DSA-4100: -1 tiff -- security update

Published Jan 27, 2018

Updated

Multiple vulnerabilities have been discovered in the libtiff library and the included tools, which may result in denial of service or the execution of arbitrary code.

Affected Software

2 affected components

debian/tiff

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade tiff to a version that resolves this vulnerability.
Patch DSA-4100-1

Event History

Jan 27, 2018

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

What impact could these vulnerabilities have if exploited?

The reported vulnerabilities may allow denial of service or execution of arbitrary code.

Which component should be reviewed for exposure?

The affected software is Debian's tiff package, including the libtiff library and its included tools.

Which vulnerability identifiers are associated with this update?

The update references CVE-2017-9935, CVE-2017-11335, and CVE-2017-12944.