p PatchFirst

SUSE-SU-2025:02770-1

SUSE-SU-2025:02770-1 · Security update for tiff

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for tiff fixes the following issues: - Updated TIFFMergeFieldInfo() with read_count=write_count=0 for FIELD_IGNORE (bsc#1243503) - CVE-2025-8176: Fixed heap use-after-free in tools/tiffmedian.c (bsc#1247108) - CVE-2025-8177: Fixed possible buffer overflow in tools/thumbnail.c:setrow() when processing malformed TIFF files (bsc#1247106) - Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4 - Add %check section - Remove Group: declarations, no longer used

Fix available

Published
Updated

Stack: system

Affected products and versions

  • tiff SUSE:Linux Enterprise Module for Basesystem 15 SP6

    Affected ranges
    • ECOSYSTEM: < 4.7.0-150600.3.13.1

    Update to 4.7.0-150600.3.13.1

  • tiff SUSE:Linux Enterprise Module for Basesystem 15 SP7

    Affected ranges
    • ECOSYSTEM: < 4.7.0-150600.3.13.1

    Update to 4.7.0-150600.3.13.1

  • tiff SUSE:Linux Enterprise Module for Package Hub 15 SP6

    Affected ranges
    • ECOSYSTEM: < 4.7.0-150600.3.13.1

    Update to 4.7.0-150600.3.13.1

  • tiff SUSE:Linux Enterprise Module for Package Hub 15 SP7

    Affected ranges
    • ECOSYSTEM: < 4.7.0-150600.3.13.1

    Update to 4.7.0-150600.3.13.1

  • tiff openSUSE:Leap 15.6

    Affected ranges
    • ECOSYSTEM: < 4.7.0-150600.3.13.1

    Update to 4.7.0-150600.3.13.1

Original sources

Check your server →