Your message dated Mon, 01 Oct 2012 20:47:05 +0000
with message-id <e1timtn-0007o2...@franck.debian.org>
and subject line Bug#678140: fixed in tiff 3.9.4-5+squeeze5
has caused the Debian Bug report #678140,
regarding Two tiff issues: CVE-2012-2113 / CVE-2012-2088
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
678140: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=678140
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: tiff
Severity: grave
Tags: security
Two new tiff issues have been repored to Red Hat bugzilla, please see
these bugs for details:
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-2088
https://bugzilla.redhat.com/show_bug.cgi?id=810551 (CVE-2012-2113)
Cheers,
Moritz
--- End Message ---
--- Begin Message ---
Source: tiff
Source-Version: 3.9.4-5+squeeze5
We believe that the bug you reported is fixed in the latest version of
tiff, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 678...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Jay Berkenbilt <q...@debian.org> (supplier of updated tiff package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sat, 22 Sep 2012 11:51:18 -0400
Source: tiff
Binary: libtiff4 libtiffxx0c2 libtiff4-dev libtiff-tools libtiff-opengl
libtiff-doc
Architecture: source all amd64
Version: 3.9.4-5+squeeze5
Distribution: stable-security
Urgency: high
Maintainer: Jay Berkenbilt <q...@debian.org>
Changed-By: Jay Berkenbilt <q...@debian.org>
Description:
libtiff-doc - TIFF manipulation and conversion documentation
libtiff-opengl - TIFF manipulation and conversion tools
libtiff-tools - TIFF manipulation and conversion tools
libtiff4 - Tag Image File Format (TIFF) library
libtiff4-dev - Tag Image File Format library (TIFF), development files
libtiffxx0c2 - Tag Image File Format (TIFF) library -- C++ interface
Closes: 678140
Changes:
tiff (3.9.4-5+squeeze5) stable-security; urgency=high
.
* Added several additional security patches taken from the Ubuntu Natty
(11.04) tiff package. (Closes: #678140)
.
CVE-2010-2482
CVE-2010-2595
CVE-2010-2597
CVE-2010-2630
CVE-2010-4665
CVE-2012-2113
CVE-2012-3401
Checksums-Sha1:
4896a0dff53d2543f00f560a005ff8f0a97071d5 1872 tiff_3.9.4-5+squeeze5.dsc
f13d6f2064b29e75f8301a7cfa6a4d43e216edff 23185
tiff_3.9.4-5+squeeze5.debian.tar.gz
472f96c99b2f31f2d9316f430f239b7c7ef41530 386102
libtiff-doc_3.9.4-5+squeeze5_all.deb
1e301115103dae167b66cc386b61ed496d8c55d8 195064
libtiff4_3.9.4-5+squeeze5_amd64.deb
d8faeb98b5eae6f0e71b229b4aaf4e20f19a9cbf 59072
libtiffxx0c2_3.9.4-5+squeeze5_amd64.deb
f292d6336c4fa5ff78016a580afe2441a13eea83 322122
libtiff4-dev_3.9.4-5+squeeze5_amd64.deb
21ddd107ffa53c0e48053529fe374f74e2b27ada 302544
libtiff-tools_3.9.4-5+squeeze5_amd64.deb
05681ba67e6ad786860a6828f6e7340cd8fc830d 64494
libtiff-opengl_3.9.4-5+squeeze5_amd64.deb
Checksums-Sha256:
df07a5f8dfc2a3d3f42fe338daf6e7430341e43480acc27d64304098ae064958 1872
tiff_3.9.4-5+squeeze5.dsc
3170be98e32ba5747bc3fb7c9ef5fbe50d0d3a41c7274c7b30a4738fbbede930 23185
tiff_3.9.4-5+squeeze5.debian.tar.gz
a2c360e373e4199c728e7999ebe5c64a62363dd829ed7427bef13767d925f329 386102
libtiff-doc_3.9.4-5+squeeze5_all.deb
691b4e6efcba385febd7e9936f107557e03b482ed9f756b2709ad24a453a347c 195064
libtiff4_3.9.4-5+squeeze5_amd64.deb
c106fa8bbd0224172841a7de8e2f8329b1de1341c134ac7718c7a82781392d1e 59072
libtiffxx0c2_3.9.4-5+squeeze5_amd64.deb
6e5a2c82b70810dc8ee951eb2380a8818357f5c94c30487cca4f73816aeea64c 322122
libtiff4-dev_3.9.4-5+squeeze5_amd64.deb
9981aee3bb305144a138226fd038dcc61a5347f26e30f9977ff478cd2978c29a 302544
libtiff-tools_3.9.4-5+squeeze5_amd64.deb
1350a8182eef7fc5273c8245bccee91d6e3ef63c9c9b8087e78c21f74bdbeef8 64494
libtiff-opengl_3.9.4-5+squeeze5_amd64.deb
Files:
a7ca076520bf975d5fb78b157de056f4 1872 libs optional tiff_3.9.4-5+squeeze5.dsc
8d9275bc606f4aed473ce41bf71af3d6 23185 libs optional
tiff_3.9.4-5+squeeze5.debian.tar.gz
6a589ac4e3546bb8e497eacb4b35e6c4 386102 doc optional
libtiff-doc_3.9.4-5+squeeze5_all.deb
c6a63952d2b720c095548b122762099b 195064 libs optional
libtiff4_3.9.4-5+squeeze5_amd64.deb
fbd39c5b3fc5ea6af6c61b06d5a22ba0 59072 libs optional
libtiffxx0c2_3.9.4-5+squeeze5_amd64.deb
f056139dc31c87e3ff6a8a4e0e8d4539 322122 libdevel optional
libtiff4-dev_3.9.4-5+squeeze5_amd64.deb
e0eeba4eb48982cf821d352dfa500698 302544 graphics optional
libtiff-tools_3.9.4-5+squeeze5_amd64.deb
d4413586e598f411fbb7da14dda9d232 64494 graphics optional
libtiff-opengl_3.9.4-5+squeeze5_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)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=VuZy
-----END PGP SIGNATURE-----
--- End Message ---