tiff 3.6.1-5ubuntu0.3 source package in Ubuntu

Changelog

tiff (3.6.1-5ubuntu0.3) hoary-security; urgency=low

  * SECURITY UPDATE: DoS and arbitrary code execution with crafted TIFF files.
  * Backported security relevant fixes from stable 3.8.1 release. See
    http://bugzilla.remotesensing.org/show_bug.cgi?id=1102 for reproducer
    images.
  * libtiff/tif_dirread.c: Fix error reporting in TIFFFetchAnyArray()
    (%d in format string without corresponding integer argument).
    [CVE-2006-2024]
  * libtiff/{tif_pixarlog.c, tif_fax3.c, tif_zip.c}: Properly
    restore setfield/getfield methods in cleanup functions to avoid crash on
    invalid files. [CVE-2006-2024]
  * libtiff/{tif_predict.c, tif_predict.h}: Added new function
    TIFFPredictorCleanup() to restore parent decode/encode/field methods.
    [CVE-2006-2024]
  * libtiff/tif_dirread.c: Check for integer overflow in TIFFFetchData().
    [CVE-2006-2025]
  * libtiff/tif_jpeg.c: Properly restore setfield/getfield methods in
    cleanup functions to avoid double free(). [CVE-2006-2026]
  * libtiff/tif_color.c: Check for out-of-bounds values in TIFFXYZToRGB().
    [CVE-2006-2120]
  * Added CVE to previous changelog.

 -- Martin Pitt <email address hidden>   Wed,  3 May 2006 11:24:44 +0000