p PatchFirst

SUSE-SU-2025:03348-1

SUSE-SU-2025:03348-1 · Security update for tiff

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for tiff fixes the following issues: - CVE-2025-9165: local execution manipulation leading to memory leak (bsc#1248330). - CVE-2024-13978: null pointer dereference in component fax2ps (bsc#1247581) - CVE-2025-8534: null pointer dereference in function PS_Lvl2page (bsc#1247582). - CVE-2025-8961: segmentation fault via main function of tiffcrop utility (bsc#1248117).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • tiff SUSE:Linux Enterprise Module for Basesystem 15 SP6

    Affected ranges
    • ECOSYSTEM: < 4.7.0-150600.3.18.1

    Update to 4.7.0-150600.3.18.1

  • tiff SUSE:Linux Enterprise Module for Basesystem 15 SP7

    Affected ranges
    • ECOSYSTEM: < 4.7.0-150600.3.18.1

    Update to 4.7.0-150600.3.18.1

  • tiff SUSE:Linux Enterprise Module for Package Hub 15 SP6

    Affected ranges
    • ECOSYSTEM: < 4.7.0-150600.3.18.1

    Update to 4.7.0-150600.3.18.1

  • tiff SUSE:Linux Enterprise Module for Package Hub 15 SP7

    Affected ranges
    • ECOSYSTEM: < 4.7.0-150600.3.18.1

    Update to 4.7.0-150600.3.18.1

  • tiff openSUSE:Leap 15.6

    Affected ranges
    • ECOSYSTEM: < 4.7.0-150600.3.18.1

    Update to 4.7.0-150600.3.18.1

Original sources

Check your server →