I have confirmed the bug and found a correct fix to it from upstream's CVS. I have locally built tiff-3.9.4-5+squeeze3 and confirmed that it can decode all the images attached to this bug report. I have coordinated upload with the security team and will be uploading this morning. If you'd like, I can make the source packages available to you immediately (or as soon as I see your message) for you to build yourself. Alternatively, you can downgrade to tiff-3.9.4-5 and wait for tiff-3.9.4-5+squeeze3 to appear in security updates to upgrade again. Let me know which way you'd like to go.
-- Jay Berkenbilt <q...@debian.org> -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
