Accepted tiff 4.0.3-12.3+deb8u9 (source all amd64) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 25 Aug 2019 11:03:02 +0200
Source: tiff
Binary: libtiff5 libtiffxx5 libtiff5-dev libtiff-tools libtiff-opengl libtiff-doc
Architecture: source all amd64
Version: 4.0.3-12.3+deb8u9
Distribution: jessie-security
Urgency: high
Maintainer: Ondřej Surý <ondrej@debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Description:
libtiff-doc - TIFF manipulation and conversion documentation
libtiff-opengl - TIFF manipulation and conversion tools
libtiff-tools - TIFF manipulation and conversion tools
libtiff5 - Tag Image File Format (TIFF) library
libtiff5-dev - Tag Image File Format library (TIFF), development files
libtiffxx5 - Tag Image File Format (TIFF) library -- C++ interface
Changes:
tiff (4.0.3-12.3+deb8u9) jessie-security; urgency=high
.
* Non-maintainer upload by the LTS Team.
* CVE-2019-14973
Wrong handling off integer overflow checks, that are based on
undefined compiler behavior, might result in an application crash.
Checksums-Sha1:
db60e6e8c7c836edd4e2746be91bae988f906228 2399 tiff_4.0.3-12.3+deb8u9.dsc
652e97b78f1444237a82cbcfe014310e776eb6f0 2051630 tiff_4.0.3.orig.tar.gz
321d0bda71f6fc7366010d473f8557377d04811f 70408 tiff_4.0.3-12.3+deb8u9.debian.tar.xz
889c82f697ab87f418cb6ed62b9df88bccdfef3b 372308 libtiff-doc_4.0.3-12.3+deb8u9_all.deb
7bf1f41076c2ee3c018f7a874d994b7b5f78ce61 223176 libtiff5_4.0.3-12.3+deb8u9_amd64.deb
d3c1c7aa8c485b07d504abe3ed28452cd56d5b72 81890 libtiffxx5_4.0.3-12.3+deb8u9_amd64.deb
8622eb157cbc8575423e513eb10406052d175ddb 345366 libtiff5-dev_4.0.3-12.3+deb8u9_amd64.deb
b666bf7d36ba6b0bbe386331dccbd40e02450b43 275110 libtiff-tools_4.0.3-12.3+deb8u9_amd64.deb
224eab1dcafc9f4541c5aa82cf9ec0d5d350f82d 86784 libtiff-opengl_4.0.3-12.3+deb8u9_amd64.deb
Checksums-Sha256:
f7832a72c22181f67650585cb1e58c8b4f943dffde644c587861c4734265c6e1 2399 tiff_4.0.3-12.3+deb8u9.dsc
ea1aebe282319537fb2d4d7805f478dd4e0e05c33d0928baba76a7c963684872 2051630 tiff_4.0.3.orig.tar.gz
26ffa9eb31ec9af6854489503bc3b35cc3ea9f65f1d5aee5bdd8566de12802e0 70408 tiff_4.0.3-12.3+deb8u9.debian.tar.xz
4801f728e6d5699ea967abbbdbce509b9d05a95e94c50cec2950bdc90c495af9 372308 libtiff-doc_4.0.3-12.3+deb8u9_all.deb
fbd0eab4bddfbf481b9918043cd227151bb9f93e937f54f526735718125b9d1c 223176 libtiff5_4.0.3-12.3+deb8u9_amd64.deb
6e08ccced2c30716a981fc6aea1ad3ec8328abff752114e09305a7354ac20c7e 81890 libtiffxx5_4.0.3-12.3+deb8u9_amd64.deb
ef0cb092bf8b50577c7853ea9a39fc8dff806847b353859035b0d1f1f472e864 345366 libtiff5-dev_4.0.3-12.3+deb8u9_amd64.deb
db68aa24649b93b0e550475f28f355d14192b178b69f0afec3c01db0b3ee0458 275110 libtiff-tools_4.0.3-12.3+deb8u9_amd64.deb
079572094afea7957176d5d96ead2d53d2b5d2aab70c7db8a6af269852383861 86784 libtiff-opengl_4.0.3-12.3+deb8u9_amd64.deb
Files:
2d50f7e52e5a8a4b9b4962846e2d1298 2399 libs optional tiff_4.0.3-12.3+deb8u9.dsc
051c1068e6a0627f461948c365290410 2051630 libs optional tiff_4.0.3.orig.tar.gz
975622dd7f50396ce54db98780ef91ff 70408 libs optional tiff_4.0.3-12.3+deb8u9.debian.tar.xz
a80a64542982e8b1196364ed228c9ed2 372308 doc optional libtiff-doc_4.0.3-12.3+deb8u9_all.deb
5886e8bb18eeadef1e93beb53559d5f3 223176 libs optional libtiff5_4.0.3-12.3+deb8u9_amd64.deb
60e2a7317d57179932be3cbd7d714b0f 81890 libs optional libtiffxx5_4.0.3-12.3+deb8u9_amd64.deb
2994aa6abb48a25a1bce2b1b19ec7bbe 345366 libdevel optional libtiff5-dev_4.0.3-12.3+deb8u9_amd64.deb
907d618476cb88a15ba84a912ac6baa4 275110 graphics optional libtiff-tools_4.0.3-12.3+deb8u9_amd64.deb
049716227fd16dd8cc146424df77213e 86784 graphics optional libtiff-opengl_4.0.3-12.3+deb8u9_amd64.deb
-----BEGIN PGP SIGNATURE-----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=Dr7E
-----END PGP SIGNATURE-----