Skip Navigation

  • Home
  • Contact us
  • FAQ
  • Glossary
  • Public key
  • Sitemap
  • Cymraeg
  • What's new
CPNI - Centre for the Protection of National Infastructure

Advanced search

  • About CPNI
  • The threats
  • Security planning
  • Methods of attack
  • Protecting your assets
  • Products and services
    • CSIRTUK advisories
      • Advisories archive
    • General protective security publications
    • InfoSec briefings
    • InfoSec technical notes
    • InfoSec vulnerability disclosures
    • Good practice guidelines
    • Viewpoints
    • Information exchanges
    • Risk Management Delivery Group
  • Research
Home > Products and services > CSIRTUK advisories > Advisories archive > January 2005 > Three Debian Security Advisories: 1. DSA 628-1 - imlib2 2. DSA 627-1 - namazu2 3. DSA 626-1 - tiff

January 2005

Three Debian Security Advisories: 1. DSA 628-1 - imlib2 2. DSA 627-1 - namazu2 3. DSA 626-1 - tiff

ID: 00012
Ref: 12/2005
Date: 07 January 2005:15:53:49
Version: 1

Title: Three Debian Security Advisories: 1. DSA 628-1 - imlib2 2. DSA 627-1 - namazu2 3. DSA 626-1 - tiff
Abstract:
Vendors affected: Debian
Operating systems affected: Debian
Applications affected: Debian

Title
=====

Three Debian Security Advisories:

1. DSA 628-1 - imlib2

2. DSA 627-1 - namazu2

3. DSA 626-1 - tiff


Detail
======

1. Pavel Kankovsky discovered that several overflows found in the libXpm
library were also present in imlib and imlib2, imaging libraries for X11.
An attacker could create a carefully crafted image file in such a way that
it could cause an application linked with imlib or imlib2 to execute
arbitrary code when the file was opened by a victim.

2. A cross-site scripting vulnerability has been discovered in namazu2,
a full text search engine. An attacker could prepare specially crafted
input that would not be sanitised by namazu2 and hence displayed verbatim
for the victim.

3. Dmitry V. Levin discovered a buffer overflow in libtiff, the Tag Image
File Format library for processing TIFF graphics files. Upon reading a TIFF
file it is possible to crash the application, and maybe also to execute
arbitrary code.




1.


- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - --------------------------------------------------------------------------
Debian Security Advisory DSA 628-1 security@debian.org
http://www.debian.org/security/ Martin Schulze
January 6th, 2005 http://www.debian.org/security/faq
- - --------------------------------------------------------------------------

Package : imlib2
Vulnerability : integer overflows
Problem-Type : remote
Debian-specific: no
CVE ID : CAN-2004-1026

Pavel Kankovsky discovered that several overflows found in the libXpm library
were also present in imlib and imlib2, imaging libraries for X11. An attacker
could create a carefully crafted image file in such a way that it could cause
an application linked with imlib or imlib2 to execute arbitrary code when the
file was opened by a victim. The Common Vulnerabilities and Exposures project
identifies the following
problems:

CAN-2004-1025

Multiple heap-based buffer overflows. No such code is present in
imlib2.

CAN-2004-1026

Multiple integer overflows in the imlib library.

For the stable distribution (woody) these problems have been fixed in
version 1.0.5-2woody2.

For the unstable distribution (sid) these problems will be fixed soon.

We recommend that you upgrade your imlib2 packages.


Upgrade Instructions
- - --------------------

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for sources.list
as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the footer to
the proper configuration.


Debian GNU/Linux 3.0 alias woody
- - --------------------------------

Source archives:

http://security.debian.org/pool/updates/main/i/imlib2/imlib2_1.0.5-2woody2.dsc
Size/MD5 checksum: 733 6f6e8508b5b630a86f9efcfecde7def4
http://security.debian.org/pool/updates/main/i/imlib2/imlib2_1.0.5-2woody2.diff.gz
Size/MD5 checksum: 24428 a564f25fde0c5b0cabcc09d5b5159535
http://security.debian.org/pool/updates/main/i/imlib2/imlib2_1.0.5.orig.tar.gz
Size/MD5 checksum: 688261 3b1a80c95ff2a4cfb3bce49e27d94461

Alpha architecture:

http://security.debian.org/pool/updates/main/i/imlib2/libimlib2_1.0.5-2woody2_alpha.deb
Size/MD5 checksum: 191216 5fb5991f4fb1239e5f1cd0c1a7d969bf
http://security.debian.org/pool/updates/main/i/imlib2/libimlib2-dev_1.0.5-2woody2_alpha.deb
Size/MD5 checksum: 483026 cdf1447ba093954a4d99bec1d04aecb9

ARM architecture:

http://security.debian.org/pool/updates/main/i/imlib2/libimlib2_1.0.5-2woody2_arm.deb
Size/MD5 checksum: 165194 2c7d609e7f2777a118be441b7379ec49
http://security.debian.org/pool/updates/main/i/imlib2/libimlib2-dev_1.0.5-2woody2_arm.deb
Size/MD5 checksum: 440948 601854f35385592e7c3daeda7c6e946b

Intel IA-32 architecture:

http://security.debian.org/pool/updates/main/i/imlib2/libimlib2_1.0.5-2woody2_i386.deb
Size/MD5 checksum: 149446 51b598088378311845699e97e480f88d
http://security.debian.org/pool/updates/main/i/imlib2/libimlib2-dev_1.0.5-2woody2_i386.deb
Size/MD5 checksum: 403528 ffbb69fee4cf35317c63813e86153173

Intel IA-64 architecture:

http://security.debian.org/pool/updates/main/i/imlib2/libimlib2_1.0.5-2woody2_ia64.deb
Size/MD5 checksum: 246832 aefd120663f3d66136a295fb2834ebc4
http://security.debian.org/pool/updates/main/i/imlib2/libimlib2-dev_1.0.5-2woody2_ia64.deb
Size/MD5 checksum: 508434 06f35a685680b023cd403c35b7ae423f

HP Precision architecture:

http://security.debian.org/pool/updates/main/i/imlib2/libimlib2_1.0.5-2woody2_hppa.deb
Size/MD5 checksum: 193598 f5d1aa5591f46bf7cc0a4991ebf17b57
http://security.debian.org/pool/updates/main/i/imlib2/libimlib2-dev_1.0.5-2woody2_hppa.deb
Size/MD5 checksum: 467452 1692700274cf6db934c3e8eada86e0ca

Motorola 680x0 architecture:

http://security.debian.org/pool/updates/main/i/imlib2/libimlib2_1.0.5-2woody2_m68k.deb
Size/MD5 checksum: 149362 b7b490352539282cb496fe0033f1510c
http://security.debian.org/pool/updates/main/i/imlib2/libimlib2-dev_1.0.5-2woody2_m68k.deb
Size/MD5 checksum: 402692 2d2848f5df47b51e6731e63d2e3f4a61

Big endian MIPS architecture:

http://security.debian.org/pool/updates/main/i/imlib2/libimlib2_1.0.5-2woody2_mips.deb
Size/MD5 checksum: 158132 8fa35f404b87dc55a85b9f864c60dd3b
http://security.debian.org/pool/updates/main/i/imlib2/libimlib2-dev_1.0.5-2woody2_mips.deb
Size/MD5 checksum: 447340 d7260c65edee790294ca5abe78ed8ea9

Little endian MIPS architecture:

http://security.debian.org/pool/updates/main/i/imlib2/libimlib2_1.0.5-2woody2_mipsel.deb
Size/MD5 checksum: 157308 ca665733cf4f1bba438d4e8c1dc2b2d3
http://security.debian.org/pool/updates/main/i/imlib2/libimlib2-dev_1.0.5-2woody2_mipsel.deb
Size/MD5 checksum: 439724 910d1d3f6d92c33229046a07780e52d1

PowerPC architecture:

http://security.debian.org/pool/updates/main/i/imlib2/libimlib2_1.0.5-2woody2_powerpc.deb
Size/MD5 checksum: 168694 cd8efd37e1b4c99790676b7859f7d655
http://security.debian.org/pool/updates/main/i/imlib2/libimlib2-dev_1.0.5-2woody2_powerpc.deb
Size/MD5 checksum: 443648 f0cd41775ea1e80875e4109662408e52

IBM S/390 architecture:

http://security.debian.org/pool/updates/main/i/imlib2/libimlib2_1.0.5-2woody2_s390.deb
Size/MD5 checksum: 169030 8200d4599577df133a9a944786e958e7
http://security.debian.org/pool/updates/main/i/imlib2/libimlib2-dev_1.0.5-2woody2_s390.deb
Size/MD5 checksum: 421472 f7fc3deb38b061fb5e6bd1f448dea617

Sun Sparc architecture:

http://security.debian.org/pool/updates/main/i/imlib2/libimlib2_1.0.5-2woody2_sparc.deb
Size/MD5 checksum: 166290 96777c27912c44e1ca40089cca0a5453
http://security.debian.org/pool/updates/main/i/imlib2/libimlib2-dev_1.0.5-2woody2_sparc.deb
Size/MD5 checksum: 434848 edc14a5c15cab67eaa1b7cf50ae28450


These files will probably be moved into the stable distribution on
its next update.

- - ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main For dpkg-ftp:
ftp://security.debian.org/debian-security dists/stable/updates/main Mailing list:
debian-security-announce@lists.debian.org
Package info: `apt-cache show ' and http://packages.debian.org/

- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFB3W0CW5ql+IAeqTIRAgxoAJ0fKEVMFGGSztuY/eUKakGBB0N0ogCcCRvp
NeqWXi7u9MFMpmpJQ45Rvkk=
=rIC6
- -----END PGP SIGNATURE-----


2.


- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - --------------------------------------------------------------------------
Debian Security Advisory DSA 627-1 security@debian.org
http://www.debian.org/security/ Martin Schulze
January 6th, 2005 http://www.debian.org/security/faq
- - --------------------------------------------------------------------------

Package : namazu2
Vulnerability : unsanitised input
Problem-Type : remote
Debian-specific: no
CVE ID : CAN-2004-1318

A cross-site scripting vulnerability has been discovered in namazu2, a full
text search engine. An attacker could prepare specially crafted input that
would not be sanitised by namazu2 and hence displayed verbatim for the victim.

For the stable distribution (woody) this problem has been fixed in version
2.0.10-1woody3.

For the unstable distribution (sid) this problem has been fixed in version
2.0.14-1.

We recommend that you upgrade your namazu2 package.


Upgrade Instructions
- - --------------------

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for sources.list
as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the footer to
the proper configuration.


Debian GNU/Linux 3.0 alias woody
- - --------------------------------

Source archives:

http://security.debian.org/pool/updates/main/n/namazu2/namazu2_2.0.10-1woody3.dsc
Size/MD5 checksum: 729 55d9af5c2d7acce5eb762335e51da150
http://security.debian.org/pool/updates/main/n/namazu2/namazu2_2.0.10-1woody3.diff.gz
Size/MD5 checksum: 10026 c47888f62795d22e2e82c2078e75583e
http://security.debian.org/pool/updates/main/n/namazu2/namazu2_2.0.10.orig.tar.gz
Size/MD5 checksum: 833838 85892f930e5ef694f39469f136f484b4

Architecture independent components:

http://security.debian.org/pool/updates/main/n/namazu2/namazu2-common_2.0.10-1woody3_all.deb
Size/MD5 checksum: 57566 2619b0261f7c78f567c5b57bc7134709
http://security.debian.org/pool/updates/main/n/namazu2/namazu2-index-tools_2.0.10-1woody3_all.deb
Size/MD5 checksum: 78724 0caddc9af184cdd666f3cb8e4b86a38d

Alpha architecture:

http://security.debian.org/pool/updates/main/n/namazu2/libnmz3_2.0.10-1woody3_alpha.deb
Size/MD5 checksum: 116832 4729657782021cc31cd560b8e5d7eb41
http://security.debian.org/pool/updates/main/n/namazu2/libnmz3-dev_2.0.10-1woody3_alpha.deb
Size/MD5 checksum: 144424 a15b70d1f03ff9861e533230790718f1
http://security.debian.org/pool/updates/main/n/namazu2/namazu2_2.0.10-1woody3_alpha.deb
Size/MD5 checksum: 282454 59f32b2d66a1350f373647d1f66569f6

ARM architecture:

http://security.debian.org/pool/updates/main/n/namazu2/libnmz3_2.0.10-1woody3_arm.deb
Size/MD5 checksum: 105864 09deb2f4befbcf66c28ec9cdd4284b94
http://security.debian.org/pool/updates/main/n/namazu2/libnmz3-dev_2.0.10-1woody3_arm.deb
Size/MD5 checksum: 124170 5c6ff41c3591f8da3fda507b7cfb1d15
http://security.debian.org/pool/updates/main/n/namazu2/namazu2_2.0.10-1woody3_arm.deb
Size/MD5 checksum: 264236 1914b11a284327e358d25f7f45522c4b

Intel IA-32 architecture:

http://security.debian.org/pool/updates/main/n/namazu2/libnmz3_2.0.10-1woody3_i386.deb
Size/MD5 checksum: 103678 7eb33aebb6d18620f39bca6b39491f5c
http://security.debian.org/pool/updates/main/n/namazu2/libnmz3-dev_2.0.10-1woody3_i386.deb
Size/MD5 checksum: 117564 be97133d3c04355444fedafaf08b8d72
http://security.debian.org/pool/updates/main/n/namazu2/namazu2_2.0.10-1woody3_i386.deb
Size/MD5 checksum: 254140 fcd5ae7c0cbd72a3fe79efb23545d8d6

Intel IA-64 architecture:

http://security.debian.org/pool/updates/main/n/namazu2/libnmz3_2.0.10-1woody3_ia64.deb
Size/MD5 checksum: 132674 54adcfa851a138b9f5f1ae96cb7e51c3
http://security.debian.org/pool/updates/main/n/namazu2/libnmz3-dev_2.0.10-1woody3_ia64.deb
Size/MD5 checksum: 150578 26c7c95f53e6dc9905e84f59103cfa24
http://security.debian.org/pool/updates/main/n/namazu2/namazu2_2.0.10-1woody3_ia64.deb
Size/MD5 checksum: 296226 55d76574ec6153ce8b0ac3c0ccb47d1f

HP Precision architecture:

http://security.debian.org/pool/updates/main/n/namazu2/libnmz3_2.0.10-1woody3_hppa.deb
Size/MD5 checksum: 112816 155828c8655c08ea416827df8459ea43
http://security.debian.org/pool/updates/main/n/namazu2/libnmz3-dev_2.0.10-1woody3_hppa.deb
Size/MD5 checksum: 133528 af9255851e8a929e47825967bd014bbf
http://security.debian.org/pool/updates/main/n/namazu2/namazu2_2.0.10-1woody3_hppa.deb
Size/MD5 checksum: 274078 aea2d08e925a2812a9eea146cc218385

Motorola 680x0 architecture:

http://security.debian.org/pool/updates/main/n/namazu2/libnmz3_2.0.10-1woody3_m68k.deb
Size/MD5 checksum: 100310 f7725c1c8fe62804a0fe39640ae9115b
http://security.debian.org/pool/updates/main/n/namazu2/libnmz3-dev_2.0.10-1woody3_m68k.deb
Size/MD5 checksum: 112702 f386f191a54c984b4267e358ab4be654
http://security.debian.org/pool/updates/main/n/namazu2/namazu2_2.0.10-1woody3_m68k.deb
Size/MD5 checksum: 261686 4b4a86ae53e1fdc86eb00d8cb16ed014

Big endian MIPS architecture:

http://security.debian.org/pool/updates/main/n/namazu2/libnmz3_2.0.10-1woody3_mips.deb
Size/MD5 checksum: 105814 b7c1fd14d53989ea2c90731b3f959799
http://security.debian.org/pool/updates/main/n/namazu2/libnmz3-dev_2.0.10-1woody3_mips.deb
Size/MD5 checksum: 131316 51889c3007f3ee41dea8fd7a3c3ec274
http://security.debian.org/pool/updates/main/n/namazu2/namazu2_2.0.10-1woody3_mips.deb
Size/MD5 checksum: 271730 c2477168d829487189dd6d8b1ce6ff67

Little endian MIPS architecture:

http://security.debian.org/pool/updates/main/n/namazu2/libnmz3_2.0.10-1woody3_mipsel.deb
Size/MD5 checksum: 106256 668f8ba923e5d08d5c87a4a5f74740a7
http://security.debian.org/pool/updates/main/n/namazu2/libnmz3-dev_2.0.10-1woody3_mipsel.deb
Size/MD5 checksum: 131404 9f3061b682909c5c5913e699adba864f
http://security.debian.org/pool/updates/main/n/namazu2/namazu2_2.0.10-1woody3_mipsel.deb
Size/MD5 checksum: 271884 a971c52803427dd47275884f7ba3f0d7

PowerPC architecture:

http://security.debian.org/pool/updates/main/n/namazu2/libnmz3_2.0.10-1woody3_powerpc.deb
Size/MD5 checksum: 108332 c07f0b023e9f181b967d3e7df0de14d3
http://security.debian.org/pool/updates/main/n/namazu2/libnmz3-dev_2.0.10-1woody3_powerpc.deb
Size/MD5 checksum: 130170 76acd402967c90fbc70f8ae896a4d04f
http://security.debian.org/pool/updates/main/n/namazu2/namazu2_2.0.10-1woody3_powerpc.deb
Size/MD5 checksum: 268662 76cab38114df6c859268dff7c88e19c7

IBM S/390 architecture:

http://security.debian.org/pool/updates/main/n/namazu2/libnmz3_2.0.10-1woody3_s390.deb
Size/MD5 checksum: 105502 db1d1c167293cbf66903e6dd02723c39
http://security.debian.org/pool/updates/main/n/namazu2/libnmz3-dev_2.0.10-1woody3_s390.deb
Size/MD5 checksum: 119206 384c7333574c8215efa3ccb5e6d38f28
http://security.debian.org/pool/updates/main/n/namazu2/namazu2_2.0.10-1woody3_s390.deb
Size/MD5 checksum: 267478 d7916aaa85f57b5ce58233b8ea1ca723

Sun Sparc architecture:

http://security.debian.org/pool/updates/main/n/namazu2/libnmz3_2.0.10-1woody3_sparc.deb
Size/MD5 checksum: 109758 5f5895fa7dc160572f03554e67511673
http://security.debian.org/pool/updates/main/n/namazu2/libnmz3-dev_2.0.10-1woody3_sparc.deb
Size/MD5 checksum: 124550 a6865ee432d9456e6f441f97e5630905
http://security.debian.org/pool/updates/main/n/namazu2/namazu2_2.0.10-1woody3_sparc.deb
Size/MD5 checksum: 266456 61629bca08f4d73a00998fe3071757d8


These files will probably be moved into the stable distribution on
its next update.

- - ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main For dpkg-ftp:
ftp://security.debian.org/debian-security dists/stable/updates/main Mailing list:
debian-security-announce@lists.debian.org
Package info: `apt-cache show ' and http://packages.debian.org/

- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFB3WGpW5ql+IAeqTIRAtjDAJ90QgBCF7s4fRRYmuPD9Gyl2KdP3QCfToUv
cF44iQ8O+DhmIVA1IwUrvD4=
=X4a3
- -----END PGP SIGNATURE-----


3.

- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - --------------------------------------------------------------------------
Debian Security Advisory DSA 626-1 security@debian.org
http://www.debian.org/security/ Martin Schulze
January 6th, 2005 http://www.debian.org/security/faq
- - --------------------------------------------------------------------------

Package : tiff
Vulnerability : unsanitised input
Problem-Type : remote
Debian-specific: no
CVE ID : CAN-2004-1183

Dmitry V. Levin discovered a buffer overflow in libtiff, the Tag Image File
Format library for processing TIFF graphics files. Upon reading a TIFF
file it is possible to crash the application, and maybe also to execute
arbitrary code.

For the stable distribution (woody) this problem has been fixed in version
3.5.5-6.woody5.

For the unstable distribution (sid) this problem has been fixed in version
3.6.1-5.

We recommend that you upgrade your libtiff package.


Upgrade Instructions
- - --------------------

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for sources.list
apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the footer to
the proper configuration.


Debian GNU/Linux 3.0 alias woody
- - --------------------------------

Source archives:

http://security.debian.org/pool/updates/main/t/tiff/tiff_3.5.5-6.woody5.dsc
Size/MD5 checksum: 637 30abd553c21fae8aa009f64c7d5c5fb7
http://security.debian.org/pool/updates/main/t/tiff/tiff_3.5.5-6.woody5.diff.gz
Size/MD5 checksum: 37066 4b47449e5c15f5981121d2bb29212fc8
http://security.debian.org/pool/updates/main/t/tiff/tiff_3.5.5.orig.tar.gz
Size/MD5 checksum: 693641 3b7199ba793dec6ca88f38bb0c8cc4d8

Alpha architecture:

http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.5.5-6.woody5_alpha.deb
Size/MD5 checksum: 141472 2e1246f3ef1525394c8c27b4cf5809f8
http://security.debian.org/pool/updates/main/t/tiff/libtiff3g_3.5.5-6.woody5_alpha.deb
Size/MD5 checksum: 105420 40ae38e633c220b2d578cc2d21791c11
http://security.debian.org/pool/updates/main/t/tiff/libtiff3g-dev_3.5.5-6.woody5_alpha.deb
Size/MD5 checksum: 423234 df5bcc13ca6f61c363a452f6752e3e34

ARM architecture:

http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.5.5-6.woody5_arm.deb
Size/MD5 checksum: 117008 f89f5d1545fa5823fdb465cedce10d14
http://security.debian.org/pool/updates/main/t/tiff/libtiff3g_3.5.5-6.woody5_arm.deb
Size/MD5 checksum: 90708 8d3b23cb9262f295a3c58963ffe33c93
http://security.debian.org/pool/updates/main/t/tiff/libtiff3g-dev_3.5.5-6.woody5_arm.deb
Size/MD5 checksum: 404256 9af23d64ad58077d4872661bbec90778

Intel IA-32 architecture:

http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.5.5-6.woody5_i386.deb
Size/MD5 checksum: 112096 7c6752fbe95e11b7c67e2bb950b04fa1
http://security.debian.org/pool/updates/main/t/tiff/libtiff3g_3.5.5-6.woody5_i386.deb
Size/MD5 checksum: 81286 c2e334518bcb0bfcf43b50490704b70c
http://security.debian.org/pool/updates/main/t/tiff/libtiff3g-dev_3.5.5-6.woody5_i386.deb
Size/MD5 checksum: 386974 75532bb3d037538763707553c306cdbe

Intel IA-64 architecture:

http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.5.5-6.woody5_ia64.deb
Size/MD5 checksum: 158802 7aba7243abdddfc1f1ecf59c60487fa2
http://security.debian.org/pool/updates/main/t/tiff/libtiff3g_3.5.5-6.woody5_ia64.deb
Size/MD5 checksum: 135648 fac88e6eb25d46a81270d4e1865d5db6
http://security.debian.org/pool/updates/main/t/tiff/libtiff3g-dev_3.5.5-6.woody5_ia64.deb
Size/MD5 checksum: 446518 c73d407fc0ba4afa22cf31fbe61639a7

HP Precision architecture:

http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.5.5-6.woody5_hppa.deb
Size/MD5 checksum: 128304 d2ee674c359384f1b53ddf9a198863f4
http://security.debian.org/pool/updates/main/t/tiff/libtiff3g_3.5.5-6.woody5_hppa.deb
Size/MD5 checksum: 107050 9ddc7d795cd6aaf87ab44d4adff17d00
http://security.debian.org/pool/updates/main/t/tiff/libtiff3g-dev_3.5.5-6.woody5_hppa.deb
Size/MD5 checksum: 420374 4c2afddeb88d91f66672b9419b14e69e

Motorola 680x0 architecture:

http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.5.5-6.woody5_m68k.deb
Size/MD5 checksum: 107306 4d9c44ec8da6315698acc948423380ee
http://security.debian.org/pool/updates/main/t/tiff/libtiff3g_3.5.5-6.woody5_m68k.deb
Size/MD5 checksum: 80036 9eaa32eb605078c0772deebd35f02b2e
http://security.debian.org/pool/updates/main/t/tiff/libtiff3g-dev_3.5.5-6.woody5_m68k.deb
Size/MD5 checksum: 380154 9b66e37ff70d402ae699d98d4fcefc39

Big endian MIPS architecture:

http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.5.5-6.woody5_mips.deb
Size/MD5 checksum: 124080 f058c706cd24c58aaf26c8a607b5970c
http://security.debian.org/pool/updates/main/t/tiff/libtiff3g_3.5.5-6.woody5_mips.deb
Size/MD5 checksum: 88076 3c84f8da76f29eb167ce233d579a7d46
http://security.debian.org/pool/updates/main/t/tiff/libtiff3g-dev_3.5.5-6.woody5_mips.deb
Size/MD5 checksum: 410788 d17ac2c5788fff8dbcf07bcde307a394

Little endian MIPS architecture:

http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.5.5-6.woody5_mipsel.deb
Size/MD5 checksum: 123676 0824a0dbca1c6e3d164d0f6f6895ca91
http://security.debian.org/pool/updates/main/t/tiff/libtiff3g_3.5.5-6.woody5_mipsel.deb
Size/MD5 checksum: 88440 107db6c5e16141137a3f4ca68583050e
http://security.debian.org/pool/updates/main/t/tiff/libtiff3g-dev_3.5.5-6.woody5_mipsel.deb
Size/MD5 checksum: 411380 0c4ecfc18395d97d1043a10e35f28bcb

PowerPC architecture:

http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.5.5-6.woody5_powerpc.deb
Size/MD5 checksum: 116074 b217403c7eb35fc693803eb435597977
http://security.debian.org/pool/updates/main/t/tiff/libtiff3g_3.5.5-6.woody5_powerpc.deb
Size/MD5 checksum: 89692 e8cb99fb55ede4b7d74f0f2d43efa1f7
http://security.debian.org/pool/updates/main/t/tiff/libtiff3g-dev_3.5.5-6.woody5_powerpc.deb
Size/MD5 checksum: 402422 7bc2f2471f7c1bb6c7b259cda3844359

IBM S/390 architecture:

http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.5.5-6.woody5_s390.deb
Size/MD5 checksum: 116944 654854ff01018ec39fbb459c2264dee2
http://security.debian.org/pool/updates/main/t/tiff/libtiff3g_3.5.5-6.woody5_s390.deb
Size/MD5 checksum: 92028 e3737813924d9c647e9b8ff9239dfdce
http://security.debian.org/pool/updates/main/t/tiff/libtiff3g-dev_3.5.5-6.woody5_s390.deb
Size/MD5 checksum: 395354 54a156b1986175fc95e747fd95e281aa

Sun Sparc architecture:

http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.5.5-6.woody5_sparc.deb
Size/MD5 checksum: 132914 677d66df3e0190f1a08e09093d136f66
http://security.debian.org/pool/updates/main/t/tiff/libtiff3g_3.5.5-6.woody5_sparc.deb
Size/MD5 checksum: 88834 24e946dce29d51cc920cb7237749e195
http://security.debian.org/pool/updates/main/t/tiff/libtiff3g-dev_3.5.5-6.woody5_sparc.deb
Size/MD5 checksum: 397052 367b1261c62cd443cbfa5114b05ad593


These files will probably be moved into the stable distribution on
its next update.

- - ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main For dpkg-ftp:
ftp://security.debian.org/debian-security dists/stable/updates/main Mailing list:
debian-security-announce@lists.debian.org
Package info: `apt-cache show ' and http://packages.debian.org/

- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFB3UhVW5ql+IAeqTIRAq4dAKCyrNZg85FFGDuRPItELT/rqfeuogCePtjC
fX34XkVe2J5lRCpNBBKTHA0=
=EC1N
- -----END PGP SIGNATURE-----


  • Accessibility |
  • Terms and conditions |
  • Privacy statement |
  • Data protection act |
  • Freedom of information |