Reference: https://lwn.net/Articles/1066930/ Fix: https://gitlab.com/libtiff/libtiff/-/commit/782a11d6b5b61c6dc21e714950a4af5bf89f023c
Status comment: (none) => Patch available from upstreamSource RPM: (none) => libtiff-4.7.1-1.mga10.src.rpm, libtiff-4.5.1-1.7.mga9.src.rpmCVE: (none) => CVE-2026-4775Flags: (none) => affects_mga9+Whiteboard: (none) => MGA9TOO
For Cauldron, libtiff-4.7.1-2.mga10 fixes the issue.
Assignee: bugsquad => nicolas.salgueroVersion: Cauldron => 9Source RPM: libtiff-4.7.1-1.mga10.src.rpm, libtiff-4.5.1-1.7.mga9.src.rpm => libtiff-4.5.1-1.7.mga9.src.rpmFlags: affects_mga9+ => (none)Whiteboard: MGA9TOO => (none)
Depends on: (none) => 35268
Suggested advisory: ======================== The updated packages fix a security vulnerability: Arbitrary code execution or denial of service via signed integer overflow in tiff file processing. (CVE-2026-4775) References: https://lwn.net/Articles/1066930/ ======================== Updated packages in core/updates_testing: ======================== lib(64)tiff-devel-4.5.1-1.8.mga9 lib(64)tiff-static-devel-4.5.1-1.8.mga9 lib(64)tiff6-4.5.1-1.8.mga9 libtiff-progs-4.5.1-1.8.mga9 from SRPM: libtiff-4.5.1-1.8.mga9.src.rpm
Status: NEW => ASSIGNEDStatus comment: Patch available from upstream => (none)Assignee: nicolas.salguero => qa-bugs
Keywords: (none) => advisory
MGA9-64, Xfce Installed libtiff and libtiff-progs - created a raw with convert routine - converted using raw2tiff utility - it worked Seems like utils are working.
CC: (none) => brtians1
MGA9-64 server Plasma Wayland on Compaq H000SB No installation issues. Ref wiki and bug 33267 and 35268 $ tiffinfo 005.tif === TIFF directory 0 === TIFF Directory at offset 0xc5b448 (12956744) Image Width: 2262 Image Length: 1432 Resolution: 1600, 1600 pixels/inch Bits/Sample: 8 Sample Format: unsigned integer Compression Scheme: None Photometric Interpretation: RGB color Extra Samples: 1<unassoc-alpha> Orientation: row 0 top, col 0 lhs Samples/Pixel: 4 Rows/Strip: 128 Planar Configuration: single image plane SubIFD Offsets: 13082238 ImageDescription: Created with GIMP PageName: Geplakte laag ICC Profile: <present>, 672 bytes --- SubIFD image descriptor tag within TIFF directory 0 with array of 1 SubIFD chains --- --- SubIFD 0 of chain 0 at offset 0xc79e7e (13082238): TIFF Directory at offset 0xc79e7e (13082238) Subfile Type: reduced-resolution image (1 = 0x1) Image Width: 256 Image Length: 162 Bits/Sample: 8 Sample Format: unsigned integer Compression Scheme: None Photometric Interpretation: RGB color Samples/Pixel: 3 Rows/Strip: 162 Planar Configuration: single image plane From another folder: $ tiffinfo 001.tif === TIFF directory 0 === TIFF Directory at offset 0x2641e8 (2507240) Subfile Type: (0 = 0x0) Image Width: 637 Image Length: 984 Resolution: 72, 72 pixels/inch Bits/Sample: 8 Compression Scheme: None Photometric Interpretation: RGB color Extra Samples: 1<unassoc-alpha> Orientation: row 0 top, col 0 lhs Samples/Pixel: 4 Rows/Strip: 64 Planar Configuration: single image plane DocumentName: /video/vakanties/dias bermuda 2003/001.tif ImageDescription: Created with The GIMP $ tiff2pdf P1014203.TIF > test.pdf TIFFReadDirectory: Warning, Unknown field with tag 50341 (0xc4a5) encountered. TIFFReadDirectory: Warning, Unknown field with tag 50341 (0xc4a5) encountered. TIFFReadDirectory: Warning, Unknown field with tag 50341 (0xc4a5) encountered. TIFFReadDirectory: Warning, Unknown field with tag 50341 (0xc4a5) encountered. Resulting file displays OK. $ tiffdump P1014203.TIF> flytip flytip reads with kwrite: P1014203.TIF: Magic: 0x4949 <little-endian> Version: 0x2a <ClassicTIFF> Directory 0: offset 8 (0x8) next 0 (0) ImageWidth (256) LONG (4) 1<3264> ImageLength (257) LONG (4) 1<2448> BitsPerSample (258) SHORT (3) 3<8 8 8> Compression (259) SHORT (3) 1<1> Photometric (262) SHORT (3) 1<2> ImageDescription (270) ASCII (2) 32<OLYMPUS DIGITAL CAMERA ...> Make (271) ASCII (2) 24<OLYMPUS IMAGING CORP. \0> and some more..... Looks all OK.
Flags: (none) => test_passed_mga9_64+CC: (none) => herman.viaeneWhiteboard: (none) => MGA9-64-OK
Validating.
CC: (none) => andrewsfarm, sysadmin-bugsKeywords: (none) => validated_update
An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2026-0114.html
Status: ASSIGNED => RESOLVEDResolution: (none) => FIXED