[SECURITY] [DLA 912-1] tiff3 security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Package : tiff3
Version : 3.9.6-11+deb7u5
CVE ID : CVE-2017-7593 CVE-2017-7594 CVE-2017-7595
CVE-2017-7596 CVE-2017-7597 CVE-2017-7599
CVE-2017-7600 CVE-2017-7601
Debian Bug : 860000 860001 860003
Multiple security issues have been found in the tiff3 image library
that may allow remote attackers to cause a denial of service
(application crash), to obtain sensitive information from process
memory or possibly have unspecified other impact via a crafted image.
For Debian 7 "Wheezy", these problems have been fixed in version
3.9.6-11+deb7u5.
We recommend that you upgrade your tiff3 packages.
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----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=LNgT
-----END PGP SIGNATURE-----
Reply to: