SUSE-SU-2025:3941-1

Опубликовано: 05 нояб. 2025

Источник: suse-cvrf

Описание

Security update for tiff

This update for tiff fixes the following issues:

CVE-2025-9900: Fixed Write-What-Where in libtiff via TIFFReadRGBAImageOriented (bsc#1250413).

Список пакетов

Container private-registry/1.2/harbor-portal:latest

libtiff5-4.0.9-150000.45.60.1

Container private-registry/harbor-nginx:latest

libtiff5-4.0.9-150000.45.60.1

Container private-registry/harbor-portal:latest

libtiff5-4.0.9-150000.45.60.1

Container suse/nginx:1.21

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP4-Hardened-BYOS

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP4-Hardened-BYOS-Azure

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP4-Hardened-BYOS-EC2

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP4-Hardened-BYOS-GCE

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP4-SAP

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP4-SAP-Azure

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP4-SAP-BYOS

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP4-SAP-BYOS-Azure

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP4-SAP-BYOS-EC2

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP4-SAP-BYOS-GCE

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP4-SAP-EC2

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP4-SAP-GCE

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP4-SAP-Hardened

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP4-SAP-Hardened-Azure

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP4-SAP-Hardened-BYOS

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP4-SAP-Hardened-GCE

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP4-SAPCAL

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP4-SAPCAL-Azure

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP4-SAPCAL-EC2

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP4-SAPCAL-GCE

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP5-Hardened-BYOS-Azure

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP5-Hardened-BYOS-EC2

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP5-Hardened-BYOS-GCE

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP5-SAP-Azure-3P

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP5-SAP-Azure-LI-BYOS

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP5-SAP-BYOS-Azure

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP5-SAP-BYOS-EC2

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP5-SAP-BYOS-GCE

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP5-SAP-Hardened-Azure

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP5-SAP-Hardened-GCE

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP5-SAPCAL-Azure

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP5-SAPCAL-EC2

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP5-SAPCAL-GCE

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP6-SAP-Azure-3P

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP6-SAP-Azure-LI-BYOS

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP6-SAP-BYOS

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP6-SAP-BYOS-Azure

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP6-SAP-BYOS-EC2

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP6-SAP-BYOS-GCE

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP6-SAP-Hardened

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP6-SAP-Hardened-Azure

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP6-SAP-Hardened-BYOS

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP6-SAP-Hardened-EC2

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP6-SAP-Hardened-GCE

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP7-SAP-Azure

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP7-SAP-Azure-3P

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP7-SAP-Azure-LI-BYOS-Production

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP7-SAP-BYOS-Azure

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP7-SAP-BYOS-EC2

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP7-SAP-BYOS-GCE

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP7-SAP-EC2

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP7-SAP-GCE

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP7-SAP-GCE-3P

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP7-SAP-Hardened-Azure

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

libtiff5-4.0.9-150000.45.60.1

Image SLES15-SP7-SAP-Hardened-GCE

libtiff5-4.0.9-150000.45.60.1

SUSE Enterprise Storage 7.1

libtiff-devel-4.0.9-150000.45.60.1

libtiff5-4.0.9-150000.45.60.1

libtiff5-32bit-4.0.9-150000.45.60.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

libtiff-devel-4.0.9-150000.45.60.1

libtiff5-4.0.9-150000.45.60.1

libtiff5-32bit-4.0.9-150000.45.60.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

libtiff-devel-4.0.9-150000.45.60.1

libtiff5-4.0.9-150000.45.60.1

libtiff5-32bit-4.0.9-150000.45.60.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

libtiff-devel-4.0.9-150000.45.60.1

libtiff5-4.0.9-150000.45.60.1

libtiff5-32bit-4.0.9-150000.45.60.1

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

libtiff-devel-4.0.9-150000.45.60.1

libtiff5-4.0.9-150000.45.60.1

libtiff5-32bit-4.0.9-150000.45.60.1

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

libtiff-devel-4.0.9-150000.45.60.1

libtiff5-4.0.9-150000.45.60.1

libtiff5-32bit-4.0.9-150000.45.60.1

SUSE Linux Enterprise Micro 5.2

libtiff5-4.0.9-150000.45.60.1

SUSE Linux Enterprise Micro 5.3

libtiff5-4.0.9-150000.45.60.1

SUSE Linux Enterprise Micro 5.4

libtiff5-4.0.9-150000.45.60.1

SUSE Linux Enterprise Micro 5.5

libtiff5-4.0.9-150000.45.60.1

SUSE Linux Enterprise Module for Basesystem 15 SP6

libtiff5-4.0.9-150000.45.60.1

libtiff5-32bit-4.0.9-150000.45.60.1

SUSE Linux Enterprise Module for Basesystem 15 SP7

libtiff5-4.0.9-150000.45.60.1

libtiff5-32bit-4.0.9-150000.45.60.1

SUSE Linux Enterprise Server 15 SP3-LTSS

libtiff-devel-4.0.9-150000.45.60.1

libtiff5-4.0.9-150000.45.60.1

libtiff5-32bit-4.0.9-150000.45.60.1

SUSE Linux Enterprise Server 15 SP4-LTSS

libtiff-devel-4.0.9-150000.45.60.1

libtiff5-4.0.9-150000.45.60.1

libtiff5-32bit-4.0.9-150000.45.60.1

SUSE Linux Enterprise Server 15 SP5-LTSS

libtiff-devel-4.0.9-150000.45.60.1

libtiff5-4.0.9-150000.45.60.1

libtiff5-32bit-4.0.9-150000.45.60.1

SUSE Linux Enterprise Server for SAP Applications 15 SP3

libtiff-devel-4.0.9-150000.45.60.1

libtiff5-4.0.9-150000.45.60.1

libtiff5-32bit-4.0.9-150000.45.60.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

libtiff-devel-4.0.9-150000.45.60.1

libtiff5-4.0.9-150000.45.60.1

libtiff5-32bit-4.0.9-150000.45.60.1

SUSE Linux Enterprise Server for SAP Applications 15 SP5

libtiff-devel-4.0.9-150000.45.60.1

libtiff5-4.0.9-150000.45.60.1

libtiff5-32bit-4.0.9-150000.45.60.1

SUSE Manager Proxy LTS 4.3

libtiff-devel-4.0.9-150000.45.60.1

libtiff5-4.0.9-150000.45.60.1

libtiff5-32bit-4.0.9-150000.45.60.1

SUSE Manager Server LTS 4.3

libtiff-devel-4.0.9-150000.45.60.1

libtiff5-4.0.9-150000.45.60.1

libtiff5-32bit-4.0.9-150000.45.60.1

Ссылки

https://www.suse.com/support/update/announcement/2025/suse-su-20253941-1/
Link for SUSE-SU-2025:3941-1
https://lists.suse.com/pipermail/sle-security-updates/2025-November/023150.html
E-Mail link for SUSE-SU-2025:3941-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1250413
SUSE Bug 1250413
https://www.suse.com/security/cve/CVE-2025-9900/
SUSE CVE CVE-2025-9900 page

Описание

A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted TIFF image file. By providing an abnormally large image height value in the file's metadata, an attacker can trick the library into writing attacker-controlled color data to an arbitrary memory location. This memory corruption can be exploited to cause a denial of service (application crash) or to achieve arbitrary code execution with the permissions of the user.

Затронутые продукты

Container private-registry/1.2/harbor-portal:latest:libtiff5-4.0.9-150000.45.60.1

Container private-registry/harbor-nginx:latest:libtiff5-4.0.9-150000.45.60.1

Container private-registry/harbor-portal:latest:libtiff5-4.0.9-150000.45.60.1

Container suse/nginx:1.21:libtiff5-4.0.9-150000.45.60.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-9900.html
CVE-2025-9900
https://bugzilla.suse.com/1250404
SUSE Bug 1250404
https://bugzilla.suse.com/1253310
SUSE Bug 1253310