p PatchFirst

SUSE-SU-2025:03345-1

SUSE-SU-2025:03345-1 · Security update for tiff

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for tiff fixes the following issues: - CVE-2025-9165: local execution manipulation leading to memory leak (bsc#1248330). - CVE-2025-8534: null pointer dereference in function PS_Lvl2page (bsc#1247582). - CVE-2025-8961: segmentation fault via main function of tiffcrop utility (bsc#1248117).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • tiff SUSE:Linux Enterprise Micro 5.3

    Affected ranges
    • ECOSYSTEM: < 4.0.9-150000.45.55.1

    Update to 4.0.9-150000.45.55.1

  • tiff SUSE:Linux Enterprise Micro 5.4

    Affected ranges
    • ECOSYSTEM: < 4.0.9-150000.45.55.1

    Update to 4.0.9-150000.45.55.1

  • tiff SUSE:Linux Enterprise Micro 5.5

    Affected ranges
    • ECOSYSTEM: < 4.0.9-150000.45.55.1

    Update to 4.0.9-150000.45.55.1

  • tiff SUSE:Linux Enterprise Module for Basesystem 15 SP6

    Affected ranges
    • ECOSYSTEM: < 4.0.9-150000.45.55.1

    Update to 4.0.9-150000.45.55.1

  • tiff SUSE:Linux Enterprise Module for Basesystem 15 SP7

    Affected ranges
    • ECOSYSTEM: < 4.0.9-150000.45.55.1

    Update to 4.0.9-150000.45.55.1

  • tiff SUSE:Linux Enterprise Micro 5.2

    Affected ranges
    • ECOSYSTEM: < 4.0.9-150000.45.55.1

    Update to 4.0.9-150000.45.55.1

Original sources

Check your server →