Red Hat Product Errata RHSA-2026:49671 - Security Advisory Issued: 2026-08-03 Updated: 2026-08-03 RHSA-2026:49671 - Security Advisory Overview Updated Packages Synopsis Important: libtiff security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libtiff is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): libtiff: TIFFRasterScanlineSize64 produce too-big size and could cause OOM (CVE-2023-52355) libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912) Bug Fix(es) and Enhancement(s): Reintroduce the `tiffcp -i` option [rhel-10.0.z] (JIRA:RHEL-185417) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2251326 - CVE-2023-52355 libtiff: TIFFRasterScanlineSize64 produce too-big size and could cause OOM BZ - 2492871 - CVE-2026-12912 libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image CVEs CVE-2023-52355 CVE-2026-12912 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM libtiff-4.6.0-6.el10_0.4.src.rpm SHA-256: d310bfc54129f3df25a9d290c06f65704e6f6da52381697b0eb31749d622760e x86_64 libtiff-4.6.0-6.el10_0.4.x86_64.rpm SHA-256: 82aee0d3faeba7a8b227a04d3f7fca874d292335f5e27a36ff378dc69b34cc32 libtiff-debuginfo-4.6.0-6.el10_0.4.x86_64.rpm SHA-256: dd40a311417d89c6d704aebb4e58507db93563483eb53ea330215e23692f18c8 libtiff-debugsource-4.6.0-6.el10_0.4.x86_64.rpm SHA-256: 0b793177c2df4309345486f99ca42804b5a9e6b6c20fdbe4e27e2a3bf73091e0 libtiff-devel-4.6.0-6.el10_0.4.x86_64.rpm SHA-256: 0348c2ca7f7fc1796000441d0c65a4ac282617268ba163c14cc060606bc42879 libtiff-tools-debuginfo-4.6.0-6.el10_0.4.x86_64.rpm SHA-256: 1d82a884e1dc153607b864634d33cd43ba435b681ef89f3cad4373b5f6be6923 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 SRPM libtiff-4.6.0-6.el10_0.4.src.rpm SHA-256: d310bfc54129f3df25a9d290c06f65704e6f6da52381697b0eb31749d622760e s390x libtiff-4.6.0-6.el10_0.4.s390x.rpm SHA-256: 95300d7aff69582e127bf347428734827079c0259cf9ccdaa4f2d3ddba13b5bf libtiff-debuginfo-4.6.0-6.el10_0.4.s390x.rpm SHA-256: 0634b2d277b89e42d44a4a5f1eb48751598f6b0f3c93090a3dc8a47ed288dac6 libtiff-debugsource-4.6.0-6.el10_0.4.s390x.rpm SHA-256: e434d44c0c35b297bd0008ec675b9dfa7c7d7af1dfb6af25d1d8ec9b6fe1f295 libtiff-devel-4.6.0-6.el10_0.4.s390x.rpm SHA-256: f3b9a27e62f8e49372e2f5b904b566161b1e87a2d3c7f8ea93162c8703efccf0 libtiff-tools-debuginfo-4.6.0-6.el10_0.4.s390x.rpm SHA-256: 8b7aed50453d6ca88712a3a99cb8828e2a53933a25e6790b7d2d3d10afda7ce9 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 SRPM libtiff-4.6.0-6.el10_0.4.src.rpm SHA-256: d310bfc54129f3df25a9d290c06f65704e6f6da52381697b0eb31749d622760e ppc64le libtiff-4.6.0-6.el10_0.4.ppc64le.rpm SHA-256: 227f31ef4ccd20381ce8d745906794d68e9b54f011768c94a67e59d14792e7bb libtiff-debuginfo-4.6.0-6.el10_0.4.ppc64le.rpm SHA-256: 6d806fdb2f8ba9bb618e7139929852809f4fd295bcfe30cd759dbba555b9c4aa libtiff-debugsource-4.6.0-6.el10_0.4.ppc64le.rpm SHA-256: 7e4f522f0467b2a433ab8908ced04d4745b7d6949d93f9ea1067eea69ee4f1be libtiff-devel-4.6.0-6.el10_0.4.ppc64le.rpm SHA-256: b8ae12726bedea974c8548841b4e6ecb70448de45d43e331297ab5ecb025bc66 libtiff-tools-debuginfo-4.6.0-6.el10_0.4.ppc64le.rpm SHA-256: 38391cb625dbe8175cee8840acb7b5a87037011586a538f10b6985e88f225d93 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 SRPM libtiff-4.6.0-6.el10_0.4.src.rpm SHA-256: d310bfc54129f3df25a9d290c06f65704e6f6da52381697b0eb31749d622760e aarch64 libtiff-4.6.0-6.el10_0.4.aarch64.rpm SHA-256: f712d2f9182288f89d4cbf5b84fb4620681c50585512b8b1c5d374f3ba634664 libtiff-debuginfo-4.6.0-6.el10_0.4.aarch64.rpm SHA-256: f652c1cb13d7307fb7817c4526ab7d368d883867c870a82e1ed0553424382384 libtiff-debugsource-4.6.0-6.el10_0.4.aarch64.rpm SHA-256: b32c1d13f06bb4bb35d4292ae9e464a4a021484b2ead8dbccfa23286fac17615 libtiff-devel-4.6.0-6.el10_0.4.aarch64.rpm SHA-256: 1cf75de6eae72fcc684aee5915d6138a811f9e3d761cdd7f58e89809144f2025 libtiff-tools-debuginfo-4.6.0-6.el10_0.4.aarch64.rpm SHA-256: ca6a9da05e0766da19ff25c605f7f4ace753ed93d478d273afcbf8b9433207da Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 SRPM x86_64 libtiff-debuginfo-4.6.0-6.el10_0.4.x86_64.rpm SHA-256: dd40a311417d89c6d704aebb4e58507db93563483eb53ea330215e23692f18c8 libtiff-debugsource-4.6.0-6.el10_0.4.x86_64.rpm SHA-256: 0b793177c2df4309345486f99ca42804b5a9e6b6c20fdbe4e27e2a3bf73091e0 libtiff-tools-4.6.0-6.el10_0.4.x86_64.rpm SHA-256: badba708d5d82b038d7705ddbda94f18134a697f05d793e1cd83b05c01cebbe8 libtiff-tools-debuginfo-4.6.0-6.el10_0.4.x86_64.rpm SHA-256: 1d82a884e1dc153607b864634d33cd43ba435b681ef89f3cad4373b5f6be6923 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 SRPM ppc64le libtiff-debuginfo-4.6.0-6.el10_0.4.ppc64le.rpm SHA-256: 6d806fdb2f8ba9bb618e7139929852809f4fd295bcfe30cd759dbba555b9c4aa libtiff-debugsource-4.6.0-6.el10_0.4.ppc64le.rpm SHA-256: 7e4f522f0467b2a433ab8908ced04d4745b7d6949d93f9ea1067eea69ee4f1be libtiff-tools-4.6.0-6.el10_0.4.ppc64le.rpm SHA-256: 673d3f1e5a285ba408d78fc871d9f5c41a7266f4c674500b2e0d43e74fbe20a0 libtiff-tools-debuginfo-4.6.0-6.el10_0.4.ppc64le.rpm SHA-256: 38391cb625dbe8175cee8840acb7b5a87037011586a538f10b6985e88f225d93 Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 SRPM s390x libtiff-debuginfo-4.6.0-6.el10_0.4.s390x.rpm SHA-256: 0634b2d277b89e42d44a4a5f1eb48751598f6b0f3c93090a3dc8a47ed288dac6 libtiff-debugsource-4.6.0-6.el10_0.4.s390x.rpm SHA-256: e434d44c0c35b297bd0008ec675b9dfa7c7d7af1dfb6af25d1d8ec9b6fe1f295 libtiff-tools-4.6.0-6.el10_0.4.s390x.rpm SHA-256: 4872070dae9c8c7f8ba67653fabd918bef36e0366fdf07a79f16faa228eec7d0 libtiff-tools-debuginfo-4.6.0-6.el10_0.4.s390x.rpm SHA-256: 8b7aed50453d6ca88712a3a99cb8828e2a53933a25e6790b7d2d3d10afda7ce9 Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 SRPM aarch64 libtiff-debuginfo-4.6.0-6.el10_0.4.aarch64.rpm SHA-256: f652c1cb13d7307fb7817c4526ab7d368d883867c870a82e1ed0553424382384 libtiff-debugsource-4.6.0-6.el10_0.4.aarch64.rpm SHA-256: b32c1d13f06bb4bb35d4292ae9e464a4a021484b2ead8dbccfa23286fac17615 libtiff-tools-4.6.0-6.el10_0.4.aarch64.rpm SHA-256: aca5f3f13bbcacf10ec529c2b6637f38d2daaed5f71c4365bcfffba8cb1bb84d libtiff-tools-debuginfo-4.6.0-6.el10_0.4.aarch64.rpm SHA-256: ca6a9da05e0766da19ff25c605f7f4ace753ed93d478d273afcbf8b9433207da Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 SRPM libtiff-4.6.0-6.el10_0.4.src.rpm SHA-256: d310bfc54129f3df25a9d290c06f65704e6f6da52381697b0eb31749d622760e aarch64 libtiff-4.6.0-6.el10_0.4.aarch64.rpm SHA-256: f712d2f9182288f89d4cbf5b84fb4620681c50585512b8b1c5d374f3ba634664 libtiff-debuginfo-4.6.0-6.el10_0.4.aarch64.rpm SHA-256: f652c1cb13d7307fb7817c4526ab7d368d883867c870a82e1ed0553424382384 libtiff-debugsource-4.6.0-6.el10_0.4.aarch64.rpm SHA-256: b32c1d13f06bb4bb35d4292ae9e464a4a021484b2ead8dbccfa23286fac17615 libtiff-devel-4.6.0-6.el10_0.4.aarch64.rpm SHA-256: 1cf75de6eae72fcc684aee5915d6138a811f9e3d761cdd7f58e89809144f2025 libtiff-tools-debuginfo-4.6.0-6.el10_0.4.aarch64.rpm SHA-256: ca6a9da05e0766da19ff25c605f7f4ace753ed93d478d273afcbf8b9433207da Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 SRPM libtiff-4.6.0-6.el10_0.4.src.rpm SHA-256: d310bfc54129f3df25a9d290c06f65704e6f6da52381697b0eb31749d622760e s390x libtiff-4.6.0-6.el10_0.4.s390x.rpm SHA-256: 95300d7aff69582e127bf347428734827079c0259cf9ccdaa4f2d3ddba13b5bf libtiff-debuginfo-4.6.0-6.el10_0.4.s390x.rpm SHA-256: 0634b2d277b89e42d44a4a5f1eb48751598f6b0f3c93090a3dc8a47ed288dac6 libtiff-debugsource-4.6.0-6.el10_0.4.s390x.rpm SHA-256: e434d44c0c35b297bd0008ec675b9dfa7c7d7af1dfb6af25d1d8ec9b6fe1f295 libtiff-devel-4.6.0-6.el10_0.4.s390x.rpm SHA-256: f3b9a27e62f8e49372e2f5b904b566161b1e87a2d3c7f8ea93162c8703efccf0 libtiff-tools-debuginfo-4.6.0-6.el10_0.4.s390x.rpm SHA-256: 8b7aed50453d6ca88712a3a99cb8828e2a53933a25e6790b7d2d3d10afda7ce9 Red Hat Enterprise Linu