Red Hat Security Advisory

RHSA-2026:53467

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-08-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images libtiff-4.7.2-2.hum1@aarch64, libtiff-4.7.2-2.hum1@src, libtiff-4.7.2-2.hum1@x86_64 +6

Fixes 4 records

TI-2026-37792 CVE-2026-52490 · GHSA-6qm2-q5vx-rh4c

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to…

HIGH 82

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00726 Published 2026-08-24 Partial fix CWE-94

TI-2026-37793 CVE-2026-52491 · GHSA-28v3-93mm-ccfv

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to…

LOW 38

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main() component

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00192 Published 2026-08-25 Partial fix CWE-190

TI-2026-37794 CVE-2026-52492 · GHSA-c22p-2vpj-rh5j

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when…

LOW 35

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00188 Published 2026-08-24 Partial fix CWE-190

TI-2026-15187 CVE-2026-18495 · GHSA-6x88-8xw5-p2gw

Libtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough

LOW 26

A flaw was found in libtiff.

CVSS 3.1MEDIUM 6.1 Local Low privileges User interaction EPSS 0.00117 Published 2026-09-11 Partial fix · 4.7.2-2.hum1 CWE-122