Red Hat Product Errata RHSA-2026:47184 - Security Advisory Issued: 2026-07-28 Updated: 2026-07-28 RHSA-2026:47184 - Security Advisory Overview Updated Packages Synopsis Important: libtiff security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libtiff is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for x86_64 8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le Red Hat CodeReady Linux Builder for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2492871 - CVE-2026-12912 libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image CVEs CVE-2026-12912 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM libtiff-4.0.9-38.el8_10.src.rpm SHA-256: d5b68bf685f50d18730bcff56712ef70a41997d33467d42e690fbf3a01081302 x86_64 libtiff-4.0.9-38.el8_10.i686.rpm SHA-256: c563a81dfaf1d8ad4a4ef08ccfddd4db12d1ad4faf5518f3357f598ba478a6c3 libtiff-4.0.9-38.el8_10.x86_64.rpm SHA-256: 6a228f02f4e552d822c5f65cddbcb8ffad31641b6d6fa2650d92d4a6a1ea8108 libtiff-debuginfo-4.0.9-38.el8_10.i686.rpm SHA-256: 6195a22fa61a1a10801658b0077d2f57fbed63fef9cb72ada3c9958d817903a2 libtiff-debuginfo-4.0.9-38.el8_10.x86_64.rpm SHA-256: db6a44081b0a502824ccbd90d0e045169c1353872c715037e16d653a3a44ee68 libtiff-debugsource-4.0.9-38.el8_10.i686.rpm SHA-256: 775987bcac31d52dda0b891fc167518f1483053c9d8bbb27be947e68261402a2 libtiff-debugsource-4.0.9-38.el8_10.x86_64.rpm SHA-256: 19f85675ca220cd0895000dcf3649dbaada551cb5ea22364d2bfcedcd56cb72b libtiff-devel-4.0.9-38.el8_10.i686.rpm SHA-256: a2a7f1b2fb891d0b916b584c413659265be7796e13497d500aa16411f8ad0ac0 libtiff-devel-4.0.9-38.el8_10.x86_64.rpm SHA-256: 2afe76d967ad9a5297471c42e55c564f5a8a828918a95203ac9673059bdb0815 libtiff-tools-debuginfo-4.0.9-38.el8_10.i686.rpm SHA-256: a850fe8a6607da252a985af93a2712659dcb34e55360df6e88f05c13aa166f97 libtiff-tools-debuginfo-4.0.9-38.el8_10.x86_64.rpm SHA-256: 7dfea0a590d962b4197c89e1e2b5cffc52772dba7d74fd2e79fe442c5d0a005b Red Hat Enterprise Linux for IBM z Systems 8 SRPM libtiff-4.0.9-38.el8_10.src.rpm SHA-256: d5b68bf685f50d18730bcff56712ef70a41997d33467d42e690fbf3a01081302 s390x libtiff-4.0.9-38.el8_10.s390x.rpm SHA-256: 1bac54fe302fe0559e2cca4129fa161283a05ba0f2dc6825a2fb460a85471f1e libtiff-debuginfo-4.0.9-38.el8_10.s390x.rpm SHA-256: 3a905d762d63cc9ead2db9e5181d56dea356920870323ea7398b16f680dfbddb libtiff-debugsource-4.0.9-38.el8_10.s390x.rpm SHA-256: bcdff564ec7a9ce9d104a8b544dada4d716dd3bb71b2b586281c58a0fc82659a libtiff-devel-4.0.9-38.el8_10.s390x.rpm SHA-256: 1a899904d0ebf59d2390c4a7ea5096702858d8df32ebfdbbabeb4d553ae2eaee libtiff-tools-debuginfo-4.0.9-38.el8_10.s390x.rpm SHA-256: a10ff8c16e14cc36dfec8b748a30f003305acea96cdff12071ad55e856ba7951 Red Hat Enterprise Linux for Power, little endian 8 SRPM libtiff-4.0.9-38.el8_10.src.rpm SHA-256: d5b68bf685f50d18730bcff56712ef70a41997d33467d42e690fbf3a01081302 ppc64le libtiff-4.0.9-38.el8_10.ppc64le.rpm SHA-256: 9266197c3853d9bb3b61850d32129e87c0108c773bbe0529289d43e999f50811 libtiff-debuginfo-4.0.9-38.el8_10.ppc64le.rpm SHA-256: d9db432aaef86074063b17e568e95e1e0c70b7ebec33ef60c4c4b7cf7c1c2f3b libtiff-debugsource-4.0.9-38.el8_10.ppc64le.rpm SHA-256: fe33fcfc4265c708f1d0d726dd14f77d5c102f4cc6cfb6e60e40efac33a827bc libtiff-devel-4.0.9-38.el8_10.ppc64le.rpm SHA-256: 6d06c707b68756eee172a2d32381afd1507c03700ed6dd3c20467eb9ec9effe9 libtiff-tools-debuginfo-4.0.9-38.el8_10.ppc64le.rpm SHA-256: 016f64ecb7d0e574bf33f2c352785825fd3a88504a213572c68e16f7c26e4df0 Red Hat Enterprise Linux for ARM 64 8 SRPM libtiff-4.0.9-38.el8_10.src.rpm SHA-256: d5b68bf685f50d18730bcff56712ef70a41997d33467d42e690fbf3a01081302 aarch64 libtiff-4.0.9-38.el8_10.aarch64.rpm SHA-256: 8e9041f4d267e25abc3ae505450470e986a77b5fe134e47f076fb654246cd25f libtiff-debuginfo-4.0.9-38.el8_10.aarch64.rpm SHA-256: 3f19c7b2e94c2161dfb3c191ea8090712736578957dc4de9083da6fade6e8898 libtiff-debugsource-4.0.9-38.el8_10.aarch64.rpm SHA-256: 723b208c697f654f7f0abf502dc1ac35f3b786f12d46b2f481682ef5bf404d10 libtiff-devel-4.0.9-38.el8_10.aarch64.rpm SHA-256: 6b31352fce88b7c437132944f671fd7c8ed01dc01067ce57a974022cb0396233 libtiff-tools-debuginfo-4.0.9-38.el8_10.aarch64.rpm SHA-256: a50380e084357dcf7e1506eac11e0e4a2026eb8ec707f14f0dd1f33966bf03bb Red Hat CodeReady Linux Builder for x86_64 8 SRPM x86_64 libtiff-debuginfo-4.0.9-38.el8_10.x86_64.rpm SHA-256: db6a44081b0a502824ccbd90d0e045169c1353872c715037e16d653a3a44ee68 libtiff-debugsource-4.0.9-38.el8_10.x86_64.rpm SHA-256: 19f85675ca220cd0895000dcf3649dbaada551cb5ea22364d2bfcedcd56cb72b libtiff-tools-4.0.9-38.el8_10.x86_64.rpm SHA-256: 3bc062e259d778e3e3f5ea3fedce153ce039d56bb7b9a55d0a70851713e47ee8 libtiff-tools-debuginfo-4.0.9-38.el8_10.x86_64.rpm SHA-256: 7dfea0a590d962b4197c89e1e2b5cffc52772dba7d74fd2e79fe442c5d0a005b Red Hat CodeReady Linux Builder for Power, little endian 8 SRPM ppc64le libtiff-debuginfo-4.0.9-38.el8_10.ppc64le.rpm SHA-256: d9db432aaef86074063b17e568e95e1e0c70b7ebec33ef60c4c4b7cf7c1c2f3b libtiff-debugsource-4.0.9-38.el8_10.ppc64le.rpm SHA-256: fe33fcfc4265c708f1d0d726dd14f77d5c102f4cc6cfb6e60e40efac33a827bc libtiff-tools-4.0.9-38.el8_10.ppc64le.rpm SHA-256: 6db2a591474f30adb46584bc54726daf28eca3225e3f6e6e58d92d2c027eaea5 libtiff-tools-debuginfo-4.0.9-38.el8_10.ppc64le.rpm SHA-256: 016f64ecb7d0e574bf33f2c352785825fd3a88504a213572c68e16f7c26e4df0 Red Hat CodeReady Linux Builder for ARM 64 8 SRPM aarch64 libtiff-debuginfo-4.0.9-38.el8_10.aarch64.rpm SHA-256: 3f19c7b2e94c2161dfb3c191ea8090712736578957dc4de9083da6fade6e8898 libtiff-debugsource-4.0.9-38.el8_10.aarch64.rpm SHA-256: 723b208c697f654f7f0abf502dc1ac35f3b786f12d46b2f481682ef5bf404d10 libtiff-tools-4.0.9-38.el8_10.aarch64.rpm SHA-256: 1775d120197261b77c20b8eeb700e43f663ffb7e45356bd24e64c4365d2a80d0 libtiff-tools-debuginfo-4.0.9-38.el8_10.aarch64.rpm SHA-256: a50380e084357dcf7e1506eac11e0e4a2026eb8ec707f14f0dd1f33966bf03bb Red Hat CodeReady Linux Builder for IBM z Systems 8 SRPM s390x libtiff-debuginfo-4.0.9-38.el8_10.s390x.rpm SHA-256: 3a905d762d63cc9ead2db9e5181d56dea356920870323ea7398b16f680dfbddb libtiff-debugsource-4.0.9-38.el8_10.s390x.rpm SHA-256: bcdff564ec7a9ce9d104a8b544dada4d716dd3bb71b2b586281c58a0fc82659a libtiff-tools-4.0.9-38.el8_10.s390x.rpm SHA-256: 7b7adec4709c2934cff325e3382d64b42991f958844aa1fd0aee6d4ad176ed98 libtiff-tools-debuginfo-4.0.9-38.el8_10.s390x.rpm SHA-256: a10ff8c16e14cc36dfec8b748a30f003305acea96cdff12071ad55e856ba7951 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 SRPM libtiff-4.0.9-38.el8_10.src.rpm SHA-256: d5b68bf685f50d18730bcff56712ef70a41997d33467d42e690fbf3a01081302 x86_64 libtiff-4.0.9-38.el8_10.i686.rpm SHA-256: c563a81dfaf1d8ad4a4ef08ccfddd4db12d1ad4faf5518f3357f598ba478a6c3 libtiff-4.0.9-38.el8_10.x86_64.rpm SHA-256: 6a228f02f4e552d822c5f65cddbcb8ffad31641b6d6fa2650d92d4a6a1ea8108 libtiff-debuginfo-4.0.9-38.el8_10.i686.rpm SHA-256: 6195a22fa61a1a10801658b0077d2f57fbed63fef9cb72ada3c9958d817903a2 libtiff-debuginfo-4.0.9-38.el8_10.x86_64.rpm SHA-256: db6a44081b0a502824ccbd90d0e045169c1353872c715037e16d653a3a44ee68 libtiff-debugsource-4.0.9-38.el8_10.i686.rpm SHA-256: 775987bcac31d52dda0b891fc167518f1483053c9d8bbb27be947e68261402a2 libtiff-debugsource-4.0.9-38.el8_10.x86_64.rpm SHA-256: 19f85675ca220cd0895000dcf3649dbaada551cb5ea22364d2bfcedcd56cb72b libtiff-devel-4.0.9-38.el8_10.i686.rpm SHA-256: a2a7f1b2fb891d0b916b584c413659265be7796e13497d500aa16411f8ad0ac0 libtiff-devel-4.0.9-38.el8_10.x86_64.rpm SHA-256: 2afe76d967ad9a5297471c42e55c564f5a8a828918a95203ac9673059bdb0815 libtiff-tools-debuginfo-4.0.9-38.el8_10.i686.rpm SHA-256: a850fe8a6607da252a985af93a2712659dcb34e55360df6e88f05c13aa166f97 libtiff-tools-debuginfo-4.0.9-38.el8_10.x86_64.rpm SHA-256: 7dfea0a590d962b4197c89e1e2b5cffc52772dba7d74fd2e79fe442c5d0a005b Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 SRPM libtiff-4.0.9-38.el8_10.src.rpm SHA-256: d5b68bf685f50d18730bcff56712ef70a41997d33467d42e690fbf3a01081302 aarch64 libtiff-4.0.9-38.el8_10.aarch64.rpm SHA-256: 8e9041f4d267e25abc3ae505450470e986a77b5fe134e47f076fb654246cd25f libtiff-debuginfo-4.0.9-38.el8_10.aarch64.rpm SHA-256: 3f19c7b2e94c2161dfb3c191ea8090712736578957dc4de9083da6fade6e8898 libtiff-debugsource-4.0.9-38.el8_10.aarch64.rpm SHA-256: 723b208c697f654f7f0abf502dc1ac35f3b786f12d46b2f4