Commit Graph

1 Commits

Author SHA1 Message Date
RHEL Packaging Agent
321421fc81 Fix CVE-2025-9900: buffer underflow in TIFFReadRGBAImageOriented()
Backported upstream patch to fix buffer underflow crash in
TIFFReadRGBAImageOriented() when handling images with fewer raster
rows than requested. The patch adds verification logic to check
raster dimensions against image dimensions and adjusts accordingly.

Manual conflict resolution was required for libtiff 4.0.9
compatibility, replacing TIFFWarningExtR() with TIFFWarningExt()
to match the function signature available in this version.

CVE: CVE-2025-9900
Upstream fix: d1c0719e00.patch
Resolves: RHEL-112533

This commit was backported by Jotnar, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Jotnar
2025-10-14 14:18:20 +00:00