-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4608-1 security@xxxxxxxxxx https://www.debian.org/security/ Moritz Muehlenhoff January 21, 2020 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : tiff CVE ID : CVE-2019-14973 CVE-2019-17546 Multiple integer overflows have been discovered in the libtiff library and the included tools. For the stable distribution (buster), these problems have been fixed in version 4.1.0+git191117-2~deb10u1. We recommend that you upgrade your tiff packages. For the detailed security status of tiff please refer to its security tracker page at: https://security-tracker.debian.org/tracker/tiff Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@xxxxxxxxxxxxxxxx -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAl4ncLgACgkQEMKTtsN8 TjaKKA//TMwWU6ei8NAuEcl1bc8Yt1tCHw7ZXqgxA2miqR7iIyuV04zU4FWDJO40 RETdZqmI4zhIAK86MNJVZADTR/cc3/pZOxc6vTd2A1imqnEOjFfc96yLYp8ZG4OA +H5Seag0Vs5l9QR8992wIVPSkfXNR3idIgjkW99XP2ymSycCHbdjfn+G167U5sIN 7LoAuCMvxwC6CFW43OXk0jAvEERb9TLJYN1rT1uhBtfAgynNO82+laJOfzJeq7Hr 1AYsp7cOSrzLBR1Xt0nbgWfLE+7PX2+gQmFE2Ls+yJwmVZXBGwuesUitclipPyb8 6T1AGG0Jftz2tQuENUl0DVoi0RhUR05seddJLIIEz1R/B7TaApkuX3X9SmowgJED g++TKls0alJL1VPjH7vTEWM2whkHaWQqibLDv0faBEnSawWPgRxveUWuoCsNzaxz uYjhsMoCB++lRZpxzWQ5wV7UQfXy7II565dxjcyQHXZV3U7248A9zfPtI+33qLqV MV1PZiBZzz/ip3rFMWiKiVETT/DspCYzH1TdFfsNEBILMfhlJfYO0Tw+KvdkhgwU B9VxMSQoUw7V25z/pbfVC1Rtvh6tqrmeH73ulyDF8VPJl47LBnAF462IUaFpZS+S hj7dnKe9Kpu1gfQNkpq10IeVDitLbPO+H6rw8dAfqOMkKYSjm3o= =BlkU -----END PGP SIGNATURE-----