractImageSection - debian/patches/CVE-2022-0891.patch: correct wrong formula for image row size calculation in tools/tiffcrop.c. - CVE-2022-0891 Checksums-Sha1: c03be28ffdddd625333cbed9b5dd2fbcde729232 2260 libtiff-dev_4.0.9-5ubuntu0.5_amd64.deb e090adf44dcdef1953422aba688c99ff22d8976a 311292 libtiff-doc_4.0.9-5ubuntu0.5_all.deb 7668bbc183341d515c12baf5b97580109eadd5d7 13796 libtiff-opengl-dbgsym_4.0.9-5ubuntu0.5_amd64.ddeb b812f40de5f7198ed18d570ce1a984fb0363e9f6 10752 libtiff-opengl_4.0.9-5ubuntu0.5_amd64.deb c5d98c479c11b8d9d33786c572a41372b6a8fbca 352804 libtiff-tools-dbgsym_4.0.9-5ubuntu0.5_amd64.ddeb bdf08614dca389815ad8290f3353a16ea29e1cf7 195684 libtiff-tools_4.0.9-5ubuntu0.5_amd64.deb b9c9b44a3bded23476ccaad0a273223033f585bb 378408 libtiff5-dbgsym_4.0.9-5ubuntu0.5_amd64.ddeb 47d351a65caa570681d61adb24f5022624078637 274064 libtiff5-dev_4.0.9-5ubuntu0.5_amd64.deb df76e6fcac0ecf3f96ce1b9f15f0d54181016eff 153268 libtiff5_4.0.9-5ubuntu0.5_amd64.deb cf3b449b6fa8a9ecf150036ffeb277ec5d7f394d 21336 libtiffxx5-dbgsym_4.0.9-5ubuntu0.5_amd64.ddeb a4329bcece6254db3fea1888bf995b669d666c1a 5800 libtiffxx5_4.0.9-5ubuntu0.5_amd64.deb 481caa902bef6d46c39b42351873691d4791854e 11652 tiff_4.0.9-5ubuntu0.5_amd64.buildinfo Checksums-Sha256: 4344f9c4c80f0f197d03e3e2364fa53b64a1704159dc98ea1609c8aa22e0cfa6 2260 libtiff-dev_4.0.9-5ubuntu0.5_amd64.deb b0d890b16a626aa9457537ef1df54e2c665621f171dec7e22361cc23bbefbf28 311292 libtiff-doc_4.0.9-5ubuntu0.5_all.deb b215b5b0db5e5d2747214c565a29ac410ca38392d63f6d3584c67f7c877cbf53 13796 libtiff-opengl-dbgsym_4.0.9-5ubuntu0.5_amd64.ddeb cf1e8c09a570f8f7625068ed7d75e7204886bb68509cd0ff86f317f3e5902f68 10752 libtiff-opengl_4.0.9-5ubuntu0.5_amd64.deb 246fd169121f2a7ad8ec3f76d05ff31e09ff1364a51e0722efa549b6a6a7be34 352804 libtiff-tools-dbgsym_4.0.9-5ubuntu0.5_amd64.ddeb c4795e8007064b083fe60ec2de51cd706f7bcbb77f7118042da8d7709278a0fd 195684 libtiff-tools_4.0.9-5ubuntu0.5_amd64.deb 51c60aa5d5e89deffa3b9bd1b77917e95d36b6d74edaea2bfe00f1fe9bb61a6a 378408 libtiff5-dbgsym_4.0.9-5ubuntu0.5_amd64.ddeb 9830685ceaade3ed59c3bdc80d41eafe8d93cc1876bc511442c9d00d8c515731 274064 libtiff5-dev_4.0.9-5ubuntu0.5_amd64.deb 06b886798e85ce3d14364c4abf0f1173917a022da52f8952d56c4bc6ad30636a 153268 libtiff5_4.0.9-5ubuntu0.5_amd64.deb f64ec3d7d7574b50f039c28a8ca3a36d4983e1a96d0e73b428ed0d48c0e3c9b4 21336 libtiffxx5-dbgsym_4.0.9-5ubuntu0.5_amd64.ddeb 5de1eb94cc036d3ee9b1d4ec398e074fd4cf55244fb72cf944c2587d2ba09270 5800 libtiffxx5_4.0.9-5ubuntu0.5_amd64.deb 5ae3ccd204c9533da4b598fefc3dfab8fb9246a5db0c95453229390b44777a2d 11652 tiff_4.0.9-5ubuntu0.5_amd64.buildinfo Files: 19e8313c2d2b34ccad7a1f9d8c6efa97 2260 oldlibs optional libtiff-dev_4.0.9-5ubuntu0.5_amd64.deb af43a367ca7ed750c94430a757ab3923 311292 doc optional libtiff-doc_4.0.9-5ubuntu0.5_all.deb f60bfb62b7eaa7de1593d943a8ed2a14 13796 debug optional libtiff-opengl-dbgsym_4.0.9-5ubuntu0.5_amd64.ddeb 4839b91000a045320dbf6e8146546fa3 10752 graphics optional libtiff-opengl_4.0.9-5ubuntu0.5_amd64.deb 67f31d968cef09c1990676019ab60cdd 352804 debug optional libtiff-tools-dbgsym_4.0.9-5ubuntu0.5_amd64.ddeb 03c88059015e0b78413c7f3d2417bedb 195684 graphics optional libtiff-tools_4.0.9-5ubuntu0.5_amd64.deb b9da1da516a2e2f1ad73f2d6e9908261 378408 debug optional libtiff5-dbgsym_4.0.9-5ubuntu0.5_amd64.ddeb ddcc535033a49d6927ebc3030da216b0 274064 libdevel optional libtiff5-dev_4.0.9-5ubuntu0.5_amd64.deb 171b1154284b91157ef6704bf3dfd9fd 153268 libs optional libtiff5_4.0.9-5ubuntu0.5_amd64.deb 688e9fedbacfbd7fcb7dc400f6513152 21336 debug optional libtiffxx5-dbgsym_4.0.9-5ubuntu0.5_amd64.ddeb 433ab7ee0fdf5480666c0f09b092c582 5800 libs optional libtiffxx5_4.0.9-5ubuntu0.5_amd64.deb d602245d9822ac1a903471d5a1f0cd62 11652 libs optional tiff_4.0.9-5ubuntu0.5_amd64.buildinfo Original-Maintainer: Laszlo Boszormenyi (GCS)