lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-ID: <20200121214557.bicpj65chmntsxmx@seger.debian.org> Date: Tue, 21 Jan 2020 21:45:57 +0000 From: Moritz Muehlenhoff <jmm@...ian.org> To: bugtraq@...urityfocus.com Subject: [SECURITY] [DSA 4608-1] tiff security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4608-1 security@...ian.org https://www.debian.org/security/ Moritz Muehlenhoff January 21, 2020 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : tiff CVE ID : CVE-2019-14973 CVE-2019-17546 Multiple integer overflows have been discovered in the libtiff library and the included tools. For the stable distribution (buster), these problems have been fixed in version 4.1.0+git191117-2~deb10u1. We recommend that you upgrade your tiff packages. For the detailed security status of tiff please refer to its security tracker page at: https://security-tracker.debian.org/tracker/tiff Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@...ts.debian.org -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAl4ncLgACgkQEMKTtsN8 TjaKKA//TMwWU6ei8NAuEcl1bc8Yt1tCHw7ZXqgxA2miqR7iIyuV04zU4FWDJO40 RETdZqmI4zhIAK86MNJVZADTR/cc3/pZOxc6vTd2A1imqnEOjFfc96yLYp8ZG4OA +H5Seag0Vs5l9QR8992wIVPSkfXNR3idIgjkW99XP2ymSycCHbdjfn+G167U5sIN 7LoAuCMvxwC6CFW43OXk0jAvEERb9TLJYN1rT1uhBtfAgynNO82+laJOfzJeq7Hr 1AYsp7cOSrzLBR1Xt0nbgWfLE+7PX2+gQmFE2Ls+yJwmVZXBGwuesUitclipPyb8 6T1AGG0Jftz2tQuENUl0DVoi0RhUR05seddJLIIEz1R/B7TaApkuX3X9SmowgJED g++TKls0alJL1VPjH7vTEWM2whkHaWQqibLDv0faBEnSawWPgRxveUWuoCsNzaxz uYjhsMoCB++lRZpxzWQ5wV7UQfXy7II565dxjcyQHXZV3U7248A9zfPtI+33qLqV MV1PZiBZzz/ip3rFMWiKiVETT/DspCYzH1TdFfsNEBILMfhlJfYO0Tw+KvdkhgwU B9VxMSQoUw7V25z/pbfVC1Rtvh6tqrmeH73ulyDF8VPJl47LBnAF462IUaFpZS+S hj7dnKe9Kpu1gfQNkpq10IeVDitLbPO+H6rw8dAfqOMkKYSjm3o= =BlkU -----END PGP SIGNATURE-----
Powered by blists - more mailing lists