Format: 1.8 Date: Wed, 11 May 2022 17:09:42 +0200 Source: tiff Binary: libtiff5 libtiffxx5 libtiff5-dev libtiff-dev libtiff-tools libtiff-opengl libtiff-doc Architecture: i386 Version: 4.0.9-5ubuntu0.5 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: David Fernandez Gonzalez Description: libtiff-dev - Tag Image File Format library (TIFF), development files, current libtiff-doc - TIFF manipulation and conversion documentation libtiff-opengl - TIFF manipulation and conversion tools libtiff-tools - TIFF manipulation and conversion tools libtiff5 - Tag Image File Format (TIFF) library libtiff5-dev - Tag Image File Format library (TIFF), development files libtiffxx5 - Tag Image File Format (TIFF) library -- C++ interface Changes: tiff (4.0.9-5ubuntu0.5) bionic-security; urgency=medium . * SECURITY UPDATE: malloc failure in TIFF2RGBA tool - debian/patches/CVE-2020-35522.patch: enforce (configurable) memory limit in tools/tiff2rgba.c. - CVE-2020-35522 * SECURITY UPDATE: null pointer in TIFFReadDirectory - debian/patches/CVE-2022-0561.patch: add sanity check to ensure pointer provided to memcpy is not null in libtiff/tif_dirread.c. - CVE-2022-0561 * SECURITY UPDATE: null pointer in TIFFFetchStripThing - debian/patches/CVE-2022-0562.patch: add sanity check to ensure pointer provided to memcpy is not null in libtiff/tif_dirread.c. - CVE-2022-0562 * SECURITY UPDATE: denial of service through assertion failure. - debian/patches/CVE-2022-0865.patch: reset flags to initial state when file has multiple IFD and when bit reversal is needed in libtiff/tif_jbig.c. - CVE-2022-0865 * SECURITY UPDATE: heap buffer overflow in ExtractImageSection - debian/patches/CVE-2022-0891.patch: correct wrong formula for image row size calculation in tools/tiffcrop.c. - CVE-2022-0891 Checksums-Sha1: dfa6053a9a9ee5cc0adc343b5d4eddf831b83c4f 2260 libtiff-dev_4.0.9-5ubuntu0.5_i386.deb 1ebf1366c31aa7e209b6b43400fc5daa983f75ef 13104 libtiff-opengl-dbgsym_4.0.9-5ubuntu0.5_i386.ddeb 79ebce2944eb5260bb1c8a0377f4aabee8282932 10928 libtiff-opengl_4.0.9-5ubuntu0.5_i386.deb 36e3192663954dfa6b909d62781cb4668280239c 318424 libtiff-tools-dbgsym_4.0.9-5ubuntu0.5_i386.ddeb 145502bccf0a606c886dfa319ab121aaaef59d62 200520 libtiff-tools_4.0.9-5ubuntu0.5_i386.deb 0ad7048119ea43b538cf752f51ec1dc12a5fc1ad 336572 libtiff5-dbgsym_4.0.9-5ubuntu0.5_i386.ddeb af0abb35c9c65e3aa3886664e7694fddfef43e8f 292340 libtiff5-dev_4.0.9-5ubuntu0.5_i386.deb 670602781b18de896f5aff3cd212c95db7db4d58 164520 libtiff5_4.0.9-5ubuntu0.5_i386.deb e3fe464320b00116758f5a7387c1bd22bc999262 20504 libtiffxx5-dbgsym_4.0.9-5ubuntu0.5_i386.ddeb e7a1a4bcd5c2f4f85c46f6d07db03217940f0d93 6372 libtiffxx5_4.0.9-5ubuntu0.5_i386.deb 244aa81b0fdd111d29eade62fcd0eccc42d2eff7 11268 tiff_4.0.9-5ubuntu0.5_i386.buildinfo Checksums-Sha256: 4caffea67d7eaef4cbd96271725f07a226a5e85b8b1bdc3873870f03b6d96953 2260 libtiff-dev_4.0.9-5ubuntu0.5_i386.deb 0eaa77d67ff150bef9dac2bcea2310d060b24a17c59a0dab5d99aba22e94e5af 13104 libtiff-opengl-dbgsym_4.0.9-5ubuntu0.5_i386.ddeb 6142c28ffdee358056e5028b50f52b385b3f65939c8c5a4afddf1d3376bf2dcc 10928 libtiff-opengl_4.0.9-5ubuntu0.5_i386.deb 90dfdd7dddfd9376748f976f04d45a59fb45992086c2c02dc2fe74d44ff1a168 318424 libtiff-tools-dbgsym_4.0.9-5ubuntu0.5_i386.ddeb 7e3c71bfeb38724c7f89d750aa00a5663a352afccf64b1a2348a7f27d32e2a45 200520 libtiff-tools_4.0.9-5ubuntu0.5_i386.deb 4dbbfc0aad4a2c6602a6bebf1159b643fd10d63d15c09ec3cc6ae7dddef5d918 336572 libtiff5-dbgsym_4.0.9-5ubuntu0.5_i386.ddeb 25265a8692a30d681a1c7ce725d5471e2c25fe1a6e7e4b33c01aad113a7ef7a2 292340 libtiff5-dev_4.0.9-5ubuntu0.5_i386.deb 4c60ba675787ecdbb80534c4796b2656af6531d7033edc26c10a4a4933944512 164520 libtiff5_4.0.9-5ubuntu0.5_i386.deb 2eaac6a2ebe435a78f609183e30a4b8e5767b7dabd8d77978e35987cc3cf1165 20504 libtiffxx5-dbgsym_4.0.9-5ubuntu0.5_i386.ddeb 3098a5d6dc25763a9f1f2c5ded3a4f1d09a5d39010e1e2b19afdec863a5f58bb 6372 libtiffxx5_4.0.9-5ubuntu0.5_i386.deb f2047d0e79146aafcb18d847be28ab60164562ff48829125f1b71a5263f8e907 11268 tiff_4.0.9-5ubuntu0.5_i386.buildinfo Files: dcf0749bdaf83d89431f3f2e214b87cb 2260 oldlibs optional libtiff-dev_4.0.9-5ubuntu0.5_i386.deb febdf5b4c892de2115fecaa143fdc4dc 13104 debug optional libtiff-opengl-dbgsym_4.0.9-5ubuntu0.5_i386.ddeb ad863f90a5497a4e21fde543e4940835 10928 graphics optional libtiff-opengl_4.0.9-5ubuntu0.5_i386.deb 1cc2bfbc9721f9e95b406b9657f91fdf 318424 debug optional libtiff-tools-dbgsym_4.0.9-5ubuntu0.5_i386.ddeb 120e31319c6620fabe3ba4216aeab0a1 200520 graphics optional libtiff-tools_4.0.9-5ubuntu0.5_i386.deb 973c41a1f911954f5fc924f99311e7a8 336572 debug optional libtiff5-dbgsym_4.0.9-5ubuntu0.5_i386.ddeb fc36ea64a71adc6b525cc56f8f357cfb 292340 libdevel optional libtiff5-dev_4.0.9-5ubuntu0.5_i386.deb e895a693e449d62564ca7ab3ef8fb21d 164520 libs optional libtiff5_4.0.9-5ubuntu0.5_i386.deb 8f1a63c0e6bee04fa84386a5d2034b0a 20504 debug optional libtiffxx5-dbgsym_4.0.9-5ubuntu0.5_i386.ddeb 9a3d9fe1313f02295bac250f820a54a4 6372 libs optional libtiffxx5_4.0.9-5ubuntu0.5_i386.deb 7ffdbdbdae08e642d54bb1f4df8a0cab 11268 libs optional tiff_4.0.9-5ubuntu0.5_i386.buildinfo Original-Maintainer: Laszlo Boszormenyi (GCS)