SUSE-SU-2026:1408-1

MEDIUM6.6

Security update for tiff

Published Apr 16, 2026

Modified 3 months ago

Fix available

Details

Description of the patch:

This update for tiff fixes the following issues:

CVE-2025-61143: Fixed NULL pointer dereference (bsc#1258798).
CVE-2025-61144: Fixed stack overflow in readSeparateStripsIntoBuffer() (bsc#1258801).

Affected Packages

libtiff5

SUSE Linux Enterprise Desktop 15 SP7SUSE Linux Enterprise High Performance Computing 15 SP7SUSE Linux Enterprise Micro 5.2SUSE Linux Enterprise Micro 5.3SUSE Linux Enterprise Micro 5.4

Fixed in:

4.0.9-150000.45.63.1

libtiff5-32bit

SUSE Linux Enterprise Desktop 15 SP7SUSE Linux Enterprise High Performance Computing 15 SP7SUSE Linux Enterprise Module for Basesystem 15 SP7SUSE Linux Enterprise Server 15 SP7SUSE Linux Enterprise Server for SAP Applications 15 SP7

Fixed in:

4.0.9-150000.45.63.1

References

ADVISORY

https://bugzilla.suse.com/1258798

ADVISORY

https://bugzilla.suse.com/1258801

ADVISORY

https://lists.suse.com/pipermail/sle-updates/2026-April/045631.html

ADVISORY

https://www.suse.com/security/cve/CVE-2025-61143/

ADVISORY