Accepted tiff 4.0.8-2+deb9u1 (source all amd64) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 02 Jul 2017 08:36:06 +0000
Source: tiff
Binary: libtiff5 libtiffxx5 libtiff5-dev libtiff-tools libtiff-opengl libtiff-doc
Architecture: source all amd64
Version: 4.0.8-2+deb9u1
Distribution: stretch-security
Urgency: high
Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Description:
libtiff-doc - TIFF manipulation and conversion documentation
libtiff-opengl - TIFF manipulation and conversion tools
libtiff-tools - TIFF manipulation and conversion tools
libtiff5 - Tag Image File Format (TIFF) library
libtiff5-dev - Tag Image File Format library (TIFF), development files
libtiffxx5 - Tag Image File Format (TIFF) library -- C++ interface
Closes: 866113 866611
Changes:
tiff (4.0.8-2+deb9u1) stretch-security; urgency=high
.
* Backport security fixes:
- CVE-2017-9936, memory leak in error code path of JBIGDecode()
(closes: #866113),
- prevent out of memory in gtTileContig() on corrupted files,
- CVE-2017-10688, assertion failure in TIFFWriteDirectoryTagCheckedXXXX()
(closes: #866611).
* Add required _TIFFReadEncodedStripAndAllocBuffer@LIBTIFF_4.0 symbol to the
libtiff5 package.
Checksums-Sha1:
971fd23c33eea7281506675641d6b4daef830473 2185 tiff_4.0.8-2+deb9u1.dsc
88717c97480a7976c94d23b6d9ed4ac74715267f 2065574 tiff_4.0.8.orig.tar.gz
901db4f50e21fd2ac682d33e8a9f3a62011992de 22508 tiff_4.0.8-2+deb9u1.debian.tar.xz
f5f287e70ddde7045a49c64b3a71556b22c914eb 395402 libtiff-doc_4.0.8-2+deb9u1_all.deb
64164e370688266134be5c1cfc5b62cd25c7e823 14186 libtiff-opengl-dbgsym_4.0.8-2+deb9u1_amd64.deb
a3519119cd713bfcabd2febf3e48a6a9e1720e37 99980 libtiff-opengl_4.0.8-2+deb9u1_amd64.deb
84e463d01daced6991bc31002b8bc83d69a25af2 351774 libtiff-tools-dbgsym_4.0.8-2+deb9u1_amd64.deb
5eab3d801adb687e7a8bfdd6b53d451aee89567e 280796 libtiff-tools_4.0.8-2+deb9u1_amd64.deb
efb42add726dcdb6fe802fbbc0eceacf512af21d 371102 libtiff5-dbgsym_4.0.8-2+deb9u1_amd64.deb
2f0c7c6042251032ea40c563fa0d48b39e4e983e 359410 libtiff5-dev_4.0.8-2+deb9u1_amd64.deb
34b1213e796c8abe017c5ac665edf21dd5586dbe 237022 libtiff5_4.0.8-2+deb9u1_amd64.deb
c517d4ce68bad9866ed086cd1e04155bbbc9c552 21040 libtiffxx5-dbgsym_4.0.8-2+deb9u1_amd64.deb
4081bf4460bb3e36ea64e40e831b6b6cc37b7410 95286 libtiffxx5_4.0.8-2+deb9u1_amd64.deb
da00fbb6859c7e19c53b561a8a9c104feccb3ab4 10842 tiff_4.0.8-2+deb9u1_amd64.buildinfo
Checksums-Sha256:
81fc0a21746ffbfdf3db69f671e4b4fda5416aedc057f97aec73d6c2889ca10d 2185 tiff_4.0.8-2+deb9u1.dsc
59d7a5a8ccd92059913f246877db95a2918e6c04fb9d43fd74e5c3390dac2910 2065574 tiff_4.0.8.orig.tar.gz
a0ed755351bbc4e8a05413316d782c071bccfb1b915767cc9bc09d56f31d34b5 22508 tiff_4.0.8-2+deb9u1.debian.tar.xz
00a8d890ad5a2fc098594b7f8c95b22664277c7a54534bb6e71aa847fa569e4b 395402 libtiff-doc_4.0.8-2+deb9u1_all.deb
fd093e5bdba3eb29089320effdf186650e00d78e6c9c76addd5ff516c642da6d 14186 libtiff-opengl-dbgsym_4.0.8-2+deb9u1_amd64.deb
2dac051b72af51fecad6c6adfd0faf8ebe5ee730893ff2287de77e14295c2302 99980 libtiff-opengl_4.0.8-2+deb9u1_amd64.deb
56f2f72520e4fc64d13ec6aad6a0677979e7a54897bc5febe970dab50214ebed 351774 libtiff-tools-dbgsym_4.0.8-2+deb9u1_amd64.deb
aa0ae0553e0e741da257783ce53b2490c2a16036d5cdeff1693e97b372f2515a 280796 libtiff-tools_4.0.8-2+deb9u1_amd64.deb
af7b76c95269b4014f9a2e54e8e4d71ef33e33d36f8d4a61263325d0ea56a8b8 371102 libtiff5-dbgsym_4.0.8-2+deb9u1_amd64.deb
79dee27ca371a92e1c10d9c1b5470ee5388f996813c8cf4f727a71b62c19d171 359410 libtiff5-dev_4.0.8-2+deb9u1_amd64.deb
1457671e46cfab7548ff0f7c4c3bfc9c8484bc8780fd7630b37f076b93500210 237022 libtiff5_4.0.8-2+deb9u1_amd64.deb
70feeb2a4dd86daececa0f690d77edb585a470ae2ce5243f801d80b1ad03ccc9 21040 libtiffxx5-dbgsym_4.0.8-2+deb9u1_amd64.deb
4b0b1317365a3b6c86d32149ec42fc3671003c220827d69e0f266ea78da66902 95286 libtiffxx5_4.0.8-2+deb9u1_amd64.deb
784e20c0ed6234344706c078f6032fb4147f54173d81636d13e2a20f5ffaed5c 10842 tiff_4.0.8-2+deb9u1_amd64.buildinfo
Files:
a23e9fc57ea25878e9e1987e2b0ebfe3 2185 libs optional tiff_4.0.8-2+deb9u1.dsc
2a7d1c1318416ddf36d5f6fa4600069b 2065574 libs optional tiff_4.0.8.orig.tar.gz
ee0cd9531a5a35daa3edbdb479b48d0c 22508 libs optional tiff_4.0.8-2+deb9u1.debian.tar.xz
bcad7c406cd2660a8e80740b281594df 395402 doc optional libtiff-doc_4.0.8-2+deb9u1_all.deb
ad566e7ba0640c84021be1fe031c9964 14186 debug extra libtiff-opengl-dbgsym_4.0.8-2+deb9u1_amd64.deb
9ab77d60d9249a876f495214383141aa 99980 graphics optional libtiff-opengl_4.0.8-2+deb9u1_amd64.deb
d5078358ffca63630c64a2318c9608df 351774 debug extra libtiff-tools-dbgsym_4.0.8-2+deb9u1_amd64.deb
7c81a1c2e7145abd2d88ecbce22c3c2b 280796 graphics optional libtiff-tools_4.0.8-2+deb9u1_amd64.deb
664e31bf4ddff2cd25d91143a0096d19 371102 debug extra libtiff5-dbgsym_4.0.8-2+deb9u1_amd64.deb
1c1b1860fd8a0db6bb8cffe29f7a86d9 359410 libdevel optional libtiff5-dev_4.0.8-2+deb9u1_amd64.deb
dbd7cbab9ea6c5c44fad0da25decba97 237022 libs optional libtiff5_4.0.8-2+deb9u1_amd64.deb
93e1f40d217d117f74134369ae8f8c82 21040 debug extra libtiffxx5-dbgsym_4.0.8-2+deb9u1_amd64.deb
7ada7176b11bd5513c2d5848ffb117eb 95286 libs optional libtiffxx5_4.0.8-2+deb9u1_amd64.deb
c340844a1b674c79e1a4acf8af80c101 10842 libs optional tiff_4.0.8-2+deb9u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=lUV0
-----END PGP SIGNATURE-----
Reply to: