tocsin

Debian/tiff: critical 9.8

tools/tiff2pdf.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers in t2p_process_jpeg_strip(). Reported as MSVR 35098, aka "t2p_process_jpeg_strip heap-buffer-overflo

Action: Upgrade tiff to 4.0.7-1 or later.

Affected

introducedfixedlast affected
04.0.7-1-

Fixed versions

4.0.7-1

Sources

published · modified · JSON