Summary
[4.0.9-3]
- Fix CVE-2018-5784 CVE-2018-7456 CVE-2017-9935 CVE-2017-9935
- Fix CVE-2017-18013 CVE-2018-8905 CVE-2018-10963 CVE-2018-17100
- Fix CVE-2018-18557 CVE-2018-18661 (RHBZ #1602597) CVE-2018-12900
- Fix CVE-2019-14973 CVE-2019-17546 CVE-2020-35521 CVE-2020-35522
- Fix CVE-2020-35523 CVE-2020-35524 CVE-2020-19131 CVE-2022-0561
- Fix CVE-2022-0562 CVE-2022-22844 CVE-2022-0865 CVE-2022-0891
- Fix CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1355
- Fix CVE-2022-2056 CVE-2022-2057 CVE-2022-2058 CVE-2022-2867
- Fix CVE-2022-2868 CVE-2022-2519 CVE-2022-2520 CVE-2022-2521
- Fix CVE-2022-2953 CVE-2022-3597 CVE-2022-3626 CVE-2022-3627
- Fix CVE-2022-3970 CVE-2022-48281 CVE-2023-0800 CVE-2023-0801
- Fix CVE-2023-0802 CVE-2023-0803 CVE-2022-3599 CVE-2018-15209
- Fix CVE-2023-25433 CVE-2023-52356 CVE-2023-6228 CVE-2017-17095
- Fix CVE-2024-7006
- Fix CVE-2025-9900
Resolves: RHEL-112538
- Fix CVE-2025-8176
Resolves: RHEL-120235
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | mingw32-libtiff | 0:4.0.9-3.el8_10 |
| Oracle Linux · 8 | mingw32-libtiff-static | 0:4.0.9-3.el8_10 |
| Oracle Linux · 8 | mingw64-libtiff | 0:4.0.9-3.el8_10 |
| Oracle Linux · 8 | mingw64-libtiff-static | 0:4.0.9-3.el8_10 |
Vulnerabilities 2
-
High 8.8
Libtiff: libtiff write-what-where
A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted TIFF image file. By providing an abnormally large image height value in the file's metadata, an attacker can trick the …
-
Medium 5.3
LibTIFF tiffmedian.c get_histogram use after free
A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the function get_histogram of the file tools/tiffmedian.c. The manipulation leads to use after free. The attack needs to be approached locally. The …