Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Debian 10 Buster: DLA-3333-1 Critical: TIFF Denial of Service

debian lts
Calendar Grey February 21, 2023
Dist Debian Esm H88
Urgent security patch for Debian LTS targeting TIFF vulnerabilities that could cause service interruptions. Please ensure your tiff packages are upgraded.
Several flaws were found in tiffcrop, a program distributed by tiff, a library and tools providing support for the Tag Image File Format (TIFF)

Summary

We recommend that you upgrade your tiff packages.

For the detailed security status of tiff please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/tiff

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

-------------------------------------------------------------------------Package: tiff
Version: 4.1.0+git191117-2~deb10u7
CVE ID: CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
Debian Bug: 1031632

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here