Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Fixed packages 4

Vulnerabilities 4

• Critical 9.8
  CVE-2026-52490

  An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the proce…

  tiff Debian
  Aug 24, 2026
• High 8.4
  CVE-2026-52491

  An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libti…

  tiff libtiff Debian Azure Linux
  Aug 25, 2026
• High 7.8
  CVE-2026-52492

  An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes can resul…

  tiff libtiff Debian Azure Linux
  Aug 24, 2026
• Medium 6.1
  CVE-2026-18495

  Libtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough

  A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit `StripByteC…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Sep 11, 2026

References

• article
  https://images.redhat.com/
• report
  https://access.redhat.com/security/cve/CVE-2026-52492
• article
  https://access.redhat.com/security/updates/classification/
• report
  https://access.redhat.com/security/cve/CVE-2026-52490
• report
  https://access.redhat.com/security/cve/CVE-2026-52491
• report
  https://access.redhat.com/security/cve/CVE-2026-18495
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_53467.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2531414
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-18495
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-18495
• article
  https://gitlab.com/libtiff/libtiff/-/merge_requests/729
• article
  https://gitlab.com/libtiff/libtiff/-/tree/67fd283d276f09db54dc39b9ef7b979d4b45c4b1
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2523148
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-52490
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-52490
• article
  https://gist.github.com/okyfh/122c2d72e991a78c8af80a3af3be8671
• article
  https://gitlab.com/libtiff/libtiff/-/work_items/846
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2524131
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-52491
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-52491
• article
  https://gist.github.com/okyfh/5cc53fa67d229017231cf18c91768bd9
• article
  https://gitlab.com/libtiff/libtiff/-/commit/9ce4d089bcf25496663776d9e6336738112f09a3
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2523134
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-52492
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-52492
• article
  https://gist.github.com/okyfh/fbc5a37cade358361d80f6a498560cfa
• article
  https://gitlab.com/libtiff/libtiff/-/commit/94affc5cf54111312f9891eb77accb93eebc28d7