Skip to content
OpenAdvisories
High ALSA-2026:69095 1 CVE

Important: libtiff security update

Published Sep 21, 2026 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: libtiff: Arbitrary code execution via process_command_opts() function (CVE-2026-52490)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 3

ReleasePackageFixed in
AlmaLinux · 8 libtiff 4.0.9-39.el8_10
AlmaLinux · 8 libtiff-devel 4.0.9-39.el8_10
AlmaLinux · 8 libtiff-tools 4.0.9-39.el8_10

Vulnerabilities 1

  • Critical 9.8
    CVE-2026-52490

    An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the proce…

    tiff Debian

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-52490
  • report
    https://bugzilla.redhat.com/2523148
  • advisory
    https://errata.almalinux.org/8/ALSA-2026-69095.html