A tiff security update has been released for Debian GNU/Linux 8 and 9 Extended LTS.

ELA-806-1 tiff security update

Package : tiff
Version : 4.0.3-12.3+deb8u15 (jessie), 4.0.8-2+deb9u10 (stretch)

Related CVEs :
CVE-2023-0795
CVE-2023-0796
CVE-2023-0797
CVE-2023-0798
CVE-2023-0799
CVE-2023-0800
CVE-2023-0801
CVE-2023-0802
CVE-2023-0803
CVE-2023-0804

Several flaws were found in tiffcrop, a program distributed by tiff, a library
and tools providing support for the Tag Image File Format (TIFF). A specially
crafted tiff file can lead to an out-of-bounds write or read resulting in a
denial of service.

  ELA-806-1 tiff security update