bugtraq - [SECURITY] [DSA 4608-1] tiff security update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20200121214557.bicpj65chmntsxmx@seger.debian.org>
Date: Tue, 21 Jan 2020 21:45:57 +0000
From: Moritz Muehlenhoff <jmm@...ian.org>
To: bugtraq@...urityfocus.com
Subject: [SECURITY] [DSA 4608-1] tiff security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4608-1                   security@...ian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
January 21, 2020                      https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : tiff
CVE ID         : CVE-2019-14973 CVE-2019-17546

Multiple integer overflows have been discovered in the libtiff library
and the included tools.

For the stable distribution (buster), these problems have been fixed in
version 4.1.0+git191117-2~deb10u1.

We recommend that you upgrade your tiff packages.

For the detailed security status of tiff please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/tiff

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@...ts.debian.org
-----BEGIN PGP SIGNATURE-----
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=BlkU
-----END PGP SIGNATURE-----