• [SECURITY] [DSA 3273-1] tiff security update

    From Moritz Muehlenhoff@1:229/2 to All on Mon May 25 23:00:02 2015
    From: [email protected]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-3273-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff
    May 25, 2015 http://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : tiff
    CVE ID : CVE-2014-8127 CVE-2014-8128 CVE-2014-8129 CVE-2014-9330
    CVE-2014-9655

    William Robinet and Michal Zalewski discovered multiple vulnerabilities
    in the TIFF library and its tools, which may result in denial of
    service or the execution of arbitrary code if a malformed TIFF file
    is processed.

    For the oldstable distribution (wheezy), these problems have been fixed
    in version 4.0.2-6+deb7u4.

    For the stable distribution (jessie), these problems have been fixed
    before the initial release.

    We recommend that you upgrade your tiff packages.

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1

    iQIcBAEBAgAGBQJVY4vvAAoJEBDCk7bDfE42W7gQAJpNQ3BZq5QS0whHxM5liVPY M2aW7CKGqjmMyM3RY8QJ7PBhAvJ0odHnLR1X2VzVQ9Ol4bl6KJl8VfXEB9ReZLKI JuGUkqklUl5Zqvzgc1NXxy7TnQbh6mrvewUNdXJ2NAcuHW4PQPqXv9ZH6U3qrcTQ 1r0uGwOZgnZK8mrM1ntZbxRQ8zSKcmqOT3mTCUKwmP52fOK5JLL+W8jRXYVhOV18 ez8Ye99LmWmnAhuAo+KThQpKK6cLySys/v+uw5gZqKlSaMA3pm4Jq/AqtZoJ6PEv QrJp/mCQLuWHDthjzFuSBfP0tLMzLwpoR2nWsfbbPpx5uaF8ljimsgtGZUxixNuD T4gLvCg1noQJpiSEGGjUUQhss5VxFHvq0FxmyXeMK0Ywb0OVqGi4FgKAB1MJ7mj8 5bQ/5KPvhmpOs2CdMqSpB2FFPv6a1ZMqAf5F7N9ZljO6+ZPiDxPv4bqrjq5xF9iZ AccxI7gAb84V+BjLJk8b1+HOMIOWygweu7wvesJrhMtdOanGDBwflQuPOLX++Zmn YGlZ82YzDmkyV2Fzo/ciI7u5cK5MBT5SpmMtMlZRXxPE51Sykr88Tb42q4Dv16Of KMTvd6rPyUr1GGQVv21OlW9vdrkvQyjQ073jN7YoI8lTIcS/9QS6x0S2Jt098Jl9 p+yeextQMT0QsOAQdCfA
    =lqyL
    -----END PGP SIGNATURE-----


    --
    To UNSUBSCRIBE, email to [email protected]
    with a subject of "unsubscribe". Trouble? Contact [email protected] Archive: https://lists.debian.org/[email protected]

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)