VDB
ALSA-2025%3A20956
ALSA-2025%3A20956
PUBLISHED
The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: LibTIFF Use-After-Free Vulnerability (CVE-2025-8176) * libtiff: Libtiff Write-What-Where (CVE-2025-9900) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| AlmaLinux:9 | libtiff-devel | 0, 0 |
| AlmaLinux:9 | libtiff | 0, 0 |
| AlmaLinux:9 | libtiff-tools | 0, 0 |
Timeline
- Nov 11, 2025 CVE Published
- Nov 19, 2025 CVE Updated
- Mar 6, 2026 Distribution Patch
- Mar 6, 2026 Distribution Patch
- Mar 6, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2025:20956 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2025-8176 third-party-advisory
- https://access.redhat.com/security/cve/CVE-2025-9900 third-party-advisory
- https://bugzilla.redhat.com/2383598 third-party-advisory
- https://bugzilla.redhat.com/2392784 third-party-advisory
- https://errata.almalinux.org/9/ALSA-2025-20956.html vendor-advisory