it-securitynotifies AT lists.piratenpartei.de
Betreff: Sicherheitsankündigungen
Listenarchiv
- From: Moritz Muehlenhoff <jmm AT debian.org>
- To: debian-security-announce AT lists.debian.org
- Subject: [IT-SecNots] [SECURITY] [DSA 4869-1] tiff security update
- Date: Fri, 12 Mar 2021 21:40:55 +0000
- List-archive: https://lists.debian.org/msgid-search/20210312214055.GB5462 AT seger.debian.org
- List-id: <debian-security-announce.lists.debian.org>
- List-url: <http://lists.debian.org/debian-security-announce/>
- Old-dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; s=smtpauto.seger; h=Content-Type:MIME-Version:Message-ID:Subject:To:From: Date:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description: In-Reply-To:References; bh=SBJoYP4KNQFvuSO54dl5DekeVpVzWB1aPgUkg1SA/+U=; b=ju PyzRXpIKOpTbcqFas+EfOHaTvUakKq6Qd+/L1MB7KACXfLjGXLp/0UkfRgB4Xu1ls3dyuHcCr0Z5/ SItQQ4Lu5wo8ereAjFH5CwdUvUDEv6sLmr2G7qai0A957Kwi0FtXkpORTxHZpf+vwUgWUAwworcYw HhoXLc0OhGNBhRY5WGjpy1YYZp4s9xgxxToFFSizP8j8Ftn7lLJgSlsSCGo9OuFYxrRMICVhqCdWD 4iPKHoDUOjsAbduT8DuiUm/g04xtK8h9E/DHz7yF24S6Cv8m0Jw565Yg5cbGxaPj6IehWPh89L2jg S34LueVYMbkwP+T7DGsCwtxtTa/k9Qxw==;
- Old-return-path: <jmm AT seger.debian.org>
- Priority: urgent
- Resent-date: Fri, 12 Mar 2021 21:41:16 +0000 (UTC)
- Resent-from: debian-security-announce AT lists.debian.org
- Resent-message-id: <e_rr1_ycKUH.A.mHB.8_9SgB@bendel>
- Resent-sender: debian-security-announce-request AT lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-4869-1 security AT debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
March 12, 2021 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : tiff
CVE ID : CVE-2020-35523 CVE-2020-35524
Two vulnerabilities have been discovered in the libtiff library
and the included tools, which may result in denial of service or the
execution of arbitrary code if malformed image files are processed.
For the stable distribution (buster), these problems have been fixed in
version 4.1.0+git191117-2~deb10u2.
We recommend that you upgrade your tiff packages.
For the detailed security status of tiff please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/tiff
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----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=hcSA
-----END PGP SIGNATURE-----
- [IT-SecNots] [SECURITY] [DSA 4869-1] tiff security update, Moritz Muehlenhoff, 12.03.2021
Archiv bereitgestellt durch MHonArc 2.6.24.