Back to tiff PTS page

Accepted tiff 4.5.1+git230720-1 (source) into unstable



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 29 Jul 2023 23:36:42 +0200
Source: tiff
Architecture: source
Version: 4.5.1+git230720-1
Distribution: unstable
Urgency: medium
Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Changes:
 tiff (4.5.1+git230720-1) unstable; urgency=medium
 .
   * Git snapshot, fixing the following security issues:
     - fix TransferFunction writing of only two transfer functions,
     - TIFFReadDirectory(): fix crash when reading tag TIFFTAG_EP_BATTERYLEVEL,
     - WebP decoder: validate WebP blob width, height, band count against
       TIFF parameters,
     - TIFFReadDirectoryCheckOrder(): avoid integer overflow,
     - tiffcp: fix memory corruption (overflow) on hostile images,
     - raw2tiff: fix integer overflow and bypass of the check.
Checksums-Sha1:
 495ee9f9e7b22c424153b8d3d8a4acdf815afbe6 2322 tiff_4.5.1+git230720-1.dsc
 b142b5bbcd2e304b018de35a7f160461fab001e4 1781896 tiff_4.5.1+git230720.orig.tar.xz
 a394e0bb2e59281f23069c3c17b1844026df41a5 21964 tiff_4.5.1+git230720-1.debian.tar.xz
Checksums-Sha256:
 4c19ac8cd08472e55ed12ad449d883cd2cabb7d7c0845234847e24817a9e0511 2322 tiff_4.5.1+git230720-1.dsc
 0e51bcf3a3ffa5fc76ea6aeb74a797f95c84544fcc8b6a1ec5def967a78e9e12 1781896 tiff_4.5.1+git230720.orig.tar.xz
 eb3299ba003f5a6ac414ef10bc2e4fb6607ef7366a4c8dc6127a82fa916e3c73 21964 tiff_4.5.1+git230720-1.debian.tar.xz
Files:
 ffbf079149875620138464ab3acb1c8f 2322 libs optional tiff_4.5.1+git230720-1.dsc
 385de53eba580ddd0808c9e295875738 1781896 libs optional tiff_4.5.1+git230720.orig.tar.xz
 78c22082cf0d931d01c81c6b459b644f 21964 libs optional tiff_4.5.1+git230720-1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=rEjz
-----END PGP SIGNATURE-----