tiff 3.7.3-1ubuntu1.1 source package in Ubuntu

Changelog

tiff (3.7.3-1ubuntu1.1) breezy-security; urgency=low

  * SECURITY UPDATE: DoS and arbitrary code execution with crafted TIFF files.
  * Add debian/patches/3.8.1-security-fixes.patch: Backported security
    relevant fixes from stable 3.8.1 release:
    - libtiff/tif_dirread.c: Fix error reporting in TIFFFetchAnyArray()
      (%d in format string without corresponding integer argument).
      [CVE-2006-2024]
    - libtiff/{tif_pixarlog.c, tif_fax3.c, tif_zip.c}: Properly
      restore setfield/getfield methods in cleanup functions to avoid crash on
      invalid files. [CVE-2006-2024]
    - libtiff/{tif_predict.c, tif_predict.h}: Added new function
      TIFFPredictorCleanup() to restore parent decode/encode/field methods.
      [CVE-2006-2024]
    - libtiff/tif_dirread.c: Check for integer overflow in TIFFFetchData().
      [CVE-2006-2025]
    - libtiff/tif_jpeg.c: Properly restore setfield/getfield methods in
      cleanup functions to avoid double free(). [CVE-2006-2026]
    - libtiff/tif_color.c: Check for out-of-bounds values in TIFFXYZToRGB().
      [CVE-2006-2120]
  * See http://bugzilla.remotesensing.org/show_bug.cgi?id=1102 for reproducer
    images.

 -- Martin Pitt <email address hidden>   Wed,  3 May 2006 11:11:30 +0000