ELSA-2025-19906

ELSA-2025-19906 - mingw-libtiff security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2025-11-07

Description

[4.0.9-3]
- Fix CVE-2018-5784 CVE-2018-7456 CVE-2017-9935 CVE-2017-9935
- Fix CVE-2017-18013 CVE-2018-8905 CVE-2018-10963 CVE-2018-17100
- Fix CVE-2018-18557 CVE-2018-18661 (RHBZ #1602597) CVE-2018-12900
- Fix CVE-2019-14973 CVE-2019-17546 CVE-2020-35521 CVE-2020-35522
- Fix CVE-2020-35523 CVE-2020-35524 CVE-2020-19131 CVE-2022-0561
- Fix CVE-2022-0562 CVE-2022-22844 CVE-2022-0865 CVE-2022-0891
- Fix CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1355
- Fix CVE-2022-2056 CVE-2022-2057 CVE-2022-2058 CVE-2022-2867
- Fix CVE-2022-2868 CVE-2022-2519 CVE-2022-2520 CVE-2022-2521
- Fix CVE-2022-2953 CVE-2022-3597 CVE-2022-3626 CVE-2022-3627
- Fix CVE-2022-3970 CVE-2022-48281 CVE-2023-0800 CVE-2023-0801
- Fix CVE-2023-0802 CVE-2023-0803 CVE-2022-3599 CVE-2018-15209
- Fix CVE-2023-25433 CVE-2023-52356 CVE-2023-6228 CVE-2017-17095
- Fix CVE-2024-7006
- Fix CVE-2025-9900
Resolves: RHEL-112538
- Fix CVE-2025-8176
Resolves: RHEL-120235

Related CVEs

CVE-2025-8176

CVE-2025-9900

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	mingw-libtiff-4.0.9-3.el8_10.src.rpm	a47c383d5b20620f8ab4327c38854a6f0c444dd6ffd4ab0cbd161d4be5827f81	-	ol8_x86_64_codeready_builder
	mingw32-libtiff-4.0.9-3.el8_10.noarch.rpm	07327431cccf9cde33a29bcf129eb097a3b0fa8c7c3b524bc8ebbe4d40d529e3	-	ol8_x86_64_codeready_builder
	mingw32-libtiff-static-4.0.9-3.el8_10.noarch.rpm	b50bcdb4f2a1f2ad6365d99c23aa0178e8bbca096dca27a3a79abe4ece1922a3	-	ol8_x86_64_codeready_builder
	mingw64-libtiff-4.0.9-3.el8_10.noarch.rpm	47373b625bcbd2d5cc39fddc6f0a5d0fc936b91779eddb80b16369f1427bdf3a	-	ol8_x86_64_codeready_builder
	mingw64-libtiff-static-4.0.9-3.el8_10.noarch.rpm	9077d89aaa9401382087b52e90949498e2caa697683b8be8693c95bb538bae90	-	ol8_x86_64_codeready_builder

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team