Root has patched CVE-2017-17973 in the rootio-tiff package for Root:Debian:bookworm. Multiple fixed versions available.
{
"distro_version": "bookworm",
"source": "Root",
"distro": "debian"
}[
"4.5.0-6+deb12u2.root.io.4",
"4.5.0-6+deb12u2.root.io.5",
"4.5.0-6+deb12u2.root.io.6",
"4.5.0-6+deb12u3.root.io.7",
"4.5.0-6+deb12u3.root.io.8"
]
"https://api.root.io/external/osv/ROOT-OS-DEBIAN-bookworm-CVE-2017-17973.json"
"4.5.0-6+deb12u3"
true
"root.io.8"
5.0