Bug#280373: kfax libtiff vulnerabilities

[Andreas Mueller <amu@tr.debian.net>]

Package: kfax
Version: 4:3.3.1-1
Severity: normal


-- cut from the inoffical KDE Security Advisory --

kfax, a small utility for displaying fax files, contains
for historic reasons a private copy of libtiff.
Therefore it is vulnerable to these issues as well.

As a workaround, you can remove the kfax binary and the
kfax_multipage KPart from your system to be on the safe
side. A new package is now on ktown.

This issue is already sort-of public because Red Hat already announced
it as part of their kdegraphics update.

Cheers,
amu