p PatchFirst

SUSE-SU-2025:0753-1

SUSE-SU-2025:0753-1 · Security update for tiff

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for tiff fixes the following issues: - CVE-2023-25435: Heap-buffer-overflow in extractContigSamplesShifted8bits() in tiffcrop.c (bsc#1212607). - CVE-2023-52356: Segment fault in libtiff in TIFFReadRGBATileExt() leading to denial of service (bsc#1219213). Other bugfixes: - Fixed tiff build issue on s390x as test 12 test_directory fails (bsc#1236834).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • tiff SUSE:Linux Enterprise Module for Basesystem 15 SP6

    Affected ranges
    • ECOSYSTEM: < 4.7.0-150600.3.8.1

    Update to 4.7.0-150600.3.8.1

  • tiff SUSE:Linux Enterprise Module for Package Hub 15 SP6

    Affected ranges
    • ECOSYSTEM: < 4.7.0-150600.3.8.1

    Update to 4.7.0-150600.3.8.1

  • tiff openSUSE:Leap 15.6

    Affected ranges
    • ECOSYSTEM: < 4.7.0-150600.3.8.1

    Update to 4.7.0-150600.3.8.1

Original sources

Check your server →