SUSE-SU-2026:3027-1

Details

Description of the patch:

This update for tiff fixes the following issues

CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779).
CVE-2026-36849: denial of service when processing a a crafted TIFF file containing a large SamplesPerPixel tag value (bsc#1268434).

Affected Packages

libtiff-devel

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server 12 SP5-LTSSSUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

4.0.9-44.115.1

libtiff5

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server 12 SP5-LTSSSUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

4.0.9-44.115.1

libtiff5-32bit

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server 12 SP5-LTSSSUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

4.0.9-44.115.1

tiff

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server 12 SP5-LTSSSUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

4.0.9-44.115.1

References