Publishing details

• Published on 2019-03-12
• Copied from ubuntu trusty in PPA for Ubuntu Security Proposed by Marc Deslauriers

Changelog

tiff (4.0.3-7ubuntu0.11) trusty-security; urgency=medium

  * SECURITY UPDATE: heap over-read in TIFFWriteScanline
    - debian/patches/CVE-2018-10779.patch: fix overflow in
      libtiff/tif_write.c.
    - CVE-2018-10779
  * SECURITY UPDATE: heap over-read in cpSeparateBufToContigBuf
    - debian/patches/CVE-2018-12900-1.patch: check for overflow in
      tools/tiffcp.c.
    - debian/patches/CVE-2018-12900-2.patch: use INT_MAX in tools/tiffcp.c.
    - CVE-2018-12900
    - CVE-2019-7663
  * SECURITY UPDATE: NULL pointer dereference in _TIFFmemcmp
    - debian/patches/CVE-2018-17000.patch: add NULL check in
      libtiff/tif_dirwrite.c.
    - CVE-2018-17000
  * SECURITY UPDATE: NULL pointer dereference in TIFFWriteDirectorySec
    - debian/patches/CVE-2018-19210-1.patch: unset transferfunction field
      if necessary in libtiff/tif_dir.c.
    - debian/patches/CVE-2018-19210-2.patch: fix warning in
      libtiff/tif_dir.c.
    - CVE-2018-19210
  * SECURITY UPDATE: memory leak in TIFFFdOpen
    - debian/patches/CVE-2019-6128.patch: properly handle errors in
      tools/pal2rgb.c.
    - CVE-2019-6128

 -- Marc Deslauriers <email address hidden>  Mon, 11 Mar 2019 12:51:58 -0400

Builds

• amd64
• arm64
• armhf
• i386
• powerpc
• ppc64el

Built packages

• libtiff-doc TIFF manipulation and conversion documentation

• libtiff-opengl TIFF manipulation and conversion tools

• libtiff-opengl-dbgsym debug symbols for package libtiff-opengl

• libtiff-tools TIFF manipulation and conversion tools

• libtiff-tools-dbgsym debug symbols for package libtiff-tools

• libtiff4-dev Tag Image File Format library (TIFF), transitional package

• libtiff5 Tag Image File Format (TIFF) library

• libtiff5-alt-dev Tag Image File Format library (TIFF), transitional package

• libtiff5-dbgsym debug symbols for package libtiff5

• libtiff5-dev Tag Image File Format library (TIFF), development files

• libtiffxx5 Tag Image File Format (TIFF) library -- C++ interface

• libtiffxx5-dbgsym debug symbols for package libtiffxx5

Package files

• libtiff-doc_4.0.3-7ubuntu0.11_all.deb (292.9 KiB)
• libtiff-opengl-dbgsym_4.0.3-7ubuntu0.11_amd64.ddeb (12.0 KiB)
• libtiff-opengl-dbgsym_4.0.3-7ubuntu0.11_arm64.ddeb (12.5 KiB)
• libtiff-opengl-dbgsym_4.0.3-7ubuntu0.11_armhf.ddeb (12.5 KiB)
• libtiff-opengl-dbgsym_4.0.3-7ubuntu0.11_i386.ddeb (11.8 KiB)
• libtiff-opengl-dbgsym_4.0.3-7ubuntu0.11_powerpc.ddeb (12.5 KiB)
• libtiff-opengl-dbgsym_4.0.3-7ubuntu0.11_ppc64el.ddeb (12.9 KiB)
• libtiff-opengl_4.0.3-7ubuntu0.11_amd64.deb (10.5 KiB)
• libtiff-opengl_4.0.3-7ubuntu0.11_arm64.deb (9.8 KiB)
• libtiff-opengl_4.0.3-7ubuntu0.11_armhf.deb (9.9 KiB)
• libtiff-opengl_4.0.3-7ubuntu0.11_i386.deb (10.4 KiB)
• libtiff-opengl_4.0.3-7ubuntu0.11_powerpc.deb (10.4 KiB)
• libtiff-opengl_4.0.3-7ubuntu0.11_ppc64el.deb (10.7 KiB)
• libtiff-tools-dbgsym_4.0.3-7ubuntu0.11_amd64.ddeb (285.6 KiB)
• libtiff-tools-dbgsym_4.0.3-7ubuntu0.11_arm64.ddeb (292.1 KiB)
• libtiff-tools-dbgsym_4.0.3-7ubuntu0.11_armhf.ddeb (281.8 KiB)
• libtiff-tools-dbgsym_4.0.3-7ubuntu0.11_i386.ddeb (271.5 KiB)
• libtiff-tools-dbgsym_4.0.3-7ubuntu0.11_powerpc.ddeb (274.9 KiB)
• libtiff-tools-dbgsym_4.0.3-7ubuntu0.11_ppc64el.ddeb (353.3 KiB)
• libtiff-tools_4.0.3-7ubuntu0.11_amd64.deb (215.7 KiB)
• libtiff-tools_4.0.3-7ubuntu0.11_arm64.deb (193.9 KiB)
• libtiff-tools_4.0.3-7ubuntu0.11_armhf.deb (204.5 KiB)
• libtiff-tools_4.0.3-7ubuntu0.11_i386.deb (208.1 KiB)
• libtiff-tools_4.0.3-7ubuntu0.11_powerpc.deb (203.4 KiB)
• libtiff-tools_4.0.3-7ubuntu0.11_ppc64el.deb (226.5 KiB)
• libtiff4-dev_4.0.3-7ubuntu0.11_amd64.deb (2.3 KiB)
• libtiff4-dev_4.0.3-7ubuntu0.11_arm64.deb (2.3 KiB)
• libtiff4-dev_4.0.3-7ubuntu0.11_armhf.deb (2.3 KiB)
• libtiff4-dev_4.0.3-7ubuntu0.11_i386.deb (2.3 KiB)
• libtiff4-dev_4.0.3-7ubuntu0.11_powerpc.deb (2.3 KiB)
• libtiff4-dev_4.0.3-7ubuntu0.11_ppc64el.deb (2.3 KiB)
• libtiff5-alt-dev_4.0.3-7ubuntu0.11_amd64.deb (2.3 KiB)
• libtiff5-alt-dev_4.0.3-7ubuntu0.11_arm64.deb (2.3 KiB)
• libtiff5-alt-dev_4.0.3-7ubuntu0.11_armhf.deb (2.3 KiB)
• libtiff5-alt-dev_4.0.3-7ubuntu0.11_i386.deb (2.3 KiB)
• libtiff5-alt-dev_4.0.3-7ubuntu0.11_powerpc.deb (2.3 KiB)
• libtiff5-alt-dev_4.0.3-7ubuntu0.11_ppc64el.deb (2.3 KiB)
• libtiff5-dbgsym_4.0.3-7ubuntu0.11_amd64.ddeb (256.6 KiB)
• libtiff5-dbgsym_4.0.3-7ubuntu0.11_arm64.ddeb (257.5 KiB)
• libtiff5-dbgsym_4.0.3-7ubuntu0.11_armhf.ddeb (246.6 KiB)
• libtiff5-dbgsym_4.0.3-7ubuntu0.11_i386.ddeb (245.0 KiB)
• libtiff5-dbgsym_4.0.3-7ubuntu0.11_powerpc.ddeb (248.2 KiB)
• libtiff5-dbgsym_4.0.3-7ubuntu0.11_ppc64el.ddeb (296.0 KiB)
• libtiff5-dev_4.0.3-7ubuntu0.11_amd64.deb (259.9 KiB)
• libtiff5-dev_4.0.3-7ubuntu0.11_arm64.deb (240.2 KiB)
• libtiff5-dev_4.0.3-7ubuntu0.11_armhf.deb (246.0 KiB)
• libtiff5-dev_4.0.3-7ubuntu0.11_i386.deb (263.9 KiB)
• libtiff5-dev_4.0.3-7ubuntu0.11_powerpc.deb (244.3 KiB)
• libtiff5-dev_4.0.3-7ubuntu0.11_ppc64el.deb (281.4 KiB)
• libtiff5_4.0.3-7ubuntu0.11_amd64.deb (144.0 KiB)
• libtiff5_4.0.3-7ubuntu0.11_arm64.deb (122.4 KiB)
• libtiff5_4.0.3-7ubuntu0.11_armhf.deb (130.8 KiB)
• libtiff5_4.0.3-7ubuntu0.11_i386.deb (143.5 KiB)
• libtiff5_4.0.3-7ubuntu0.11_powerpc.deb (132.8 KiB)
• libtiff5_4.0.3-7ubuntu0.11_ppc64el.deb (149.4 KiB)
• libtiffxx5-dbgsym_4.0.3-7ubuntu0.11_amd64.ddeb (14.7 KiB)
• libtiffxx5-dbgsym_4.0.3-7ubuntu0.11_arm64.ddeb (15.1 KiB)
• libtiffxx5-dbgsym_4.0.3-7ubuntu0.11_armhf.ddeb (15.3 KiB)
• libtiffxx5-dbgsym_4.0.3-7ubuntu0.11_i386.ddeb (14.4 KiB)
• libtiffxx5-dbgsym_4.0.3-7ubuntu0.11_powerpc.ddeb (15.0 KiB)
• libtiffxx5-dbgsym_4.0.3-7ubuntu0.11_ppc64el.ddeb (15.1 KiB)
• libtiffxx5_4.0.3-7ubuntu0.11_amd64.deb (5.5 KiB)
• libtiffxx5_4.0.3-7ubuntu0.11_arm64.deb (5.6 KiB)
• libtiffxx5_4.0.3-7ubuntu0.11_armhf.deb (5.6 KiB)
• libtiffxx5_4.0.3-7ubuntu0.11_i386.deb (6.0 KiB)
• libtiffxx5_4.0.3-7ubuntu0.11_powerpc.deb (6.2 KiB)
• libtiffxx5_4.0.3-7ubuntu0.11_ppc64el.deb (5.8 KiB)
• tiff_4.0.3-7ubuntu0.11.debian.tar.gz (95.8 KiB)
• tiff_4.0.3-7ubuntu0.11.dsc (2.3 KiB)
• tiff_4.0.3.orig.tar.gz (2.0 MiB)