• [SECURITY] [DSA 4869-1] tiff security update

    From Moritz Muehlenhoff@21:1/5 to All on Fri Mar 12 22:50:01 2021
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-4869-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff
    March 12, 2021 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : tiff
    CVE ID : CVE-2020-35523 CVE-2020-35524

    Two vulnerabilities have been discovered in the libtiff library
    and the included tools, which may result in denial of service or the
    execution of arbitrary code if malformed image files are processed.

    For the stable distribution (buster), these problems have been fixed in
    version 4.1.0+git191117-2~deb10u2.

    We recommend that you upgrade your tiff packages.

    For the detailed security status of tiff please refer to
    its security tracker page at:
    https://security-tracker.debian.org/tracker/tiff

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org
    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmBL3p4ACgkQEMKTtsN8 Tjb83RAAsLQG7a9SCrmbsAhFrRZTH6CMG8GEKx5vRqYTQF2cpH1dtP9keaT121jX ohu1k8C4akWp9NTITVeGzpKPyu5F+GOQTKT9KxUIgHhtO6AIuYqYQCi/GQSkitWx 5MXCawve17g8ND+aomhPafV3LiIqHH2jt/iig0Z2ld1vbtjuUY3XgtN2B++P/XJ2 N80JmpRqjyepdorrhE1Wj7N6IqV9SDRa+EwUTo3l6/vOngIuWY9D8gP2kJ2OWtg5 k/VDW6gLn+RP/DwbmYEdu/RZmyRvpFJrIeIeDGm9U9ivesfEFYake6Dk1DEJJR8p gcWiWhcN3zlP588yfCCd9ZN8WimUVLUWSlckJst42J5jBEZinrcS0IKkj+OmflfP ldl3zjnIJ4+CO7O7ooSMqjz3oH90l09yAwiOHMBLYgP4H4gt8BT3UOReDu6X4Gqk Du0zESCC7WhynVLg7FydTorV9xzX/GOqPIp453EqafTMDrfUOTCBpXtBZ7zsbrCd H1Qtj1QszXW5u7/i1GsfrK1EEIko5p4/GJBynHbJoifcMlhZ7fWfqYIZpxIJVs0I al2ym94BY+FubOIqWWZKSEFbqycPyl91ZbIls8e7fTtkX4WYz8U+YedvQ1wI2SCQ JzKTC8tkPlWMN3kv8cl3S+4lLs+tkCpE1XwySvN93e8Uv+eWLVI=
    =hcSA
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)