- What: Security update for compat-libtiff3 library
- Impact: Red Hat Enterprise Linux 8 systems may be vulnerable to security issues
Red Hat Product Errata RHSA-2026:47183 - Security Advisory Issued: 2026-07-28 Updated: 2026-07-28 RHSA-2026:47183 - Security Advisory Overview Updated Packages Synopsis Important: compat-libtiff3 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for compat-libtiff3 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libtiff3 package provides libtiff 3, an older version of libtiff library for manipulating TIFF (Tagged Image File Format) image format files. This version should be used only if you are unable to use the current version of libtiff. Security Fix(es): libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2492871 - CVE-2026-12912 libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image CVEs CVE-2026-12912 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM compat-libtiff3-3.9.4-16.el8_10.src.rpm SHA-256: cfe8ac055f1f037face663f338dc7edaf1b837f50be6f39f31b28a444ba1b5dc x86_64 compat-libtiff3-3.9.4-16.el8_10.i686.rpm SHA-256: 59ec3f35e83b3c0c60b4ddca6f6c0fbd3a3e225ab6e11606f8987b04551c7ed1 compat-libtiff3-3.9.4-16.el8_10.x86_64.rpm SHA-256: ffb7e7265e179c87984be6aeceeb18127216e595c2eaf2150bab396733a73057 compat-libtiff3-debuginfo-3.9.4-16.el8_10.i686.rpm SHA-256: 0c43c43fd8a86525567ea8000dac8bf9e61c881946cb0003129c782ab1714859 compat-libtiff3-debuginfo-3.9.4-16.el8_10.x86_64.rpm SHA-256: f8c8f52fa32fe28a51b00e1c1e8bf364981bf29b63235600ec2d2b70f3f66a7c compat-libtiff3-debugsource-3.9.4-16.el8_10.i686.rpm SHA-256: b771957ed183e967ca3cf233f7716ab81843baa44ed7efff205278f133e48069 compat-libtiff3-debugsource-3.9.4-16.el8_10.x86_64.rpm SHA-256: 3de397a594ef6b0293c9d34f9a72d9f3ce5c32d0dcc316f438fc65e450535643 Red Hat Enterprise Linux for IBM z Systems 8 SRPM compat-libtiff3-3.9.4-16.el8_10.src.rpm SHA-256: cfe8ac055f1f037face663f338dc7edaf1b837f50be6f39f31b28a444ba1b5dc s390x compat-libtiff3-3.9.4-16.el8_10.s390x.rpm SHA-256: 23a242dca88d4d3ee174363725173b9aeac113f0bb3cbe844b131b710ceab620 compat-libtiff3-debuginfo-3.9.4-16.el8_10.s390x.rpm SHA-256: 02100d7854e4d251b313818e89777885573b235222af2a066dc2b509f7806c1a compat-libtiff3-debugsource-3.9.4-16.el8_10.s390x.rpm SHA-256: 18acbcfb4427edadba328fe6a7916e7ea945a0574ac216acd02b292877c7135f Red Hat Enterprise Linux for Power, little endian 8 SRPM compat-libtiff3-3.9.4-16.el8_10.src.rpm SHA-256: cfe8ac055f1f037face663f338dc7edaf1b837f50be6f39f31b28a444ba1b5dc ppc64le compat-libtiff3-3.9.4-16.el8_10.ppc64le.rpm SHA-256: 263e222e1e3cf23eb960edcfe2832f5cf80a4fd38c5008f68f1a0b4823e31222 compat-libtiff3-debuginfo-3.9.4-16.el8_10.ppc64le.rpm SHA-256: f909ab2d1b60d70ccb5c778b0733d00b8652c8a4f50072ccebecb1080a36e077 compat-libtiff3-debugsource-3.9.4-16.el8_10.ppc64le.rpm SHA-256: 0e293336c64c7190e43a8f85ede5a82b7008f49a492c5f319b5a661742dad68a Red Hat Enterprise Linux for ARM 64 8 SRPM compat-libtiff3-3.9.4-16.el8_10.src.rpm SHA-256: cfe8ac055f1f037face663f338dc7edaf1b837f50be6f39f31b28a444ba1b5dc aarch64 compat-libtiff3-3.9.4-16.el8_10.aarch64.rpm SHA-256: 644281db4629897b6528a65fcd86d87ae801630c2d7663e424db8e8a8edde593 compat-libtiff3-debuginfo-3.9.4-16.el8_10.aarch64.rpm SHA-256: 891f28259f6e58baf4ebefa68d4e0cc973a08af8d52efa62d6e72c1ebbf24f36 compat-libtiff3-debugsource-3.9.4-16.el8_10.aarch64.rpm SHA-256: 5fe37dce1361aa463263e7f49678223cb12cf95ec31f18bbbb4d764794cbb714 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 SRPM compat-libtiff3-3.9.4-16.el8_10.src.rpm SHA-256: cfe8ac055f1f037face663f338dc7edaf1b837f50be6f39f31b28a444ba1b5dc x86_64 compat-libtiff3-3.9.4-16.el8_10.i686.rpm SHA-256: 59ec3f35e83b3c0c60b4ddca6f6c0fbd3a3e225ab6e11606f8987b04551c7ed1 compat-libtiff3-3.9.4-16.el8_10.x86_64.rpm SHA-256: ffb7e7265e179c87984be6aeceeb18127216e595c2eaf2150bab396733a73057 compat-libtiff3-debuginfo-3.9.4-16.el8_10.i686.rpm SHA-256: 0c43c43fd8a86525567ea8000dac8bf9e61c881946cb0003129c782ab1714859 compat-libtiff3-debuginfo-3.9.4-16.el8_10.x86_64.rpm SHA-256: f8c8f52fa32fe28a51b00e1c1e8bf364981bf29b63235600ec2d2b70f3f66a7c compat-libtiff3-debugsource-3.9.4-16.el8_10.i686.rpm SHA-256: b771957ed183e967ca3cf233f7716ab81843baa44ed7efff205278f133e48069 compat-libtiff3-debugsource-3.9.4-16.el8_10.x86_64.rpm SHA-256: 3de397a594ef6b0293c9d34f9a72d9f3ce5c32d0dcc316f438fc65e450535643 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 SRPM compat-libtiff3-3.9.4-16.el8_10.src.rpm SHA-256: cfe8ac055f1f037face663f338dc7edaf1b837f50be6f39f31b28a444ba1b5dc aarch64 compat-libtiff3-3.9.4-16.el8_10.aarch64.rpm SHA-256: 644281db4629897b6528a65fcd86d87ae801630c2d7663e424db8e8a8edde593 compat-libtiff3-debuginfo-3.9.4-16.el8_10.aarch64.rpm SHA-256: 891f28259f6e58baf4ebefa68d4e0cc973a08af8d52efa62d6e72c1ebbf24f36 compat-libtiff3-debugsource-3.9.4-16.el8_10.aarch64.rpm SHA-256: 5fe37dce1361aa463263e7f49678223cb12cf95ec31f18bbbb4d764794cbb714 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 SRPM compat-libtiff3-3.9.4-16.el8_10.src.rpm SHA-256: cfe8ac055f1f037face663f338dc7edaf1b837f50be6f39f31b28a444ba1b5dc ppc64le compat-libtiff3-3.9.4-16.el8_10.ppc64le.rpm SHA-256: 263e222e1e3cf23eb960edcfe2832f5cf80a4fd38c5008f68f1a0b4823e31222 compat-libtiff3-debuginfo-3.9.4-16.el8_10.ppc64le.rpm SHA-256: f909ab2d1b60d70ccb5c778b0733d00b8652c8a4f50072ccebecb1080a36e077 compat-libtiff3-debugsource-3.9.4-16.el8_10.ppc64le.rpm SHA-256: 0e293336c64c7190e43a8f85ede5a82b7008f49a492c5f319b5a661742dad68a Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 SRPM compat-libtiff3-3.9.4-16.el8_10.src.rpm SHA-256: cfe8ac055f1f037face663f338dc7edaf1b837f50be6f39f31b28a444ba1b5dc s390x compat-libtiff3-3.9.4-16.el8_10.s390x.rpm SHA-256: 23a242dca88d4d3ee174363725173b9aeac113f0bb3cbe844b131b710ceab620 compat-libtiff3-debuginfo-3.9.4-16.el8_10.s390x.rpm SHA-256: 02100d7854e4d251b313818e89777885573b235222af2a066dc2b509f7806c1a compat-libtiff3-debugsource-3.9.4-16.el8_10.s390x.rpm SHA-256: 18acbcfb4427edadba328fe6a7916e7ea945a0574ac216acd02b292877c7135f The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .