Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 41 Update: Critical Null Pointer Dereference Patch for libtiff

fedora
Calendar Grey August 27, 2025
Dist Fedora Esm H88
Addresses significant null pointer dereference vulnerabilities in libtiff for Fedora 41. Essential software updates have now been released.
fix CVE-2025-8534: null pointer dereference in tiff2ps (rhbz#2386494) fix CVE-2024-13978: null pointer dereference in tiff2pdf (rhbz#2386201)

Summary

The libtiff package contains a library of functions for manipulating

TIFF (Tagged Image File Format) image format files. TIFF is a widely

used file format for bitmapped images. TIFF files usually end in the

.tif extension and they are often quite large.

The libtiff package should be installed if you need to manipulate TIFF

format image files.

Update Information:

fix CVE-2025-8534: null pointer dereference in tiff2ps (rhbz#2386494) fix CVE-2024-13978: null pointer dereference in tiff2pdf (rhbz#2386201)

Change Log

* Tue Aug 12 2025 Michal Hlavinka - 4.6.0-6.2 - fix CVE-2025-8534: null pointer dereference in tiff2ps (rhbz#2386494) * Tue Aug 12 2025 Michal Hlavinka - 4.6.0-6.1 - fix CVE-2024-13978: null pointer dereference in tiff2pdf (rhbz#2386201)

References


[ 1 ] Bug #2386201 - CVE-2024-13978 libtiff: LibTIFF Null Pointer Dereference [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2386201 [ 2 ] Bug #2386494 - CVE-2025-8534 libtiff: Libtiff Null Pointer Dereference Vulnerability [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2386494

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-5869edf3de' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: libtiff
Product: Fedora 41
Version: 4.6.0
Release: 6.fc41.2
Summary: Library of functions for manipulating TIFF format image files

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here