Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE Linux Micro: Important Memory Leak Solution for CVE-2025-8961 Advisory

suse
Calendar Grey November 27, 2025
Dist Suse Esm H88
Critical update for tiff on SUSE Linux Micro addressing seven security issues. Immediate action recommended.
* bsc#1243503 * bsc#1247106 * bsc#1247108 * bsc#1247581 * bsc#1247582

Summary

## This update for tiff fixes the following issues: tiff was updated to 4.7.1: * Software configuration changes: * Define HAVE_JPEGTURBO_DUAL_MODE_8_12 and LERC_STATIC in tif_config.h. * CMake: define WORDS_BIGENDIAN via tif_config.h * doc/CMakeLists.txt: remove useless cmake_minimum_required() * CMake: fix build with LLVM/Clang 17 (fixes issue #651) * CMake: set CMP0074 new policy * Set LINKER_LANGUAGE for C targets with C deps * Export tiffxx cmake target (fixes issue #674) * autogen.sh: Enable verbose wget. * configure.ac: Syntax updates for Autoconf 2.71 * autogen.sh: Re-implement based on autoreconf. Failure to update config.guess/config.sub does not return error (fixes issue #672) * CMake: fix CMake 4.0 warning when minimum required version is < 3.10.

Topics%20covered

Topics Covered

security advisory denial of service important memory leak TIFF SUSE Linux Micro

References

* bsc#1243503

* bsc#1247106

* bsc#1247108

* bsc#1247581

* bsc#1247582

* bsc#1248117

* bsc#1248330

* bsc#1250413

Cross-

* CVE-2024-13978

* CVE-2025-8176

* CVE-2025-8177

* CVE-2025-8534

* CVE-2025-8961

* CVE-2025-9165

* CVE-2025-9900

CVSS scores:

* CVE-2024-13978 ( SUSE ): 5.7

CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

* CVE-2024-13978 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

* CVE-2024-13978 ( NVD ): 2.0

CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

* CVE-2024-13978 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

* CVE-2025-8176 ( SUSE ): 8.4

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:21032-1
Release Date: 2025-11-19T10:29:41Z
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service important memory leak TIFF SUSE Linux Micro

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here