Summary
[4.4.0-15.2]
- fix CVE-2025-8176: tiffdither and tiffmedian skip first line of input
images (RHEL-120239)
[4.4.0-15.1]
- fix CVE-2025-9900: buffer underflow crash in TIFFReadRGBAImageOriented
(RHEL-112545)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | libtiff | 0:4.4.0-15.el9_7.2 |
| Oracle Linux · 9 | libtiff-devel | 0:4.4.0-15.el9_7.2 |
| Oracle Linux · 9 | libtiff-tools | 0:4.4.0-15.el9_7.2 |
Vulnerabilities 2
-
High 8.8
Libtiff: libtiff write-what-where
A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted TIFF image file. By providing an abnormally large image height value in the file's metadata, an attacker can trick the …
-
Medium 5.3
LibTIFF tiffmedian.c get_histogram use after free
A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the function get_histogram of the file tools/tiffmedian.c. The manipulation leads to use after free. The attack needs to be approached locally. The …