Bug 35340 - libtiff new security issue CVE-2026-4775
Summary: libtiff new security issue CVE-2026-4775
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 9
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA9-64-OK
Keywords: advisory, validated_update
Depends on: 35268
Blocks:
  Show dependency treegraph
 
Reported: 2026-04-09 16:22 CEST by Nicolas Salguero
Modified: 2026-05-07 07:08 CEST (History)
4 users (show)

See Also:
Source RPM: libtiff-4.5.1-1.7.mga9.src.rpm
CVE: CVE-2026-4775
Status comment:
herman.viaene: test_passed_mga9_64+


Attachments

Nicolas Salguero 2026-04-09 16:23:34 CEST

Status comment: (none) => Patch available from upstream
Source RPM: (none) => libtiff-4.7.1-1.mga10.src.rpm, libtiff-4.5.1-1.7.mga9.src.rpm
CVE: (none) => CVE-2026-4775
Flags: (none) => affects_mga9+
Whiteboard: (none) => MGA9TOO

Comment 1 Nicolas Salguero 2026-04-09 16:54:11 CEST
For Cauldron, libtiff-4.7.1-2.mga10 fixes the issue.

Assignee: bugsquad => nicolas.salguero
Version: Cauldron => 9
Source RPM: libtiff-4.7.1-1.mga10.src.rpm, libtiff-4.5.1-1.7.mga9.src.rpm => libtiff-4.5.1-1.7.mga9.src.rpm
Flags: affects_mga9+ => (none)
Whiteboard: MGA9TOO => (none)

Nicolas Salguero 2026-04-10 07:58:11 CEST

Depends on: (none) => 35268

Comment 2 Nicolas Salguero 2026-04-28 11:54:19 CEST
Suggested advisory:
========================

The updated packages fix a security vulnerability:

Arbitrary code execution or denial of service via signed integer overflow in tiff file processing. (CVE-2026-4775)

References:
https://lwn.net/Articles/1066930/
========================

Updated packages in core/updates_testing:
========================
lib(64)tiff-devel-4.5.1-1.8.mga9
lib(64)tiff-static-devel-4.5.1-1.8.mga9
lib(64)tiff6-4.5.1-1.8.mga9
libtiff-progs-4.5.1-1.8.mga9

from SRPM:
libtiff-4.5.1-1.8.mga9.src.rpm

Status: NEW => ASSIGNED
Status comment: Patch available from upstream => (none)
Assignee: nicolas.salguero => qa-bugs

katnatek 2026-04-29 03:22:11 CEST

Keywords: (none) => advisory

Comment 3 Brian Rockwell 2026-05-04 00:12:06 CEST
MGA9-64, Xfce

Installed libtiff and libtiff-progs

- created a raw with convert routine
- converted using raw2tiff utility - it worked

Seems like utils are working.

CC: (none) => brtians1

Comment 4 Herman Viaene 2026-05-04 14:43:26 CEST
MGA9-64 server Plasma Wayland on Compaq H000SB
No installation issues.
Ref wiki and bug 33267 and 35268
$ tiffinfo 005.tif 
=== TIFF directory 0 ===
TIFF Directory at offset 0xc5b448 (12956744)
  Image Width: 2262 Image Length: 1432
  Resolution: 1600, 1600 pixels/inch
  Bits/Sample: 8
  Sample Format: unsigned integer
  Compression Scheme: None
  Photometric Interpretation: RGB color
  Extra Samples: 1<unassoc-alpha>
  Orientation: row 0 top, col 0 lhs
  Samples/Pixel: 4
  Rows/Strip: 128
  Planar Configuration: single image plane
  SubIFD Offsets: 13082238
  ImageDescription: Created with GIMP
  PageName: Geplakte laag
  ICC Profile: <present>, 672 bytes
--- SubIFD image descriptor tag within TIFF directory 0 with array of 1 SubIFD chains ---
--- SubIFD 0 of chain 0 at offset 0xc79e7e (13082238):
TIFF Directory at offset 0xc79e7e (13082238)
  Subfile Type: reduced-resolution image (1 = 0x1)
  Image Width: 256 Image Length: 162
  Bits/Sample: 8
  Sample Format: unsigned integer
  Compression Scheme: None
  Photometric Interpretation: RGB color
  Samples/Pixel: 3
  Rows/Strip: 162
  Planar Configuration: single image plane

From another folder:
$ tiffinfo 001.tif 
=== TIFF directory 0 ===
TIFF Directory at offset 0x2641e8 (2507240)
  Subfile Type: (0 = 0x0)
  Image Width: 637 Image Length: 984
  Resolution: 72, 72 pixels/inch
  Bits/Sample: 8
  Compression Scheme: None
  Photometric Interpretation: RGB color
  Extra Samples: 1<unassoc-alpha>
  Orientation: row 0 top, col 0 lhs
  Samples/Pixel: 4
  Rows/Strip: 64
  Planar Configuration: single image plane
  DocumentName: /video/vakanties/dias bermuda 2003/001.tif
  ImageDescription: Created with The GIMP

$ tiff2pdf P1014203.TIF > test.pdf
TIFFReadDirectory: Warning, Unknown field with tag 50341 (0xc4a5) encountered.
TIFFReadDirectory: Warning, Unknown field with tag 50341 (0xc4a5) encountered.
TIFFReadDirectory: Warning, Unknown field with tag 50341 (0xc4a5) encountered.
TIFFReadDirectory: Warning, Unknown field with tag 50341 (0xc4a5) encountered.
Resulting file displays OK.

$ tiffdump P1014203.TIF> flytip
flytip reads with kwrite:
P1014203.TIF:
Magic: 0x4949 <little-endian> Version: 0x2a <ClassicTIFF>
Directory 0: offset 8 (0x8) next 0 (0)
ImageWidth (256) LONG (4) 1<3264>
ImageLength (257) LONG (4) 1<2448>
BitsPerSample (258) SHORT (3) 3<8 8 8>
Compression (259) SHORT (3) 1<1>
Photometric (262) SHORT (3) 1<2>
ImageDescription (270) ASCII (2) 32<OLYMPUS DIGITAL CAMERA   ...>
Make (271) ASCII (2) 24<OLYMPUS IMAGING CORP.  \0>
and some more.....
Looks all OK.

Flags: (none) => test_passed_mga9_64+
CC: (none) => herman.viaene
Whiteboard: (none) => MGA9-64-OK

Comment 5 Thomas Andrews 2026-05-05 17:06:17 CEST
Validating.

CC: (none) => andrewsfarm, sysadmin-bugs
Keywords: (none) => validated_update

Comment 6 Mageia Robot 2026-05-07 07:08:40 CEST
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2026-0114.html

Status: ASSIGNED => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.