Skip to content
OpenAdvisories
High ALAS2023-2026-2156 1 CVE

Important: libtiff security update (Amazon Linux 2023)

Published Sep 14, 2026 · Updated Sep 14, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-52490: An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c

Fixed packages 7

ReleasePackageFixed in
Amazon Linux · 2023 libtiff 0:4.4.0-4.amzn2023.0.28
Amazon Linux · 2023 libtiff-debuginfo 0:4.4.0-4.amzn2023.0.28
Amazon Linux · 2023 libtiff-debugsource 0:4.4.0-4.amzn2023.0.28
Amazon Linux · 2023 libtiff-devel 0:4.4.0-4.amzn2023.0.28
Amazon Linux · 2023 libtiff-static 0:4.4.0-4.amzn2023.0.28
Amazon Linux · 2023 libtiff-tools 0:4.4.0-4.amzn2023.0.28
Amazon Linux · 2023 libtiff-tools-debuginfo 0:4.4.0-4.amzn2023.0.28

Vulnerabilities 1

  • Critical 9.8
    CVE-2026-52490

    An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the proce…

    tiff Debian

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-52490.html