Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:3054-1

Опубликовано: 15 июл. 2026
Источник: suse-cvrf

Описание

Security update for tiff

This update for tiff fixes the following issues

  • CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779).
  • CVE-2026-36849: denial of service when processing a a crafted TIFF file containing a large SamplesPerPixel tag value (bsc#1268434).

Список пакетов

Container private-registry/1.2/harbor-portal:latest
libtiff5-4.0.9-150000.45.69.1
Container private-registry/harbor-portal:latest
libtiff5-4.0.9-150000.45.69.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
libtiff-devel-4.0.9-150000.45.69.1
libtiff5-4.0.9-150000.45.69.1
libtiff5-32bit-4.0.9-150000.45.69.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
libtiff-devel-4.0.9-150000.45.69.1
libtiff5-4.0.9-150000.45.69.1
libtiff5-32bit-4.0.9-150000.45.69.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
libtiff-devel-4.0.9-150000.45.69.1
libtiff5-4.0.9-150000.45.69.1
libtiff5-32bit-4.0.9-150000.45.69.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
libtiff-devel-4.0.9-150000.45.69.1
libtiff5-4.0.9-150000.45.69.1
libtiff5-32bit-4.0.9-150000.45.69.1
SUSE Linux Enterprise Micro 5.3
libtiff5-4.0.9-150000.45.69.1
SUSE Linux Enterprise Micro 5.4
libtiff5-4.0.9-150000.45.69.1
SUSE Linux Enterprise Micro 5.5
libtiff5-4.0.9-150000.45.69.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
libtiff5-4.0.9-150000.45.69.1
libtiff5-32bit-4.0.9-150000.45.69.1
SUSE Linux Enterprise Server 15 SP4-LTSS
libtiff-devel-4.0.9-150000.45.69.1
libtiff5-4.0.9-150000.45.69.1
libtiff5-32bit-4.0.9-150000.45.69.1
SUSE Linux Enterprise Server 15 SP5-LTSS
libtiff-devel-4.0.9-150000.45.69.1
libtiff5-4.0.9-150000.45.69.1
libtiff5-32bit-4.0.9-150000.45.69.1
SUSE Linux Enterprise Server 15 SP6-LTSS
libtiff5-4.0.9-150000.45.69.1
libtiff5-32bit-4.0.9-150000.45.69.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
libtiff-devel-4.0.9-150000.45.69.1
libtiff5-4.0.9-150000.45.69.1
libtiff5-32bit-4.0.9-150000.45.69.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
libtiff-devel-4.0.9-150000.45.69.1
libtiff5-4.0.9-150000.45.69.1
libtiff5-32bit-4.0.9-150000.45.69.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6
libtiff5-4.0.9-150000.45.69.1
libtiff5-32bit-4.0.9-150000.45.69.1

Ссылки

Описание

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).

Затронутые продукты
Container private-registry/1.2/harbor-portal:latest:libtiff5-4.0.9-150000.45.69.1
Container private-registry/harbor-portal:latest:libtiff5-4.0.9-150000.45.69.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libtiff-devel-4.0.9-150000.45.69.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libtiff5-32bit-4.0.9-150000.45.69.1
Ссылки

Описание

unknown

Затронутые продукты
Container private-registry/1.2/harbor-portal:latest:libtiff5-4.0.9-150000.45.69.1
Container private-registry/harbor-portal:latest:libtiff5-4.0.9-150000.45.69.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libtiff-devel-4.0.9-150000.45.69.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libtiff5-32bit-4.0.9-150000.45.69.1
Ссылки