tocsin

Debian/tiff: critical 9.8

tif_pixarlog.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers. Reported as MSVR 35094, aka "PixarLog horizontalDifference heap-buffer-overflow."

Action: Upgrade tiff to 4.0.7-1 or later.

Affected

introducedfixedlast affected
04.0.7-1-

Fixed versions

4.0.7-1

Sources

published · modified · JSON