ELSA-2025-4658

ELSA-2025-4658 - libtiff security update

Type:SECURITY
Impact:MODERATE
Release Date:2025-05-07

Description


[4.0.9-34]
- fix CVE-2017-17095: heap-based buffer overflow in pal2rgb (RHEL-87363)


Related CVEs


CVE-2017-17095

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) libtiff-4.0.9-34.el8_10.src.rpm0f24da0eb864188992831211a21c92f76e20e0bb392fdc3a5089a8f1b8b17d30-ol8_aarch64_appstream
libtiff-4.0.9-34.el8_10.src.rpm0f24da0eb864188992831211a21c92f76e20e0bb392fdc3a5089a8f1b8b17d30-ol8_aarch64_codeready_builder
libtiff-4.0.9-34.el8_10.aarch64.rpm700c9f1f274de2c9383b12f38b3a5bca17467fde2d54ae95f6161f49cd5810df-ol8_aarch64_appstream
libtiff-devel-4.0.9-34.el8_10.aarch64.rpm611c0771b78172fd6df907b27efcdfc2b6deefaadca012c2f813712bf1a079b6-ol8_aarch64_appstream
libtiff-tools-4.0.9-34.el8_10.aarch64.rpma4a9749c6259afe798034d6c48e141a68b042af2c6f5272ff55b1c28a0847128-ol8_aarch64_codeready_builder
Oracle Linux 8 (x86_64) libtiff-4.0.9-34.el8_10.src.rpm0f24da0eb864188992831211a21c92f76e20e0bb392fdc3a5089a8f1b8b17d30-ol8_x86_64_appstream
libtiff-4.0.9-34.el8_10.src.rpm0f24da0eb864188992831211a21c92f76e20e0bb392fdc3a5089a8f1b8b17d30-ol8_x86_64_codeready_builder
libtiff-4.0.9-34.el8_10.i686.rpm61d510b0e807a62360d32298702cef56f1db510d44b251b21b25046fb3af87b6-ol8_x86_64_appstream
libtiff-4.0.9-34.el8_10.x86_64.rpmbe34ac844db6eac4bf77d4c702aec1a0963f56c6596ea2b59a938af642e7b973-ol8_x86_64_appstream
libtiff-devel-4.0.9-34.el8_10.i686.rpm440db0c5407ef7faf3fa30aedf8b5751b2801f6be763d67de09b3aae39208550-ol8_x86_64_appstream
libtiff-devel-4.0.9-34.el8_10.x86_64.rpm3edb6a7fa2c00a2bbd89835a3c459dd107cc1ea9c7eae4c4392aebd2c495d1df-ol8_x86_64_appstream
libtiff-tools-4.0.9-34.el8_10.x86_64.rpm57987f58fb5f155391363a9fc2a84e3b5b040d1056b0d15ca65de7f2271b9274-ol8_x86_64_codeready_builder



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete