lp:ubuntu/utopic-proposed/tiff

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

38. By Brian Murray on 2014-10-21

No-change rebuild to get debug symbols on all architectures.

37. By Jay Berkenbilt <email address hidden> on 2014-06-29

Remove libtiff4-dev, completing the tiff transition. Packages that
still declare build dependencies on libtiff4-dev must now build depend
on libtiff-dev instead, or if a versioned dependency is required,
libtiff5-dev with a specific version.

36. By Jay Berkenbilt <email address hidden> on 2014-06-21

Fix for CVE-2013-4243 (validation for gif2tiff) from Red Hat. (Closes:
#742917)

35. By Marc Deslauriers on 2014-05-05

* SECURITY UPDATE: denial of service and possible code execution in
  gif2tiff tool
  - debian/patches/CVE-2013-4243.patch: check width and height in
    tools/gif2tiff.c.
  - CVE-2013-4243

34. By Jay Berkenbilt <email address hidden> on 2014-03-01

Remove libtiff5-alt-dev transitional package now that no one is
build-depending on it anymore.

33. By Jay Berkenbilt <email address hidden> on 2013-12-23

Use dh-autoreconf to support new architectures in Ubuntu.

32. By Matthias Klose on 2013-12-07

Build using dh-autoreconf.

31. By Jay Berkenbilt <email address hidden> on 2013-12-04

* Update standards to 3.9.5. No changes required.
* libtiff4 -> libtiff5 transition. libtiff5-dev now provides
  libtiff-dev. libtiff5-alt-dev and libtiff4-dev are transitional
  packages that depend on libtiff5-dev. They will both be removed
  before jessie.

30. By Jackson Doak on 2013-10-24

* Merge from debian. Remaining changes:
  - debian/control: Have libtiff5-dev Provide libtiff-dev

29. By Marc Deslauriers on 2013-05-13

* SECURITY UPDATE: denial of service and possible code execution via heap
  overflow in tp_process_jpeg_strip().
  - debian/patches/CVE-2013-1960.patch: improve tp_process_jpeg_strip()
    logic in tools/tiff2pdf.c.
  - CVE-2013-1960
* SECURITY UPDATE: denial of service via stack overflow with malformed
  image-length and resolution.
  - debian/patches/CVE-2013-1961.patch: replace use of sprintf() with
    snprintf() in contrib/dbs/xtiff/xtiff.c, libtiff/tif_codec.c,
    libtiff/tif_dirinfo.c, tools/rgb2ycbcr.c, tools/tiff2bw.c,
    tools/tiff2pdf.c, tools/tiff2ps.c, tools/tiffcrop.c,
    tools/tiffdither.c.
  - CVE-2013-1961