Update to upstream version 0.2.8 Update idna dependency to a version not affected by CVE-2024-12224
Comment
fix CVE-2025-9165: memory leak in tiffcmp (rhbz#2389608)
fix CVE-2025-8534: null pointer dereference in tiff2ps (rhbz#2386494) fix CVE-2024-13978: null pointer dereference in tiff2pdf (rhbz#2386201)
Several security issues were fixed in the Linux kernel.
Nikita Skorovoda discovered that Node cipher-base, an abstract base class for crypto-streams, performed incomplete type checks. For the oldstable distribution (bookworm), this problem has been fixed