Back Linuxsecurity

Ubuntu 25.10 Addresses Critical DoS Vulnerabilities in LibTIFF Issues

Linuxsecurity •LinuxSecurity Advisories • March 23, 2026

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: Several security issues were fixed in LibTIFF. Software Description: - tiff: Tag Image File Format (TIFF) library Details: It was discovered that LibTIFF did not properly handle memory when processing certain images. An attacker could possibly use this issue to cause LibTIFF to crash, resulting in a denial of service. (CVE-2025-61143) It was discovered that LibTIFF did not properly handle memory when processing malformed TIFF directories. An attacker could possibly use this issue to cause LibTIFF to crash, resulting in a denial of service. (CVE-2025-61144)

The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 libtiff-opengl 4.7.0-3ubuntu3.1 libtiff-tools 4.7.0-3ubuntu3.1 libtiff6 4.7.0-3ubuntu3.1 libtiffxx6 4.7.0-3ubuntu3.1 Ubuntu 24.04 LTS libtiff-opengl 4.5.1+git230720-4ubuntu2.5 libtiff-tools 4.5.1+git230720-4ubuntu2.5 libtiff6 4.5.1+git230720-4ubuntu2.5 libtiffxx6 4.5.1+git230720-4ubuntu2.5 Ubuntu 22.04 LTS libtiff-opengl 4.3.0-6ubuntu0.13 libtiff-tools 4.3.0-6ubuntu0.13 libtiff5 4.3.0-6ubuntu0.13 libtiffxx5 4.3.0-6ubuntu0.13 Ubuntu 20.04 LTS libtiff-opengl 4.1.0+git191117-2ubuntu0.20.04.14+esm3 Available with Ubuntu Pro libtiff-tools 4.1.0+git191117-2ubuntu0.20.04.14+esm3 Available with Ubuntu Pro libtiff5 4.1.0+git191117-2ubuntu0.20.04.14+esm3 Available with Ubuntu Pro libtiffxx5 4.1.0+git191117-2ubuntu0.20.04.14+esm3 Available with Ubuntu Pro Ubuntu 18.04 LTS libtiff-opengl 4.0.9-5ubuntu0.10+esm10 Available with Ubuntu Pro libtiff-tools 4.0.9-5ubuntu0.10+esm10 Available with Ubuntu Pro libtiff5 4.0.9-5ubuntu0.10+esm10 Available with Ubuntu Pro libtiffxx5 4.0.9-5ubuntu0.10+esm10 Available with Ubuntu Pro Ubuntu 16.04 LTS libtiff-opengl 4.0.6-1ubuntu0.8+esm20 Available with Ubuntu Pro libtiff-tools 4.0.6-1ubuntu0.8+esm20 Available with Ubuntu Pro libtiff5 4.0.6-1ubuntu0.8+esm20 Available with Ubuntu Pro libtiffxx5 4.0.6-1ubuntu0.8+esm20 Available with Ubuntu Pro Ubuntu 14.04 LTS libtiff-opengl 4.0.3-7ubuntu0.11+esm17 Available with Ubuntu Pro libtiff-tools 4.0.3-7ubuntu0.11+esm17 Available with Ubuntu Pro libtiff5 4.0.3-7ubuntu0.11+esm17 Available with Ubuntu Pro libtiffxx5 4.0.3-7ubuntu0.11+esm17 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

CVE-2025-61143, CVE-2025-61144

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Ubuntu 25.10 Fixes Critical DoS Vulnerabilities in LibTIFF On March 23, 2026, Ubuntu released updates addressing critical denial-of-service (DoS) vulnerabilities in the LibTIFF library, affecting multiple Ubuntu versions including 25.10, 24.04 LTS, and older releases down to 14.04 LTS. The vulnerabilities, identified as CVE-2025-61143 and CVE-2025-61144, allow attackers to exploit improper memory handling when processing certain images and malformed TIFF directories, potentially causing LibTIFF to crash. Users of affected Ubuntu versions are urged to update their systems to mitigate these risks. The vulnerabilities were published on February 23, 2026, and have been confirmed to impact a wide range of systems. Ubuntu Pro users are particularly advised to ensure their packages are updated as they receive extended support. The updates include specific package versions for each affected Ubuntu release to rectify the issues. 2 sources 71

Extracted Entities

Ubuntu 25.10 Addresses Critical DoS Vulnerabilities in LibTIFF Issues

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (2)