Skip to content
OpenAdvisories
High RLSA-2026:69095 1 CVE

Important: libtiff security update

Published Sep 22, 2026 · Updated Sep 22, 2026

Ecosystem: Rocky Linux

Summary

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: libtiff: Arbitrary code execution via process_command_opts() function (CVE-2026-52490)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 8 libtiff 0:4.0.9-39.el8_10

Vulnerabilities 1

  • Critical 9.8
    CVE-2026-52490

    An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the proce…

    tiff Debian

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2523148
  • advisory
    https://access.redhat.com/errata/RHSA-2026:69095