SUSE-SU-2026:1965-1

Details

Description of the patch:

This update for tiff fixes the following issue

CVE-2026-4775: signed integer overflow in the putcontig8bitYCbCr44tile function (bsc#1260411).

Affected Packages

libtiff-devel

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP5-LTSSSUSE Linux Enterprise Server 15 SP4-LTSS

Fixed in:

4.0.9-150000.45.66.1

libtiff5

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP5-LTSSSUSE Linux Enterprise Micro 5.3

Fixed in:

4.0.9-150000.45.66.1

libtiff5-32bit

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP5-LTSSSUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

4.0.9-150000.45.66.1

References

ADVISORY

https://bugzilla.suse.com/1260411

ADVISORY

https://lists.suse.com/pipermail/sle-updates/2026-May/046559.html

ADVISORY

https://www.suse.com/security/cve/CVE-2026-4775/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2026/suse-su-20261965-1/