lp:ubuntu/vivid/tiff

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

43. By Marc Deslauriers on 2015-04-01

* SECURITY REGRESSION: regression when saving TIFF files with compression
  predictor (LP: #1439186)
  - debian/patches/CVE-2014-8128-5.patch: disable until proper upstream
    fix is available.

42. By Marc Deslauriers on 2015-03-30

* SECURITY UPDATE: Backport more security-relevant commits
  - debian/patches/CVE-2014-81xx-9.patch
  - debian/patches/CVE-2014-9655-1.patch
  - debian/patches/CVE-2014-9655-3.patch
  - debian/patches/read_overrun.patch
  - debian/patches/estimatestripbytecounts_return_code.patch
  - debian/patches/CVE-2014-8130.patch

41. By Moritz Muehlenhoff <email address hidden> on 2015-02-21

* NMU as discussed with Ondrej, the future adopter of tiff
* Fix multiple security issues, exact details will be recorded in the
  Debian security tracker

40. By Jay Berkenbilt <email address hidden> on 2014-12-30

Fix integer overflow in bmp2tiff. CVE-2014-9330. (Closes: #773987)

39. By Jay Berkenbilt <email address hidden> on 2014-12-23

* Don't crash on JPEG => non-JPEG conversion (Closes: #741451)
* Thanks Tomasz Buchert <email address hidden> for preparing the fix!

38. By Brian Murray on 2014-10-21

No-change rebuild to get debug symbols on all architectures.

37. By Jay Berkenbilt <email address hidden> on 2014-06-29

Remove libtiff4-dev, completing the tiff transition. Packages that
still declare build dependencies on libtiff4-dev must now build depend
on libtiff-dev instead, or if a versioned dependency is required,
libtiff5-dev with a specific version.

36. By Jay Berkenbilt <email address hidden> on 2014-06-21

Fix for CVE-2013-4243 (validation for gif2tiff) from Red Hat. (Closes:
#742917)

35. By Marc Deslauriers on 2014-05-05

* SECURITY UPDATE: denial of service and possible code execution in
  gif2tiff tool
  - debian/patches/CVE-2013-4243.patch: check width and height in
    tools/gif2tiff.c.
  - CVE-2013-4243

34. By Jay Berkenbilt <email address hidden> on 2014-03-01

Remove libtiff5-alt-dev transitional package now that no one is
build-depending on it anymore.