ELSA-2025-19906

Опубликовано: 07 нояб. 2025

Источник: oracle-oval

Платформа: Oracle Linux 8

Описание

ELSA-2025-19906: mingw-libtiff security update (IMPORTANT)

[4.0.9-3]

Fix CVE-2018-5784 CVE-2018-7456 CVE-2017-9935 CVE-2017-9935
Fix CVE-2017-18013 CVE-2018-8905 CVE-2018-10963 CVE-2018-17100
Fix CVE-2018-18557 CVE-2018-18661 (RHBZ #1602597) CVE-2018-12900
Fix CVE-2019-14973 CVE-2019-17546 CVE-2020-35521 CVE-2020-35522
Fix CVE-2020-35523 CVE-2020-35524 CVE-2020-19131 CVE-2022-0561
Fix CVE-2022-0562 CVE-2022-22844 CVE-2022-0865 CVE-2022-0891
Fix CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1355
Fix CVE-2022-2056 CVE-2022-2057 CVE-2022-2058 CVE-2022-2867
Fix CVE-2022-2868 CVE-2022-2519 CVE-2022-2520 CVE-2022-2521
Fix CVE-2022-2953 CVE-2022-3597 CVE-2022-3626 CVE-2022-3627
Fix CVE-2022-3970 CVE-2022-48281 CVE-2023-0800 CVE-2023-0801
Fix CVE-2023-0802 CVE-2023-0803 CVE-2022-3599 CVE-2018-15209
Fix CVE-2023-25433 CVE-2023-52356 CVE-2023-6228 CVE-2017-17095
Fix CVE-2024-7006
Fix CVE-2025-9900 Resolves: RHEL-112538
Fix CVE-2025-8176 Resolves: RHEL-120235

Обновленные пакеты

Oracle Linux 8

Oracle Linux x86_64

mingw32-libtiff

4.0.9-3.el8_10

mingw32-libtiff-static

4.0.9-3.el8_10

mingw64-libtiff

4.0.9-3.el8_10

mingw64-libtiff-static

4.0.9-3.el8_10

Связанные CVE

CVE-2025-8176

CVE-2025-9900

Ссылки на источники

Связанные уязвимости

ELSA-2025-20956

oracle-oval

6 дней назад

ELSA-2025-20956: libtiff security update (IMPORTANT)

ELSA-2025-19113

oracle-oval

около 1 месяца назад

ELSA-2025-19113: libtiff security update (IMPORTANT)

openSUSE-SU-2025-20049-1

suse-cvrf

12 дней назад

Security update for tiff

ROS-20251105-02

CVSS3: 8.8

redos

26 дней назад

Множественные уязвимости libtiff

CVE-2025-8176

CVSS3: 5.3

ubuntu

4 месяца назад

A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the function get_histogram of the file tools/tiffmedian.c. The manipulation leads to use after free. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The patch is identified as fe10872e53efba9cc36c66ac4ab3b41a839d5172. It is recommended to apply a patch to fix this issue.