LibTIFF Vulnerabilities Lead to Denial of Service Risks in Ubuntu 26.04

On August 19, 2026, Ubuntu released USN-8113-2 to address vulnerabilities in LibTIFF affecting Ubuntu 26.04 LTS. Two critical issues were identified: CVE-2025-61143 and CVE-2025-61144, both published on February 23, 2026. These vulnerabilities allow attackers to exploit memory handling flaws in LibTIFF when processing certain images and malformed TIFF directories, potentially leading to crashes and denial of service. Users are advised to update their systems to mitigate these risks. The update includes fixes for several package versions, including libtiff-opengl and libtiff-tools. A standard system update is recommended to apply the necessary changes. Ubuntu Pro users benefit from extended security coverage for these packages.

Key Points: • Two critical vulnerabilities in LibTIFF could lead to denial of service. • Affected systems include Ubuntu 26.04 LTS with specific package versions. • Users should apply updates promptly to mitigate potential attacks.