High ELSA-2026-47183 1 CVE

Important: compat-libtiff3 security update (Oracle Linux 8)

Published Jul 28, 2026 · Updated Jul 28, 2026

Ecosystem: Oracle Linux

Summary

[3.9.4-16]
- fix CVE-2026-12912: heap-buffer-overflow in PixarLog ABGR decoding
(RHEL-189375)

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	compat-libtiff3	0:3.9.4-16.el8_10

Vulnerabilities 1

High 7.3

CVE-2026-12912

Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specif…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux

Jun 29, 2026