lp:ubuntu/utopic-security/tiff

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

40. By Marc Deslauriers on 2015-04-01

* SECURITY REGRESSION: regression when saving TIFF files with compression
  predictor (LP: #1439186)
  - debian/patches/CVE-2014-8128-5.patch: disable until proper upstream
    fix is available.

39. By Marc Deslauriers on 2015-03-27

* SECURITY UPDATE: Fix multiple security issues
  - debian/patches/CVE-2014-81xx-1.patch to CVE-2014-81xx-11.patch
  - debian/patches/CVE-2014-8128-5.patch
  - debian/patches/CVE-2014-9655-1.patch to CVE-2014-9655-3.patch
  - debian/patches/read_overrun.patch
  - debian/patches/estimatestripbytecounts_return_code.patch
  - debian/patches/CVE-2014-8130.patch
  - CVE-2014-8127 (partially)
  - CVE-2014-8128
  - CVE-2014-8129
  - CVE-2014-8130
  - CVE-2014-9330
  - CVE-2014-9655

38. By Brian Murray on 2014-10-21

No-change rebuild to get debug symbols on all architectures.

37. By Jay Berkenbilt <email address hidden> on 2014-06-29

Remove libtiff4-dev, completing the tiff transition. Packages that
still declare build dependencies on libtiff4-dev must now build depend
on libtiff-dev instead, or if a versioned dependency is required,
libtiff5-dev with a specific version.

36. By Jay Berkenbilt <email address hidden> on 2014-06-21

Fix for CVE-2013-4243 (validation for gif2tiff) from Red Hat. (Closes:
#742917)

35. By Marc Deslauriers on 2014-05-05

* SECURITY UPDATE: denial of service and possible code execution in
  gif2tiff tool
  - debian/patches/CVE-2013-4243.patch: check width and height in
    tools/gif2tiff.c.
  - CVE-2013-4243

34. By Jay Berkenbilt <email address hidden> on 2014-03-01

Remove libtiff5-alt-dev transitional package now that no one is
build-depending on it anymore.

33. By Jay Berkenbilt <email address hidden> on 2013-12-23

Use dh-autoreconf to support new architectures in Ubuntu.

32. By Matthias Klose on 2013-12-07

Build using dh-autoreconf.

31. By Jay Berkenbilt <email address hidden> on 2013-12-04

* Update standards to 3.9.5. No changes required.
* libtiff4 -> libtiff5 transition. libtiff5-dev now provides
  libtiff-dev. libtiff5-alt-dev and libtiff4-dev are transitional
  packages that depend on libtiff5-dev. They will both be removed
  before jessie.