• [SECURITY] [DSA 4608-1] tiff security update

    From Moritz Muehlenhoff@1:229/2 to All on Tue Jan 21 22:50:04 2020
    From: [email protected]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-4608-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 21, 2020 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : tiff
    CVE ID : CVE-2019-14973 CVE-2019-17546

    Multiple integer overflows have been discovered in the libtiff library
    and the included tools.

    For the stable distribution (buster), these problems have been fixed in
    version 4.1.0+git191117-2~deb10u1.

    We recommend that you upgrade your tiff packages.

    For the detailed security status of tiff please refer to
    its security tracker page at:
    https://security-tracker.debian.org/tracker/tiff

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAl4ncLgACgkQEMKTtsN8 TjaKKA//TMwWU6ei8NAuEcl1bc8Yt1tCHw7ZXqgxA2miqR7iIyuV04zU4FWDJO40 RETdZqmI4zhIAK86MNJVZADTR/cc3/pZOxc6vTd2A1imqnEOjFfc96yLYp8ZG4OA +H5Seag0Vs5l9QR8992wIVPSkfXNR3idIgjkW99XP2ymSycCHbdjfn+G167U5sIN 7LoAuCMvxwC6CFW43OXk0jAvEERb9TLJYN1rT1uhBtfAgynNO82+laJOfzJeq7Hr 1AYsp7cOSrzLBR1Xt0nbgWfLE+7PX2+gQmFE2Ls+yJwmVZXBGwuesUitclipPyb8 6T1AGG0Jftz2tQuENUl0DVoi0RhUR05seddJLIIEz1R/B7TaApkuX3X9SmowgJED g++TKls0alJL1VPjH7vTEWM2whkHaWQqibLDv0faBEnSawWPgRxveUWuoCsNzaxz uYjhsMoCB++lRZpxzWQ5wV7UQfXy7II565dxjcyQHXZV3U7248A9zfPtI+33qLqV MV1PZiBZzz/ip3rFMWiKiVETT/DspCYzH1TdFfsNEBILMfhlJfYO0Tw+KvdkhgwU B9VxMSQoUw7V25z/pbfVC1Rtvh6tqrmeH73ulyDF8VPJl47LBnAF462IUaFpZS+S hj7dnKe9Kpu1gfQNkpq10IeVDitLbPO+H6rw8dAfqOMkKYSjm3o=
    =BlkU
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)