Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 9: libtiff Important Memory Corruption MGASA-2025-0252

mageia
Calendar Grey October 31, 2025
Dist Mageia Esm H88
Updated libtiff packages in Mageia address critical issues and enhance system integrity.
MGASA-2025-0252 - Updated libtiff packages fix security vulnerabilities

Summary

Description: LibTIFF fax2ps tiff2pdf.c t2p_read_tiff_init null pointer dereference. (CVE-2024-13978) LibTIFF tiffmedian.c get_histogram use after free. (CVE-2025-8176) LibTIFF thumbnail.c setrow buffer overflow. (CVE-2025-8177) libtiff tiff2ps tiff2ps.c PS_Lvl2page null pointer dereference. (CVE-2025-8534) LibTIFF tiffcrop tiffcrop.c main memory corruption. (CVE-2025-8961) LibTIFF tiffcmp tiffcmp.c InitCCITTFax3 memory leak. (CVE-2025-9165) Libtiff: libtiff write-what-where. (CVE-2025-9900)

References

- https://bugs.mageia.org/show_bug.cgi?id=34704

- https://lists.debian.org/debian-security-announce/2025/msg00189.html

- https://www.cve.org/CVERecord?id=CVE-2024-13978

- https://www.cve.org/CVERecord?id=CVE-2025-8176

- https://www.cve.org/CVERecord?id=CVE-2025-8177

- https://www.cve.org/CVERecord?id=CVE-2025-8534

- https://www.cve.org/CVERecord?id=CVE-2025-8961

- https://www.cve.org/CVERecord?id=CVE-2025-9165

- https://www.cve.org/CVERecord?id=CVE-2025-9900

Topics%20covered

Topics Covered

security advisory buffer overflow memory corruption important libtiff Mageia

Resolution

SRPMS

- 9/core/libtiff-4.5.1-1.6.mga9

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 31 Oct 2025
URL: https://advisories.mageia.org/MGASA-2025-0252.html
Type: security
CVE: CVE-2024-13978, CVE-2025-8176, CVE-2025-8177, CVE-2025-8534, CVE-2025-8961, CVE-2025-9165, CVE-2025-9900

Topics%20covered

Topics Covered

security advisory buffer overflow memory corruption important libtiff Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here