ELSA-2025-19276

ELSA-2025-19276 - libtiff security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2025-10-29

Description


[4.0.9-35]
- fix CVE-2025-9900: buffer underflow crash in TIFFReadRGBAImageOriented()
(RHEL-112533)


Related CVEs


CVE-2025-9900

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) libtiff-4.0.9-35.el8_10.src.rpm381b5e54dc5c3f95aefd89610179343e60a3c5cf53b9ee06c3cbdbb23428569c-ol8_aarch64_appstream
libtiff-4.0.9-35.el8_10.src.rpm381b5e54dc5c3f95aefd89610179343e60a3c5cf53b9ee06c3cbdbb23428569c-ol8_aarch64_codeready_builder
libtiff-4.0.9-35.el8_10.aarch64.rpme0c09fa4433c6729aa5dca678985d04df67b8eb3512fcd68e818efc6de501c9f-ol8_aarch64_appstream
libtiff-devel-4.0.9-35.el8_10.aarch64.rpm0bca5d5263826e16c2f88885ccd16cdb15531a380be8d018c33cbd3db00890ef-ol8_aarch64_appstream
libtiff-tools-4.0.9-35.el8_10.aarch64.rpm58f56a71bec395c4f013888536bdd3c7fd09a59502c4de87aabdec405d831d17-ol8_aarch64_codeready_builder
Oracle Linux 8 (x86_64) libtiff-4.0.9-35.el8_10.src.rpm381b5e54dc5c3f95aefd89610179343e60a3c5cf53b9ee06c3cbdbb23428569c-ol8_x86_64_appstream
libtiff-4.0.9-35.el8_10.src.rpm381b5e54dc5c3f95aefd89610179343e60a3c5cf53b9ee06c3cbdbb23428569c-ol8_x86_64_codeready_builder
libtiff-4.0.9-35.el8_10.i686.rpm8edb1d39a3e7eed30d8b779e10fe0525c7c30818c2af242e37bebd5e324142f0-ol8_x86_64_appstream
libtiff-4.0.9-35.el8_10.x86_64.rpma890634c30204d50c474e6d3ec097b1cba0456831a12804aa4b45800cdac9b3d-ol8_x86_64_appstream
libtiff-devel-4.0.9-35.el8_10.i686.rpmeb84f1066c8c993a0118dc6f6a85166ee0f1c68a848b355d84e9c9f037d91f16-ol8_x86_64_appstream
libtiff-devel-4.0.9-35.el8_10.x86_64.rpm43bb1c5026ef84ff5464bddd7042d555b0e1cd530aa4167ac859d7d8196ad566-ol8_x86_64_appstream
libtiff-tools-4.0.9-35.el8_10.x86_64.rpmedc1ac03c6f32528d3e1494a9712706713defb9ff6aa8b6512cb2f280d816114-ol8_x86_64_codeready_builder



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete