DLA-4315-1
UnscoredAdvisory
Published 30 Sept 2025In the index since 6 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- 0.008
- 54th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 124
- of 17,781 indexed, latest versions
- Container images
- 129
- deployed by those charts
- Fix available
- 1 of 1
- affected package
tiff - security update
Carried by container images the latest versions of 124 of 17,781 indexed charts deploy, on 129 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| tiffdeb | 4.2.0-1, 4.2.0-1+deb11u1, 4.2.0-1+deb11u3, 4.2.0-1+deb11u4+2 more | 4.2.0-1+deb11u7 | 129 |
- OSV records
- DLA-4315-1
Charts affected
124 by stars
Container images carrying it
129 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| mide/ | 4eee0dcb715f | tiff | 4.2.0-1+deb11u7 | 1 |
| mnaggar3396/ | 371d8ed84b15 | tiff | 4.2.0-1+deb11u7 | 1 |
| moreillon/ | bacb2ddd8394 | tiff | 4.2.0-1+deb11u7 | 1 |
| moreillon/ | fc4d12db1d3e | tiff | 4.2.0-1+deb11u7 | 1 |
| mozilla/ | 93752877dced | tiff | 4.2.0-1+deb11u7 | 1 |
| nathanielvarona/ | b746a34e5597 | tiff | 4.2.0-1+deb11u7 | 1 |
| nrrrus/ | 5f55cd4ef557 | tiff | 4.2.0-1+deb11u7 | 1 |
| openzaak/ | 2ca2ea6e0ae9 | tiff | 4.2.0-1+deb11u7 | 1 |
| owanio1992/ | 4ade8e1e4d7e | tiff | 4.2.0-1+deb11u7 | 1 |
| passbolt/ | ec046e112d5c | tiff | 4.2.0-1+deb11u7 | 1 |
| penpotapp/ | 8974882a0542 | tiff | 4.2.0-1+deb11u7 | 1 |
| phntom/ | d8e2a9f2f085 | tiff | 4.2.0-1+deb11u7 | 1 |
| phntom/ | 3adadbac8443 | tiff | 4.2.0-1+deb11u7 | 1 |
| phntom/ | c318dc90a4bf | tiff | 4.2.0-1+deb11u7 | 1 |
| robmarkcole/ | 410275726459 | tiff | 4.2.0-1+deb11u7 | 1 |
| robotshop/ | 774b52c6180d | tiff | 4.2.0-1+deb11u7 | 1 |
| roundcube/ | a8ea6fd751dc | tiff | 4.2.0-1+deb11u7 | 1 |
| salehmir/ | 1afa95f979e9 | tiff | 4.2.0-1+deb11u7 | 1 |
| simpleidserver/ | 367218ae760f | tiff | 4.2.0-1+deb11u7 | 1 |
| socialmediamacroscope/ | 4fb86885d64d | tiff | 4.2.0-1+deb11u7 | 1 |
| socialmediamacroscope/ | 4bfda60829fe | tiff | 4.2.0-1+deb11u7 | 1 |
| socialmediamacroscope/ | 07477060bba8 | tiff | 4.2.0-1+deb11u7 | 1 |
| socialmediamacroscope/ | c969f7677983 | tiff | 4.2.0-1+deb11u7 | 1 |
| socialmediamacroscope/ | 9b4211832429 | tiff | 4.2.0-1+deb11u7 | 1 |
| socialmediamacroscope/ | 999f2ff2c128 | tiff | 4.2.0-1+deb11u7 | 1 |
| socialmediamacroscope/ | 51cb17626519 | tiff | 4.2.0-1+deb11u7 | 1 |
| socialmediamacroscope/ | 74e35f64db68 | tiff | 4.2.0-1+deb11u7 | 1 |
| socialmediamacroscope/ | 724f3f5702e0 | tiff | 4.2.0-1+deb11u7 | 1 |
| speckle/ | 82c052441110 | tiff | 4.2.0-1+deb11u7 | 1 |
| speckle/ | d5f689c9256c | tiff | 4.2.0-1+deb11u7 | 1 |
| speckle/ | d9b58995a8b8 | tiff | 4.2.0-1+deb11u7 | 1 |
| stratospire/ | a4c34cb01117 | tiff | 4.2.0-1+deb11u7 | 1 |
| svtechnmaa/ | a59d0b81dde2 | tiff | 4.2.0-1+deb11u7 | 1 |
| swisscomcloud/ | b6639d1a922e | tiff | 4.2.0-1+deb11u7 | 1 |
| th0th/ | d06fa39f7406 | tiff | 4.2.0-1+deb11u7 | 1 |
| youssef11gaber10/ | ba6853e35c60 | tiff | 4.2.0-1+deb11u7 | 1 |
| gcr.io/ | ec3ae9f6df47 | tiff | 4.2.0-1+deb11u7 | 1 |
| ghcr.io/ | 2a115e991894 | tiff | 4.2.0-1+deb11u7 | 1 |
| ghcr.io/ | 8c7e08d32d70 | tiff | 4.2.0-1+deb11u7 | 1 |
| ghcr.io/ | 22e3d0b486df | tiff | 4.2.0-1+deb11u7 | 1 |
| ghcr.io/ | 7a5244e4c8dc | tiff | 4.2.0-1+deb11u7 | 1 |
| ghcr.io/ | c862771e38e8 | tiff | 4.2.0-1+deb11u7 | 1 |
| ghcr.io/ | 3113c0960507 | tiff | 4.2.0-1+deb11u7 | 1 |
| ghcr.io/ | 833d26df3840 | tiff | 4.2.0-1+deb11u7 | 1 |
| ghcr.io/ | 480c84fa9e63 | tiff | 4.2.0-1+deb11u7 | 1 |
| ghcr.io/ | 8fa4597217a4 | tiff | 4.2.0-1+deb11u7 | 1 |
| ghcr.io/ | d785c893096c | tiff | 4.2.0-1+deb11u7 | 1 |
| ghcr.io/ | 38900bc76ee0 | tiff | 4.2.0-1+deb11u7 | 1 |
| ghcr.io/ | 06c3b27462e6 | tiff | 4.2.0-1+deb11u7 | 1 |
| ghcr.io/ | ce1ebe9387a2 | tiff | 4.2.0-1+deb11u7 | 1 |