Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-4775 (GCVE-0-2026-4775)
Vulnerability from cvelistv5 – Published: 2026-03-24 14:42 – Updated: 2026-07-15 00:48
VLAI
EPSS
VEX
Title
Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing
Summary
A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-190 - Integer Overflow or Wraparound
Assigner
References
31 references
Impacted products
59 products
| Vendor | Product | Version | |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:4.6.0-6.el10_1.3 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.1 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:4.6.0-8.el10_2.1 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:4.6.0-6.el10_0.3 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support |
Unaffected:
0:3.9.4-12.el7_9.2 , < *
(rpm)
cpe:/o:redhat:rhel_els:7 |
|
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support |
Unaffected:
0:4.0.3-35.el7_9.2 , < *
(rpm)
cpe:/o:redhat:rhel_els:7 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:4.0.9-37.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8::appstream cpe:/a:redhat:enterprise_linux:8::crb |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:3.9.4-15.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:4.0.9-4.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8::crb |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support |
Unaffected:
0:4.0.9-18.el8_4.2 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_eus_long_life:8.4::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support |
Unaffected:
0:3.9.4-13.el8_4.2 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_eus_long_life:8.4::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On |
Unaffected:
0:4.0.9-18.el8_4.2 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_eus_long_life:8.4::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On |
Unaffected:
0:3.9.4-13.el8_4.2 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_eus_long_life:8.4::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support |
Unaffected:
0:4.0.9-21.el8_6.2 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support |
Unaffected:
0:3.9.4-13.el8_6.2 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service |
Unaffected:
0:4.0.9-21.el8_6.2 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service |
Unaffected:
0:3.9.4-13.el8_6.2 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions |
Unaffected:
0:4.0.9-21.el8_6.2 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions |
Unaffected:
0:3.9.4-13.el8_6.2 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service |
Unaffected:
0:4.0.9-29.el8_8.2 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service |
Unaffected:
0:3.9.4-13.el8_8.2 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
Unaffected:
0:4.0.9-29.el8_8.2 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
Unaffected:
0:3.9.4-13.el8_8.2 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:4.4.0-15.el9_7.3 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:4.4.0-18.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb |
|
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions |
Unaffected:
0:4.2.0-3.el9_0.3 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.0::appstream |
|
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
0:4.4.0-8.el9_2.5 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2::appstream |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support |
Unaffected:
0:4.4.0-12.el9_4.5 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.4::appstream cpe:/a:redhat:rhel_eus:9.4::crb |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:4.4.0-13.el9_6.4 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6::appstream cpe:/a:redhat:rhel_eus:9.6::crb |
|
| Red Hat | Red Hat AI Inference Server 3.2 |
Unaffected:
1780681984 , < *
(rpm)
cpe:/a:redhat:ai_inference_server:3.2::el9 |
|
| Red Hat | Red Hat AI Inference Server 3.3 |
Unaffected:
1782352950 , < *
(rpm)
cpe:/a:redhat:ai_inference_server:3.3::el9 |
|
| Red Hat | Red Hat AI Inference Server 3.3 |
Unaffected:
1782352919 , < *
(rpm)
cpe:/a:redhat:ai_inference_server:3.3::el9 |
|
| Red Hat | Red Hat AI Inference Server 3.3 |
Unaffected:
1782353093 , < *
(rpm)
cpe:/a:redhat:ai_inference_server:3.3::el9 |
|
| Red Hat | Red Hat AI Inference Server 3.3 |
Unaffected:
1782352847 , < *
(rpm)
cpe:/a:redhat:ai_inference_server:3.3::el9 |
|
| Red Hat | Red Hat Hardened Images |
Unaffected:
4.7.1-2.2.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
|
| Red Hat | Red Hat Hardened Images |
Unaffected:
4.7.1-2.3.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
|
| Red Hat | Red Hat Enterprise Linux 6 |
cpe:/o:redhat:enterprise_linux:6 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:4.6.0-6.el10_1.3 , < *
(rpm)
Unaffected: 0:4.6.0-8.el10_2.1 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.1 cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:4.0.9-37.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:3.9.4-15.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support |
Unaffected:
0:4.0.9-18.el8_4.2 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.4 |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support |
Unaffected:
0:3.9.4-13.el8_4.2 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.4 |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On |
Unaffected:
0:4.0.9-18.el8_4.2 , < *
(rpm)
cpe:/a:redhat:rhel_eus_long_life:8.4 |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On |
Unaffected:
0:3.9.4-13.el8_4.2 , < *
(rpm)
cpe:/a:redhat:rhel_eus_long_life:8.4 |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support |
Unaffected:
0:4.0.9-21.el8_6.2 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6 |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support |
Unaffected:
0:3.9.4-13.el8_6.2 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6 |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service |
Unaffected:
0:4.0.9-21.el8_6.2 , < *
(rpm)
cpe:/a:redhat:rhel_tus:8.6 |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service |
Unaffected:
0:3.9.4-13.el8_6.2 , < *
(rpm)
cpe:/a:redhat:rhel_tus:8.6 |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions |
Unaffected:
0:4.0.9-21.el8_6.2 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.6 |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions |
Unaffected:
0:3.9.4-13.el8_6.2 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.6 |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service |
Unaffected:
0:4.0.9-29.el8_8.2 , < *
(rpm)
cpe:/a:redhat:rhel_tus:8.8 |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service |
Unaffected:
0:3.9.4-13.el8_8.2 , < *
(rpm)
cpe:/a:redhat:rhel_tus:8.8 |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
Unaffected:
0:4.0.9-29.el8_8.2 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.8 |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
Unaffected:
0:3.9.4-13.el8_8.2 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.8 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:4.4.0-15.el9_7.3 , < *
(rpm)
Unaffected: 0:4.4.0-18.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions |
Unaffected:
0:4.2.0-3.el9_0.3 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.0 |
|
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
0:4.4.0-8.el9_2.5 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2 |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support |
Unaffected:
0:4.4.0-12.el9_4.5 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.4 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:4.4.0-13.el9_6.4 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
|
| Red Hat | Red Hat Hardened Images |
Unaffected:
4.7.1-2.2.hum1 , < *
(rpm)
Unaffected: 4.7.1-2.3.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1 |
Date Public
2026-03-24 14:33
Credits
Red Hat would like to thank PrymEvol and Quang Luong for reporting this issue.
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-4775",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-03-24T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-03-25T03:55:55.028Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2026-04-17T16:20:28.027Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://lists.debian.org/debian-lts-announce/2026/04/msg00016.html"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.1",
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.6.0-6.el10_1.3",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.6.0-8.el10_2.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.6.0-6.el10_0.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"defaultStatus": "affected",
"packageName": "compat-libtiff3",
"product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.9.4-12.el7_9.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.0.3-35.el7_9.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.0.9-37.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "compat-libtiff3",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.9.4-15.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::crb"
],
"defaultStatus": "affected",
"packageName": "mingw-libtiff",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.0.9-4.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.4"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.0.9-18.el8_4.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.4"
],
"defaultStatus": "affected",
"packageName": "compat-libtiff3",
"product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.9.4-13.el8_4.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus_long_life:8.4"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.0.9-18.el8_4.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus_long_life:8.4"
],
"defaultStatus": "affected",
"packageName": "compat-libtiff3",
"product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.9.4-13.el8_4.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.0.9-21.el8_6.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6"
],
"defaultStatus": "affected",
"packageName": "compat-libtiff3",
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.9.4-13.el8_6.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_tus:8.6"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.0.9-21.el8_6.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_tus:8.6"
],
"defaultStatus": "affected",
"packageName": "compat-libtiff3",
"product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.9.4-13.el8_6.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.6"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.0.9-21.el8_6.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.6"
],
"defaultStatus": "affected",
"packageName": "compat-libtiff3",
"product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.9.4-13.el8_6.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_tus:8.8"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.0.9-29.el8_8.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_tus:8.8"
],
"defaultStatus": "affected",
"packageName": "compat-libtiff3",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.9.4-13.el8_8.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.0.9-29.el8_8.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8"
],
"defaultStatus": "affected",
"packageName": "compat-libtiff3",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.9.4-13.el8_8.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.4.0-15.el9_7.3",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.4.0-18.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.0"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.2.0-3.el9_0.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.4.0-8.el9_2.5",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.4.0-12.el9_4.5",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.4.0-13.el9_6.4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "rhaiis/model-opt-cuda-rhel9",
"product": "Red Hat AI Inference Server 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780681984",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhaiis/model-opt-cuda-rhel9",
"product": "Red Hat AI Inference Server 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782352950",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhaiis/vllm-spyre-rhel9",
"product": "Red Hat AI Inference Server 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782352919",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhaiis/vllm-rocm-rhel9",
"product": "Red Hat AI Inference Server 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782353093",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhaiis/vllm-cuda-rhel9",
"product": "Red Hat AI Inference Server 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782352847",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "libtiff-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4.7.1-2.2.hum1",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "4.7.1-2.3.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:6"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 6",
"vendor": "Red Hat"
}
],
"datePublic": "2026-03-24T14:33:35.730Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-190",
"description": "Integer Overflow or Wraparound",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-15T00:48:52.864Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-4775"
},
{
"name": "RHBZ#2450768",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450768"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4775.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24992"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25910"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19586"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12265"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19150"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20585"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16055"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20583"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19659"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20591"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19657"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20592"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19604"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19608"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19609"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19702"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19585"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12271"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19363"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:14929"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25096"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:30078"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:30089"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:30088"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:30087"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:30349"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:24992: Red Hat Enterprise Linux Server (v. 7 ELS)"
},
{
"lang": "en",
"value": "RHSA-2026:25910: Red Hat Enterprise Linux Server (v. 7 ELS), Red Hat Enterprise Linux Server Optional (v. 7 ELS)"
},
{
"lang": "en",
"value": "RHSA-2026:19586: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:12265: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19150: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:20585: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:16055: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:20583: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)"
},
{
"lang": "en",
"value": "RHSA-2026:19659: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)"
},
{
"lang": "en",
"value": "RHSA-2026:20591: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:19657: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:20592: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:19604: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:19608: Red Hat Enterprise Linux AppStream E4S (v.9.0)"
},
{
"lang": "en",
"value": "RHSA-2026:19609: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:19702: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:19585: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:12271: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:19363: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:14929: Red Hat Enterprise Linux CRB (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:25096: Red Hat AI Inference Server 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:30078: Red Hat AI Inference Server 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:30089: Red Hat AI Inference Server 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:30088: Red Hat AI Inference Server 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:30087: Red Hat AI Inference Server 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:30349: Red Hat Hardened Images"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-03-24T14:23:23.826Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-03-24T14:33:35.730Z",
"value": "Made public."
}
],
"title": "libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing",
"workarounds": [
{
"lang": "en",
"value": "To mitigate this issue, avoid processing untrusted or maliciously crafted TIFF files with applications linked against the libtiff library. If processing untrusted TIFF files is unavoidable, consider running the affected applications within a sandboxed environment to limit the potential impact of successful exploitation. This operational control helps contain the effects of an out-of-bounds write, reducing the risk of denial of service or arbitrary code execution."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.1"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.6.0-6.el10_1.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.6.0-8.el10_2.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.6.0-6.el10_0.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"defaultStatus": "affected",
"packageName": "compat-libtiff3",
"product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.9.4-12.el7_9.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.0.3-35.el7_9.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::appstream",
"cpe:/a:redhat:enterprise_linux:8::crb"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.0.9-37.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::appstream"
],
"defaultStatus": "affected",
"packageName": "compat-libtiff3",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.9.4-15.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::crb"
],
"defaultStatus": "affected",
"packageName": "mingw-libtiff",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.0.9-4.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.4::appstream",
"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.0.9-18.el8_4.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.4::appstream",
"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
],
"defaultStatus": "affected",
"packageName": "compat-libtiff3",
"product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.9.4-13.el8_4.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.4::appstream",
"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.0.9-18.el8_4.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.4::appstream",
"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
],
"defaultStatus": "affected",
"packageName": "compat-libtiff3",
"product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.9.4-13.el8_4.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream",
"cpe:/a:redhat:rhel_e4s:8.6::appstream",
"cpe:/a:redhat:rhel_tus:8.6::appstream"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.0.9-21.el8_6.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream",
"cpe:/a:redhat:rhel_e4s:8.6::appstream",
"cpe:/a:redhat:rhel_tus:8.6::appstream"
],
"defaultStatus": "affected",
"packageName": "compat-libtiff3",
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.9.4-13.el8_6.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream",
"cpe:/a:redhat:rhel_e4s:8.6::appstream",
"cpe:/a:redhat:rhel_tus:8.6::appstream"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.0.9-21.el8_6.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream",
"cpe:/a:redhat:rhel_e4s:8.6::appstream",
"cpe:/a:redhat:rhel_tus:8.6::appstream"
],
"defaultStatus": "affected",
"packageName": "compat-libtiff3",
"product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.9.4-13.el8_6.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream",
"cpe:/a:redhat:rhel_e4s:8.6::appstream",
"cpe:/a:redhat:rhel_tus:8.6::appstream"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.0.9-21.el8_6.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream",
"cpe:/a:redhat:rhel_e4s:8.6::appstream",
"cpe:/a:redhat:rhel_tus:8.6::appstream"
],
"defaultStatus": "affected",
"packageName": "compat-libtiff3",
"product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.9.4-13.el8_6.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8::appstream",
"cpe:/a:redhat:rhel_tus:8.8::appstream"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.0.9-29.el8_8.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8::appstream",
"cpe:/a:redhat:rhel_tus:8.8::appstream"
],
"defaultStatus": "affected",
"packageName": "compat-libtiff3",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.9.4-13.el8_8.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8::appstream",
"cpe:/a:redhat:rhel_tus:8.8::appstream"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.0.9-29.el8_8.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8::appstream",
"cpe:/a:redhat:rhel_tus:8.8::appstream"
],
"defaultStatus": "affected",
"packageName": "compat-libtiff3",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.9.4-13.el8_8.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/a:redhat:enterprise_linux:9::crb"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.4.0-15.el9_7.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/a:redhat:enterprise_linux:9::crb"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.4.0-18.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.0::appstream"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.2.0-3.el9_0.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2::appstream"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.4.0-8.el9_2.5",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4::appstream",
"cpe:/a:redhat:rhel_eus:9.4::crb"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.4.0-12.el9_4.5",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6::appstream",
"cpe:/a:redhat:rhel_eus:9.6::crb"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.4.0-13.el9_6.4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "rhaiis/model-opt-cuda-rhel9",
"product": "Red Hat AI Inference Server 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780681984",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhaiis/model-opt-cuda-rhel9",
"product": "Red Hat AI Inference Server 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782352950",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhaiis/vllm-spyre-rhel9",
"product": "Red Hat AI Inference Server 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782352919",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhaiis/vllm-rocm-rhel9",
"product": "Red Hat AI Inference Server 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782353093",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhaiis/vllm-cuda-rhel9",
"product": "Red Hat AI Inference Server 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782352847",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "libtiff-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4.7.1-2.2.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "libtiff-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4.7.1-2.3.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:6"
],
"defaultStatus": "affected",
"packageName": "libtiff",
"product": "Red Hat Enterprise Linux 6",
"vendor": "Red Hat"
}
],
"credits": [
{
"lang": "en",
"value": "Red Hat would like to thank PrymEvol and Quang Luong for reporting this issue."
}
],
"datePublic": "2026-03-24T14:33:35.730Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-190",
"description": "Integer Overflow or Wraparound",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-30T02:04:55.873Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "RHSA-2026:12265",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12265"
},
{
"name": "RHSA-2026:12271",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12271"
},
{
"name": "RHSA-2026:14929",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:14929"
},
{
"name": "RHSA-2026:16055",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16055"
},
{
"name": "RHSA-2026:19150",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19150"
},
{
"name": "RHSA-2026:19363",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19363"
},
{
"name": "RHSA-2026:19585",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19585"
},
{
"name": "RHSA-2026:19586",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19586"
},
{
"name": "RHSA-2026:19604",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19604"
},
{
"name": "RHSA-2026:19608",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19608"
},
{
"name": "RHSA-2026:19609",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19609"
},
{
"name": "RHSA-2026:19657",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19657"
},
{
"name": "RHSA-2026:19659",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19659"
},
{
"name": "RHSA-2026:19702",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19702"
},
{
"name": "RHSA-2026:20583",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20583"
},
{
"name": "RHSA-2026:20585",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20585"
},
{
"name": "RHSA-2026:20591",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20591"
},
{
"name": "RHSA-2026:20592",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20592"
},
{
"name": "RHSA-2026:24992",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24992"
},
{
"name": "RHSA-2026:25096",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25096"
},
{
"name": "RHSA-2026:25910",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25910"
},
{
"name": "RHSA-2026:30078",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:30078"
},
{
"name": "RHSA-2026:30087",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:30087"
},
{
"name": "RHSA-2026:30088",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:30088"
},
{
"name": "RHSA-2026:30089",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:30089"
},
{
"name": "RHSA-2026:30349",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:30349"
},
{
"name": "RHSA-2026:33388",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33388"
},
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-4775"
},
{
"name": "RHBZ#2450768",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450768"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-03-24T14:23:23.826Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-03-24T14:33:35.730Z",
"value": "Made public."
}
],
"title": "Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing",
"workarounds": [
{
"lang": "en",
"value": "To mitigate this issue, avoid processing untrusted or maliciously crafted TIFF files with applications linked against the libtiff library. If processing untrusted TIFF files is unavoidable, consider running the affected applications within a sandboxed environment to limit the potential impact of successful exploitation. This operational control helps contain the effects of an out-of-bounds write, reducing the risk of denial of service or arbitrary code execution."
}
],
"x_generator": {
"engine": "cvelib 1.8.0"
},
"x_redhatCweChain": "CWE-190: Integer Overflow or Wraparound"
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2026-4775",
"datePublished": "2026-03-24T14:42:47.529Z",
"dateReserved": "2026-03-24T14:26:05.988Z",
"dateUpdated": "2026-07-15T00:48:52.864Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-4775",
"date": "2026-07-19",
"epss": "0.00553",
"percentile": "0.4251"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-4775\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2026-03-24T15:16:39.693\",\"lastModified\":\"2026-07-15T02:22:52.810\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.\"},{\"lang\":\"es\",\"value\":\"Se encontr\u00f3 un fallo en la biblioteca libtiff. Un atacante remoto podr\u00eda explotar una vulnerabilidad de desbordamiento de entero con signo en la funci\u00f3n putcontig8bitYCbCr44tile al proporcionar un archivo TIFF especialmente dise\u00f1ado. Este fallo puede llevar a una escritura fuera de l\u00edmites en el heap debido a c\u00e1lculos incorrectos del puntero de memoria, potencialmente causando una denegaci\u00f3n de servicio (ca\u00edda de la aplicaci\u00f3n) o ejecuci\u00f3n de c\u00f3digo arbitrario.\"}],\"affected\":[{\"source\":\"secalert@redhat.com\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.1\"],\"versions\":[{\"version\":\"0:4.6.0-6.el10_1.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:4.6.0-8.el10_2.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:4.6.0-6.el10_0.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7 Extended Lifecycle Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-libtiff3\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"],\"versions\":[{\"version\":\"0:3.9.4-12.el7_9.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7 Extended Lifecycle Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"],\"versions\":[{\"version\":\"0:4.0.3-35.el7_9.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8::appstream\",\"cpe:/a:redhat:enterprise_linux:8::crb\"],\"versions\":[{\"version\":\"0:4.0.9-37.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-libtiff3\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8::appstream\"],\"versions\":[{\"version\":\"0:3.9.4-15.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"mingw-libtiff\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8::crb\"],\"versions\":[{\"version\":\"0:4.0.9-4.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.4::appstream\",\"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"],\"versions\":[{\"version\":\"0:4.0.9-18.el8_4.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-libtiff3\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.4::appstream\",\"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"],\"versions\":[{\"version\":\"0:3.9.4-13.el8_4.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.4::appstream\",\"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"],\"versions\":[{\"version\":\"0:4.0.9-18.el8_4.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-libtiff3\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.4::appstream\",\"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"],\"versions\":[{\"version\":\"0:3.9.4-13.el8_4.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6::appstream\",\"cpe:/a:redhat:rhel_e4s:8.6::appstream\",\"cpe:/a:redhat:rhel_tus:8.6::appstream\"],\"versions\":[{\"version\":\"0:4.0.9-21.el8_6.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-libtiff3\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6::appstream\",\"cpe:/a:redhat:rhel_e4s:8.6::appstream\",\"cpe:/a:redhat:rhel_tus:8.6::appstream\"],\"versions\":[{\"version\":\"0:3.9.4-13.el8_6.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6::appstream\",\"cpe:/a:redhat:rhel_e4s:8.6::appstream\",\"cpe:/a:redhat:rhel_tus:8.6::appstream\"],\"versions\":[{\"version\":\"0:4.0.9-21.el8_6.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-libtiff3\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6::appstream\",\"cpe:/a:redhat:rhel_e4s:8.6::appstream\",\"cpe:/a:redhat:rhel_tus:8.6::appstream\"],\"versions\":[{\"version\":\"0:3.9.4-13.el8_6.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6::appstream\",\"cpe:/a:redhat:rhel_e4s:8.6::appstream\",\"cpe:/a:redhat:rhel_tus:8.6::appstream\"],\"versions\":[{\"version\":\"0:4.0.9-21.el8_6.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-libtiff3\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6::appstream\",\"cpe:/a:redhat:rhel_e4s:8.6::appstream\",\"cpe:/a:redhat:rhel_tus:8.6::appstream\"],\"versions\":[{\"version\":\"0:3.9.4-13.el8_6.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8::appstream\",\"cpe:/a:redhat:rhel_tus:8.8::appstream\"],\"versions\":[{\"version\":\"0:4.0.9-29.el8_8.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-libtiff3\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8::appstream\",\"cpe:/a:redhat:rhel_tus:8.8::appstream\"],\"versions\":[{\"version\":\"0:3.9.4-13.el8_8.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8::appstream\",\"cpe:/a:redhat:rhel_tus:8.8::appstream\"],\"versions\":[{\"version\":\"0:4.0.9-29.el8_8.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-libtiff3\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8::appstream\",\"cpe:/a:redhat:rhel_tus:8.8::appstream\"],\"versions\":[{\"version\":\"0:3.9.4-13.el8_8.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::appstream\",\"cpe:/a:redhat:enterprise_linux:9::crb\"],\"versions\":[{\"version\":\"0:4.4.0-15.el9_7.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::appstream\",\"cpe:/a:redhat:enterprise_linux:9::crb\"],\"versions\":[{\"version\":\"0:4.4.0-18.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.0::appstream\"],\"versions\":[{\"version\":\"0:4.2.0-3.el9_0.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"],\"versions\":[{\"version\":\"0:4.4.0-8.el9_2.5\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4::appstream\",\"cpe:/a:redhat:rhel_eus:9.4::crb\"],\"versions\":[{\"version\":\"0:4.4.0-12.el9_4.5\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6::appstream\",\"cpe:/a:redhat:rhel_eus:9.6::crb\"],\"versions\":[{\"version\":\"0:4.4.0-13.el9_6.4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhaiis/model-opt-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3.2::el9\"],\"versions\":[{\"version\":\"1780681984\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhaiis/model-opt-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3.3::el9\"],\"versions\":[{\"version\":\"1782352950\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhaiis/vllm-spyre-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3.3::el9\"],\"versions\":[{\"version\":\"1782352919\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhaiis/vllm-rocm-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3.3::el9\"],\"versions\":[{\"version\":\"1782353093\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhaiis/vllm-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3.3::el9\"],\"versions\":[{\"version\":\"1782352847\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"libtiff-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"4.7.1-2.2.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"libtiff-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"4.7.1-2.3.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:6\"]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.1\",\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:4.6.0-6.el10_1.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"0:4.6.0-8.el10_2.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:4.6.0-6.el10_0.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7 Extended Lifecycle Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-libtiff3\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"],\"versions\":[{\"version\":\"0:3.9.4-12.el7_9.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7 Extended Lifecycle Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"],\"versions\":[{\"version\":\"0:4.0.3-35.el7_9.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"0:4.0.9-37.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-libtiff3\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"0:3.9.4-15.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"mingw-libtiff\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8::crb\"],\"versions\":[{\"version\":\"0:4.0.9-4.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.4\"],\"versions\":[{\"version\":\"0:4.0.9-18.el8_4.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-libtiff3\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.4\"],\"versions\":[{\"version\":\"0:3.9.4-13.el8_4.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/a:redhat:rhel_eus_long_life:8.4\"],\"versions\":[{\"version\":\"0:4.0.9-18.el8_4.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-libtiff3\",\"cpes\":[\"cpe:/a:redhat:rhel_eus_long_life:8.4\"],\"versions\":[{\"version\":\"0:3.9.4-13.el8_4.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6\"],\"versions\":[{\"version\":\"0:4.0.9-21.el8_6.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-libtiff3\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6\"],\"versions\":[{\"version\":\"0:3.9.4-13.el8_6.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.6\"],\"versions\":[{\"version\":\"0:4.0.9-21.el8_6.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-libtiff3\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.6\"],\"versions\":[{\"version\":\"0:3.9.4-13.el8_6.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.6\"],\"versions\":[{\"version\":\"0:4.0.9-21.el8_6.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-libtiff3\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.6\"],\"versions\":[{\"version\":\"0:3.9.4-13.el8_6.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.8\"],\"versions\":[{\"version\":\"0:4.0.9-29.el8_8.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-libtiff3\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.8\"],\"versions\":[{\"version\":\"0:3.9.4-13.el8_8.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8\"],\"versions\":[{\"version\":\"0:4.0.9-29.el8_8.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-libtiff3\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8\"],\"versions\":[{\"version\":\"0:3.9.4-13.el8_8.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:4.4.0-15.el9_7.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"0:4.4.0-18.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.0\"],\"versions\":[{\"version\":\"0:4.2.0-3.el9_0.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2\"],\"versions\":[{\"version\":\"0:4.4.0-8.el9_2.5\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4\"],\"versions\":[{\"version\":\"0:4.4.0-12.el9_4.5\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:4.4.0-13.el9_6.4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhaiis/model-opt-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3.2::el9\"],\"versions\":[{\"version\":\"1780681984\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhaiis/model-opt-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3.3::el9\"],\"versions\":[{\"version\":\"1782352950\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhaiis/vllm-spyre-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3.3::el9\"],\"versions\":[{\"version\":\"1782352919\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhaiis/vllm-rocm-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3.3::el9\"],\"versions\":[{\"version\":\"1782353093\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhaiis/vllm-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3.3::el9\"],\"versions\":[{\"version\":\"1782352847\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"4.7.1-2.2.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"4.7.1-2.3.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"libtiff\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:6\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-03-24T00:00:00+00:00\",\"id\":\"CVE-2026-4775\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-190\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-190\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:libtiff:libtiff:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2FFD25C1-A304-486F-A36B-7167EEF33388\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:hardened_images:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"87DEB507-5B64-47D7-9A50-3B87FD1E571F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA6FEEC2-9F11-4643-8827-749718254FED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"142AD0DD-4CF3-4D74-9442-459CE3347E3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4CFF558-3C47-480D-A2F0-BABF26042943\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F6FB57C-2BC7-487C-96DD-132683AEB35D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D65C2163-CFC2-4ABB-8F4E-CB09CEBD006C\"}]}]}],\"references\":[{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12265\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12271\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:14929\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16055\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19150\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19363\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19585\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19586\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19604\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19608\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19609\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19657\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19659\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19702\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20583\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20585\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20591\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20592\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24992\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25096\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25910\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:30078\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:30087\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:30088\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:30089\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:30349\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33388\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-4775\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2450768\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2026/04/msg00016.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12265\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12271\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:14929\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16055\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19150\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19363\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19585\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19586\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19604\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19608\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19609\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19657\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19659\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19702\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20583\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20585\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20591\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20592\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24992\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25096\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25910\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:30078\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:30087\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:30088\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:30089\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:30349\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-4775\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2450768\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4775.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-06-30T03:43:39+00:00",
"cve": "CVE-2026-4775",
"id": "CVE-2026-4775",
"initial_release_date": "2026-03-24T14:33:35.730000+00:00",
"product_status:fixed": "620",
"product_status:known_affected": "4",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4775.json",
"version": "3"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://lists.debian.org/debian-lts-announce/2026/04/msg00016.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2026-04-17T16:20:28.027Z\"}}, {\"title\": \"libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.8, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux Server (v. 7 ELS)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux Server Optional (v. 7 ELS)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream EUS (v. 10.0)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.1\", \"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream (v. 10)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream (v. 8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream AUS (v.8.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream AUS (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_tus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream TUS (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.8.8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_tus:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream TUS (v.8.8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.0::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.9.0)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.9.2)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream EUS (v.9.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream EUS (v.9.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream (v. 9)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.1\", \"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux CRB (v. 8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat CodeReady Linux Builder EUS (v.9.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat CodeReady Linux Builder EUS (v.9.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.2\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.3\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 6\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-03-24T14:23:23.826Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-03-24T14:33:35.730Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:24992: Red Hat Enterprise Linux Server (v. 7 ELS)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25910: Red Hat Enterprise Linux Server (v. 7 ELS), Red Hat Enterprise Linux Server Optional (v. 7 ELS)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19586: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:12265: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19150: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20585: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:16055: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20583: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19659: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20591: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19657: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20592: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19604: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19608: Red Hat Enterprise Linux AppStream E4S (v.9.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19609: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19702: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19585: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:12271: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19363: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:14929: Red Hat Enterprise Linux CRB (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25096: Red Hat AI Inference Server 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:30078: Red Hat AI Inference Server 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:30089: Red Hat AI Inference Server 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:30088: Red Hat AI Inference Server 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:30087: Red Hat AI Inference Server 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:30349: Red Hat Hardened Images\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-03-24T14:33:35.730Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-4775\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2450768\", \"name\": \"RHBZ#2450768\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4775.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24992\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25910\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19586\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:12265\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19150\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20585\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16055\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20583\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19659\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20591\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19657\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20592\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19604\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19608\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19609\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19702\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19585\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:12271\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19363\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:14929\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25096\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:30078\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:30089\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:30088\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:30087\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:30349\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"To mitigate this issue, avoid processing untrusted or maliciously crafted TIFF files with applications linked against the libtiff library. If processing untrusted TIFF files is unavoidable, consider running the affected applications within a sandboxed environment to limit the potential impact of successful exploitation. This operational control helps contain the effects of an out-of-bounds write, reducing the risk of denial of service or arbitrary code execution.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-190\", \"description\": \"Integer Overflow or Wraparound\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-06-30T03:15:37.959Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-4775\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-03-24T15:07:35.223065Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-03-24T15:07:39.053Z\"}}], \"cna\": {\"title\": \"Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing\", \"credits\": [{\"lang\": \"en\", \"value\": \"Red Hat would like to thank PrymEvol and Quang Luong for reporting this issue.\"}], \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.8, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.6.0-6.el10_1.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libtiff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.6.0-8.el10_2.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libtiff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.6.0-6.el10_0.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libtiff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7 Extended Lifecycle Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.9.4-12.el7_9.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compat-libtiff3\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7 Extended Lifecycle Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.0.3-35.el7_9.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libtiff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::appstream\", \"cpe:/a:redhat:enterprise_linux:8::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.0.9-37.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libtiff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.9.4-15.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compat-libtiff3\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.0.9-4.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"mingw-libtiff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.0.9-18.el8_4.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libtiff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.9.4-13.el8_4.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compat-libtiff3\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.0.9-18.el8_4.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libtiff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.9.4-13.el8_4.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compat-libtiff3\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.0.9-21.el8_6.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libtiff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.9.4-13.el8_6.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compat-libtiff3\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.0.9-21.el8_6.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libtiff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.9.4-13.el8_6.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compat-libtiff3\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.0.9-21.el8_6.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libtiff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.9.4-13.el8_6.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compat-libtiff3\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::appstream\", \"cpe:/a:redhat:rhel_tus:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.0.9-29.el8_8.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libtiff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::appstream\", \"cpe:/a:redhat:rhel_tus:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.9.4-13.el8_8.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compat-libtiff3\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::appstream\", \"cpe:/a:redhat:rhel_tus:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.0.9-29.el8_8.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libtiff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::appstream\", \"cpe:/a:redhat:rhel_tus:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.9.4-13.el8_8.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compat-libtiff3\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\", \"cpe:/a:redhat:enterprise_linux:9::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.4.0-15.el9_7.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libtiff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\", \"cpe:/a:redhat:enterprise_linux:9::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.4.0-18.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libtiff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.0::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.2.0-3.el9_0.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libtiff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.4.0-8.el9_2.5\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libtiff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4::appstream\", \"cpe:/a:redhat:rhel_eus:9.4::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.4.0-12.el9_4.5\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libtiff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6::appstream\", \"cpe:/a:redhat:rhel_eus:9.6::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.4.0-13.el9_6.4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libtiff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780681984\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhaiis/model-opt-cuda-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782352950\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhaiis/model-opt-cuda-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782352919\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhaiis/vllm-spyre-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782353093\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhaiis/vllm-rocm-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782352847\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhaiis/vllm-cuda-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4.7.1-2.2.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libtiff-main\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4.7.1-2.3.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libtiff-main\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 6\", \"packageName\": \"libtiff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-03-24T14:23:23.826Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-03-24T14:33:35.730Z\", \"value\": \"Made public.\"}], \"datePublic\": \"2026-03-24T14:33:35.730Z\", \"references\": [{\"url\": \"https://access.redhat.com/errata/RHSA-2026:12265\", \"name\": \"RHSA-2026:12265\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:12271\", \"name\": \"RHSA-2026:12271\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:14929\", \"name\": \"RHSA-2026:14929\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16055\", \"name\": \"RHSA-2026:16055\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19150\", \"name\": \"RHSA-2026:19150\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19363\", \"name\": \"RHSA-2026:19363\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19585\", \"name\": \"RHSA-2026:19585\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19586\", \"name\": \"RHSA-2026:19586\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19604\", \"name\": \"RHSA-2026:19604\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19608\", \"name\": \"RHSA-2026:19608\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19609\", \"name\": \"RHSA-2026:19609\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19657\", \"name\": \"RHSA-2026:19657\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19659\", \"name\": \"RHSA-2026:19659\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19702\", \"name\": \"RHSA-2026:19702\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20583\", \"name\": \"RHSA-2026:20583\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20585\", \"name\": \"RHSA-2026:20585\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20591\", \"name\": \"RHSA-2026:20591\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20592\", \"name\": \"RHSA-2026:20592\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24992\", \"name\": \"RHSA-2026:24992\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25096\", \"name\": \"RHSA-2026:25096\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25910\", \"name\": \"RHSA-2026:25910\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:30078\", \"name\": \"RHSA-2026:30078\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:30087\", \"name\": \"RHSA-2026:30087\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:30088\", \"name\": \"RHSA-2026:30088\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:30089\", \"name\": \"RHSA-2026:30089\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:30349\", \"name\": \"RHSA-2026:30349\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33388\", \"name\": \"RHSA-2026:33388\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/security/cve/CVE-2026-4775\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2450768\", \"name\": \"RHBZ#2450768\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"To mitigate this issue, avoid processing untrusted or maliciously crafted TIFF files with applications linked against the libtiff library. If processing untrusted TIFF files is unavoidable, consider running the affected applications within a sandboxed environment to limit the potential impact of successful exploitation. This operational control helps contain the effects of an out-of-bounds write, reducing the risk of denial of service or arbitrary code execution.\"}], \"x_generator\": {\"engine\": \"cvelib 1.8.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-190\", \"description\": \"Integer Overflow or Wraparound\"}]}], \"providerMetadata\": {\"orgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"shortName\": \"redhat\", \"dateUpdated\": \"2026-06-30T02:04:55.873Z\"}, \"x_redhatCweChain\": \"CWE-190: Integer Overflow or Wraparound\"}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-4775\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-06-30T03:15:37.959Z\", \"dateReserved\": \"2026-03-24T14:26:05.988Z\", \"assignerOrgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"datePublished\": \"2026-03-24T14:42:47.529Z\", \"assignerShortName\": \"redhat\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
OPENSUSE-SU-2026:10650-1
Vulnerability from csaf_opensuse - Published: 2026-04-28 00:00 - Updated: 2026-04-28 00:00Summary
libtiff-devel-32bit-4.7.1-5.1 on GA media
Severity
Moderate
Notes
Title of the patch: libtiff-devel-32bit-4.7.1-5.1 on GA media
Description of the patch: These are all security issues fixed in the libtiff-devel-32bit-4.7.1-5.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-10650
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
8.6 (High)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:libtiff-devel-32bit-4.7.1-5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libtiff-devel-32bit-4.7.1-5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libtiff-devel-32bit-4.7.1-5.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libtiff-devel-32bit-4.7.1-5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libtiff-devel-4.7.1-5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libtiff-devel-4.7.1-5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libtiff-devel-4.7.1-5.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libtiff-devel-4.7.1-5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libtiff6-32bit-4.7.1-5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libtiff6-32bit-4.7.1-5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libtiff6-32bit-4.7.1-5.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libtiff6-32bit-4.7.1-5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libtiff6-4.7.1-5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libtiff6-4.7.1-5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libtiff6-4.7.1-5.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libtiff6-4.7.1-5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tiff-4.7.1-5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tiff-4.7.1-5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tiff-4.7.1-5.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tiff-4.7.1-5.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
5 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "libtiff-devel-32bit-4.7.1-5.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the libtiff-devel-32bit-4.7.1-5.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-10650",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10650-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4775 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4775/"
}
],
"title": "libtiff-devel-32bit-4.7.1-5.1 on GA media",
"tracking": {
"current_release_date": "2026-04-28T00:00:00Z",
"generator": {
"date": "2026-04-28T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:10650-1",
"initial_release_date": "2026-04-28T00:00:00Z",
"revision_history": [
{
"date": "2026-04-28T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libtiff-devel-4.7.1-5.1.aarch64",
"product": {
"name": "libtiff-devel-4.7.1-5.1.aarch64",
"product_id": "libtiff-devel-4.7.1-5.1.aarch64"
}
},
{
"category": "product_version",
"name": "libtiff-devel-32bit-4.7.1-5.1.aarch64",
"product": {
"name": "libtiff-devel-32bit-4.7.1-5.1.aarch64",
"product_id": "libtiff-devel-32bit-4.7.1-5.1.aarch64"
}
},
{
"category": "product_version",
"name": "libtiff6-4.7.1-5.1.aarch64",
"product": {
"name": "libtiff6-4.7.1-5.1.aarch64",
"product_id": "libtiff6-4.7.1-5.1.aarch64"
}
},
{
"category": "product_version",
"name": "libtiff6-32bit-4.7.1-5.1.aarch64",
"product": {
"name": "libtiff6-32bit-4.7.1-5.1.aarch64",
"product_id": "libtiff6-32bit-4.7.1-5.1.aarch64"
}
},
{
"category": "product_version",
"name": "tiff-4.7.1-5.1.aarch64",
"product": {
"name": "tiff-4.7.1-5.1.aarch64",
"product_id": "tiff-4.7.1-5.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-devel-4.7.1-5.1.ppc64le",
"product": {
"name": "libtiff-devel-4.7.1-5.1.ppc64le",
"product_id": "libtiff-devel-4.7.1-5.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libtiff-devel-32bit-4.7.1-5.1.ppc64le",
"product": {
"name": "libtiff-devel-32bit-4.7.1-5.1.ppc64le",
"product_id": "libtiff-devel-32bit-4.7.1-5.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libtiff6-4.7.1-5.1.ppc64le",
"product": {
"name": "libtiff6-4.7.1-5.1.ppc64le",
"product_id": "libtiff6-4.7.1-5.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libtiff6-32bit-4.7.1-5.1.ppc64le",
"product": {
"name": "libtiff6-32bit-4.7.1-5.1.ppc64le",
"product_id": "libtiff6-32bit-4.7.1-5.1.ppc64le"
}
},
{
"category": "product_version",
"name": "tiff-4.7.1-5.1.ppc64le",
"product": {
"name": "tiff-4.7.1-5.1.ppc64le",
"product_id": "tiff-4.7.1-5.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-devel-4.7.1-5.1.s390x",
"product": {
"name": "libtiff-devel-4.7.1-5.1.s390x",
"product_id": "libtiff-devel-4.7.1-5.1.s390x"
}
},
{
"category": "product_version",
"name": "libtiff-devel-32bit-4.7.1-5.1.s390x",
"product": {
"name": "libtiff-devel-32bit-4.7.1-5.1.s390x",
"product_id": "libtiff-devel-32bit-4.7.1-5.1.s390x"
}
},
{
"category": "product_version",
"name": "libtiff6-4.7.1-5.1.s390x",
"product": {
"name": "libtiff6-4.7.1-5.1.s390x",
"product_id": "libtiff6-4.7.1-5.1.s390x"
}
},
{
"category": "product_version",
"name": "libtiff6-32bit-4.7.1-5.1.s390x",
"product": {
"name": "libtiff6-32bit-4.7.1-5.1.s390x",
"product_id": "libtiff6-32bit-4.7.1-5.1.s390x"
}
},
{
"category": "product_version",
"name": "tiff-4.7.1-5.1.s390x",
"product": {
"name": "tiff-4.7.1-5.1.s390x",
"product_id": "tiff-4.7.1-5.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-devel-4.7.1-5.1.x86_64",
"product": {
"name": "libtiff-devel-4.7.1-5.1.x86_64",
"product_id": "libtiff-devel-4.7.1-5.1.x86_64"
}
},
{
"category": "product_version",
"name": "libtiff-devel-32bit-4.7.1-5.1.x86_64",
"product": {
"name": "libtiff-devel-32bit-4.7.1-5.1.x86_64",
"product_id": "libtiff-devel-32bit-4.7.1-5.1.x86_64"
}
},
{
"category": "product_version",
"name": "libtiff6-4.7.1-5.1.x86_64",
"product": {
"name": "libtiff6-4.7.1-5.1.x86_64",
"product_id": "libtiff6-4.7.1-5.1.x86_64"
}
},
{
"category": "product_version",
"name": "libtiff6-32bit-4.7.1-5.1.x86_64",
"product": {
"name": "libtiff6-32bit-4.7.1-5.1.x86_64",
"product_id": "libtiff6-32bit-4.7.1-5.1.x86_64"
}
},
{
"category": "product_version",
"name": "tiff-4.7.1-5.1.x86_64",
"product": {
"name": "tiff-4.7.1-5.1.x86_64",
"product_id": "tiff-4.7.1-5.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-4.7.1-5.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libtiff-devel-4.7.1-5.1.aarch64"
},
"product_reference": "libtiff-devel-4.7.1-5.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-4.7.1-5.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libtiff-devel-4.7.1-5.1.ppc64le"
},
"product_reference": "libtiff-devel-4.7.1-5.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-4.7.1-5.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libtiff-devel-4.7.1-5.1.s390x"
},
"product_reference": "libtiff-devel-4.7.1-5.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-4.7.1-5.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libtiff-devel-4.7.1-5.1.x86_64"
},
"product_reference": "libtiff-devel-4.7.1-5.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-32bit-4.7.1-5.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libtiff-devel-32bit-4.7.1-5.1.aarch64"
},
"product_reference": "libtiff-devel-32bit-4.7.1-5.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-32bit-4.7.1-5.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libtiff-devel-32bit-4.7.1-5.1.ppc64le"
},
"product_reference": "libtiff-devel-32bit-4.7.1-5.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-32bit-4.7.1-5.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libtiff-devel-32bit-4.7.1-5.1.s390x"
},
"product_reference": "libtiff-devel-32bit-4.7.1-5.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-32bit-4.7.1-5.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libtiff-devel-32bit-4.7.1-5.1.x86_64"
},
"product_reference": "libtiff-devel-32bit-4.7.1-5.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff6-4.7.1-5.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libtiff6-4.7.1-5.1.aarch64"
},
"product_reference": "libtiff6-4.7.1-5.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff6-4.7.1-5.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libtiff6-4.7.1-5.1.ppc64le"
},
"product_reference": "libtiff6-4.7.1-5.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff6-4.7.1-5.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libtiff6-4.7.1-5.1.s390x"
},
"product_reference": "libtiff6-4.7.1-5.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff6-4.7.1-5.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libtiff6-4.7.1-5.1.x86_64"
},
"product_reference": "libtiff6-4.7.1-5.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff6-32bit-4.7.1-5.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libtiff6-32bit-4.7.1-5.1.aarch64"
},
"product_reference": "libtiff6-32bit-4.7.1-5.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff6-32bit-4.7.1-5.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libtiff6-32bit-4.7.1-5.1.ppc64le"
},
"product_reference": "libtiff6-32bit-4.7.1-5.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff6-32bit-4.7.1-5.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libtiff6-32bit-4.7.1-5.1.s390x"
},
"product_reference": "libtiff6-32bit-4.7.1-5.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff6-32bit-4.7.1-5.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libtiff6-32bit-4.7.1-5.1.x86_64"
},
"product_reference": "libtiff6-32bit-4.7.1-5.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tiff-4.7.1-5.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:tiff-4.7.1-5.1.aarch64"
},
"product_reference": "tiff-4.7.1-5.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tiff-4.7.1-5.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:tiff-4.7.1-5.1.ppc64le"
},
"product_reference": "tiff-4.7.1-5.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tiff-4.7.1-5.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:tiff-4.7.1-5.1.s390x"
},
"product_reference": "tiff-4.7.1-5.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tiff-4.7.1-5.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:tiff-4.7.1-5.1.x86_64"
},
"product_reference": "tiff-4.7.1-5.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-4775",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4775"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libtiff-devel-32bit-4.7.1-5.1.aarch64",
"openSUSE Tumbleweed:libtiff-devel-32bit-4.7.1-5.1.ppc64le",
"openSUSE Tumbleweed:libtiff-devel-32bit-4.7.1-5.1.s390x",
"openSUSE Tumbleweed:libtiff-devel-32bit-4.7.1-5.1.x86_64",
"openSUSE Tumbleweed:libtiff-devel-4.7.1-5.1.aarch64",
"openSUSE Tumbleweed:libtiff-devel-4.7.1-5.1.ppc64le",
"openSUSE Tumbleweed:libtiff-devel-4.7.1-5.1.s390x",
"openSUSE Tumbleweed:libtiff-devel-4.7.1-5.1.x86_64",
"openSUSE Tumbleweed:libtiff6-32bit-4.7.1-5.1.aarch64",
"openSUSE Tumbleweed:libtiff6-32bit-4.7.1-5.1.ppc64le",
"openSUSE Tumbleweed:libtiff6-32bit-4.7.1-5.1.s390x",
"openSUSE Tumbleweed:libtiff6-32bit-4.7.1-5.1.x86_64",
"openSUSE Tumbleweed:libtiff6-4.7.1-5.1.aarch64",
"openSUSE Tumbleweed:libtiff6-4.7.1-5.1.ppc64le",
"openSUSE Tumbleweed:libtiff6-4.7.1-5.1.s390x",
"openSUSE Tumbleweed:libtiff6-4.7.1-5.1.x86_64",
"openSUSE Tumbleweed:tiff-4.7.1-5.1.aarch64",
"openSUSE Tumbleweed:tiff-4.7.1-5.1.ppc64le",
"openSUSE Tumbleweed:tiff-4.7.1-5.1.s390x",
"openSUSE Tumbleweed:tiff-4.7.1-5.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4775",
"url": "https://www.suse.com/security/cve/CVE-2026-4775"
},
{
"category": "external",
"summary": "SUSE Bug 1260411 for CVE-2026-4775",
"url": "https://bugzilla.suse.com/1260411"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libtiff-devel-32bit-4.7.1-5.1.aarch64",
"openSUSE Tumbleweed:libtiff-devel-32bit-4.7.1-5.1.ppc64le",
"openSUSE Tumbleweed:libtiff-devel-32bit-4.7.1-5.1.s390x",
"openSUSE Tumbleweed:libtiff-devel-32bit-4.7.1-5.1.x86_64",
"openSUSE Tumbleweed:libtiff-devel-4.7.1-5.1.aarch64",
"openSUSE Tumbleweed:libtiff-devel-4.7.1-5.1.ppc64le",
"openSUSE Tumbleweed:libtiff-devel-4.7.1-5.1.s390x",
"openSUSE Tumbleweed:libtiff-devel-4.7.1-5.1.x86_64",
"openSUSE Tumbleweed:libtiff6-32bit-4.7.1-5.1.aarch64",
"openSUSE Tumbleweed:libtiff6-32bit-4.7.1-5.1.ppc64le",
"openSUSE Tumbleweed:libtiff6-32bit-4.7.1-5.1.s390x",
"openSUSE Tumbleweed:libtiff6-32bit-4.7.1-5.1.x86_64",
"openSUSE Tumbleweed:libtiff6-4.7.1-5.1.aarch64",
"openSUSE Tumbleweed:libtiff6-4.7.1-5.1.ppc64le",
"openSUSE Tumbleweed:libtiff6-4.7.1-5.1.s390x",
"openSUSE Tumbleweed:libtiff6-4.7.1-5.1.x86_64",
"openSUSE Tumbleweed:tiff-4.7.1-5.1.aarch64",
"openSUSE Tumbleweed:tiff-4.7.1-5.1.ppc64le",
"openSUSE Tumbleweed:tiff-4.7.1-5.1.s390x",
"openSUSE Tumbleweed:tiff-4.7.1-5.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libtiff-devel-32bit-4.7.1-5.1.aarch64",
"openSUSE Tumbleweed:libtiff-devel-32bit-4.7.1-5.1.ppc64le",
"openSUSE Tumbleweed:libtiff-devel-32bit-4.7.1-5.1.s390x",
"openSUSE Tumbleweed:libtiff-devel-32bit-4.7.1-5.1.x86_64",
"openSUSE Tumbleweed:libtiff-devel-4.7.1-5.1.aarch64",
"openSUSE Tumbleweed:libtiff-devel-4.7.1-5.1.ppc64le",
"openSUSE Tumbleweed:libtiff-devel-4.7.1-5.1.s390x",
"openSUSE Tumbleweed:libtiff-devel-4.7.1-5.1.x86_64",
"openSUSE Tumbleweed:libtiff6-32bit-4.7.1-5.1.aarch64",
"openSUSE Tumbleweed:libtiff6-32bit-4.7.1-5.1.ppc64le",
"openSUSE Tumbleweed:libtiff6-32bit-4.7.1-5.1.s390x",
"openSUSE Tumbleweed:libtiff6-32bit-4.7.1-5.1.x86_64",
"openSUSE Tumbleweed:libtiff6-4.7.1-5.1.aarch64",
"openSUSE Tumbleweed:libtiff6-4.7.1-5.1.ppc64le",
"openSUSE Tumbleweed:libtiff6-4.7.1-5.1.s390x",
"openSUSE Tumbleweed:libtiff6-4.7.1-5.1.x86_64",
"openSUSE Tumbleweed:tiff-4.7.1-5.1.aarch64",
"openSUSE Tumbleweed:tiff-4.7.1-5.1.ppc64le",
"openSUSE Tumbleweed:tiff-4.7.1-5.1.s390x",
"openSUSE Tumbleweed:tiff-4.7.1-5.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-4775"
}
]
}
OPENSUSE-SU-2026:11261-1
Vulnerability from csaf_opensuse - Published: 2026-07-12 00:00 - Updated: 2026-07-12 00:00Summary
python313-Pillow-12.3.0-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: python313-Pillow-12.3.0-1.1 on GA media
Description of the patch: These are all security issues fixed in the python313-Pillow-12.3.0-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-11261
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.1 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.1 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.8 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.1 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
9.8 (Critical)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.4 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.3 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.6 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
80 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "python313-Pillow-12.3.0-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the python313-Pillow-12.3.0-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-11261",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11261-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3589 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3589/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3598 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3598/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0740 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0740/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-0775 page",
"url": "https://www.suse.com/security/cve/CVE-2016-0775/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-3076 page",
"url": "https://www.suse.com/security/cve/CVE-2016-3076/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15999 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15999/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-35653 page",
"url": "https://www.suse.com/security/cve/CVE-2020-35653/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-35654 page",
"url": "https://www.suse.com/security/cve/CVE-2020-35654/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-35655 page",
"url": "https://www.suse.com/security/cve/CVE-2020-35655/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-23437 page",
"url": "https://www.suse.com/security/cve/CVE-2021-23437/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-25289 page",
"url": "https://www.suse.com/security/cve/CVE-2021-25289/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-25290 page",
"url": "https://www.suse.com/security/cve/CVE-2021-25290/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-25291 page",
"url": "https://www.suse.com/security/cve/CVE-2021-25291/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-25292 page",
"url": "https://www.suse.com/security/cve/CVE-2021-25292/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-25293 page",
"url": "https://www.suse.com/security/cve/CVE-2021-25293/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-27921 page",
"url": "https://www.suse.com/security/cve/CVE-2021-27921/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-34552 page",
"url": "https://www.suse.com/security/cve/CVE-2021-34552/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-44271 page",
"url": "https://www.suse.com/security/cve/CVE-2023-44271/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-50447 page",
"url": "https://www.suse.com/security/cve/CVE-2023-50447/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-28219 page",
"url": "https://www.suse.com/security/cve/CVE-2024-28219/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-42311 page",
"url": "https://www.suse.com/security/cve/CVE-2026-42311/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4775 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4775/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-54059 page",
"url": "https://www.suse.com/security/cve/CVE-2026-54059/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-55379 page",
"url": "https://www.suse.com/security/cve/CVE-2026-55379/"
}
],
"title": "python313-Pillow-12.3.0-1.1 on GA media",
"tracking": {
"current_release_date": "2026-07-12T00:00:00Z",
"generator": {
"date": "2026-07-12T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:11261-1",
"initial_release_date": "2026-07-12T00:00:00Z",
"revision_history": [
{
"date": "2026-07-12T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "python313-Pillow-12.3.0-1.1.aarch64",
"product": {
"name": "python313-Pillow-12.3.0-1.1.aarch64",
"product_id": "python313-Pillow-12.3.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "python313-Pillow-tk-12.3.0-1.1.aarch64",
"product": {
"name": "python313-Pillow-tk-12.3.0-1.1.aarch64",
"product_id": "python313-Pillow-tk-12.3.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "python314-Pillow-12.3.0-1.1.aarch64",
"product": {
"name": "python314-Pillow-12.3.0-1.1.aarch64",
"product_id": "python314-Pillow-12.3.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "python314-Pillow-tk-12.3.0-1.1.aarch64",
"product": {
"name": "python314-Pillow-tk-12.3.0-1.1.aarch64",
"product_id": "python314-Pillow-tk-12.3.0-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "python313-Pillow-12.3.0-1.1.ppc64le",
"product": {
"name": "python313-Pillow-12.3.0-1.1.ppc64le",
"product_id": "python313-Pillow-12.3.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python313-Pillow-tk-12.3.0-1.1.ppc64le",
"product": {
"name": "python313-Pillow-tk-12.3.0-1.1.ppc64le",
"product_id": "python313-Pillow-tk-12.3.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python314-Pillow-12.3.0-1.1.ppc64le",
"product": {
"name": "python314-Pillow-12.3.0-1.1.ppc64le",
"product_id": "python314-Pillow-12.3.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python314-Pillow-tk-12.3.0-1.1.ppc64le",
"product": {
"name": "python314-Pillow-tk-12.3.0-1.1.ppc64le",
"product_id": "python314-Pillow-tk-12.3.0-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "python313-Pillow-12.3.0-1.1.s390x",
"product": {
"name": "python313-Pillow-12.3.0-1.1.s390x",
"product_id": "python313-Pillow-12.3.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "python313-Pillow-tk-12.3.0-1.1.s390x",
"product": {
"name": "python313-Pillow-tk-12.3.0-1.1.s390x",
"product_id": "python313-Pillow-tk-12.3.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "python314-Pillow-12.3.0-1.1.s390x",
"product": {
"name": "python314-Pillow-12.3.0-1.1.s390x",
"product_id": "python314-Pillow-12.3.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "python314-Pillow-tk-12.3.0-1.1.s390x",
"product": {
"name": "python314-Pillow-tk-12.3.0-1.1.s390x",
"product_id": "python314-Pillow-tk-12.3.0-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "python313-Pillow-12.3.0-1.1.x86_64",
"product": {
"name": "python313-Pillow-12.3.0-1.1.x86_64",
"product_id": "python313-Pillow-12.3.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "python313-Pillow-tk-12.3.0-1.1.x86_64",
"product": {
"name": "python313-Pillow-tk-12.3.0-1.1.x86_64",
"product_id": "python313-Pillow-tk-12.3.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "python314-Pillow-12.3.0-1.1.x86_64",
"product": {
"name": "python314-Pillow-12.3.0-1.1.x86_64",
"product_id": "python314-Pillow-12.3.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "python314-Pillow-tk-12.3.0-1.1.x86_64",
"product": {
"name": "python314-Pillow-tk-12.3.0-1.1.x86_64",
"product_id": "python314-Pillow-tk-12.3.0-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-Pillow-12.3.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64"
},
"product_reference": "python313-Pillow-12.3.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-Pillow-12.3.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le"
},
"product_reference": "python313-Pillow-12.3.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-Pillow-12.3.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x"
},
"product_reference": "python313-Pillow-12.3.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-Pillow-12.3.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64"
},
"product_reference": "python313-Pillow-12.3.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-Pillow-tk-12.3.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64"
},
"product_reference": "python313-Pillow-tk-12.3.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-Pillow-tk-12.3.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le"
},
"product_reference": "python313-Pillow-tk-12.3.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-Pillow-tk-12.3.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x"
},
"product_reference": "python313-Pillow-tk-12.3.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-Pillow-tk-12.3.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64"
},
"product_reference": "python313-Pillow-tk-12.3.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python314-Pillow-12.3.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64"
},
"product_reference": "python314-Pillow-12.3.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python314-Pillow-12.3.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le"
},
"product_reference": "python314-Pillow-12.3.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python314-Pillow-12.3.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x"
},
"product_reference": "python314-Pillow-12.3.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python314-Pillow-12.3.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64"
},
"product_reference": "python314-Pillow-12.3.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python314-Pillow-tk-12.3.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64"
},
"product_reference": "python314-Pillow-tk-12.3.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python314-Pillow-tk-12.3.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le"
},
"product_reference": "python314-Pillow-tk-12.3.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python314-Pillow-tk-12.3.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x"
},
"product_reference": "python314-Pillow-tk-12.3.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python314-Pillow-tk-12.3.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
},
"product_reference": "python314-Pillow-tk-12.3.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-3589",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3589"
}
],
"notes": [
{
"category": "general",
"text": "PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3589",
"url": "https://www.suse.com/security/cve/CVE-2014-3589"
},
{
"category": "external",
"summary": "SUSE Bug 921566 for CVE-2014-3589",
"url": "https://bugzilla.suse.com/921566"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-3589"
},
{
"cve": "CVE-2014-3598",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3598"
}
],
"notes": [
{
"category": "general",
"text": "The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3598",
"url": "https://www.suse.com/security/cve/CVE-2014-3598"
},
{
"category": "external",
"summary": "SUSE Bug 921566 for CVE-2014-3598",
"url": "https://bugzilla.suse.com/921566"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-3598"
},
{
"cve": "CVE-2016-0740",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0740"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0740",
"url": "https://www.suse.com/security/cve/CVE-2016-0740"
},
{
"category": "external",
"summary": "SUSE Bug 965579 for CVE-2016-0740",
"url": "https://bugzilla.suse.com/965579"
},
{
"category": "external",
"summary": "SUSE Bug 965582 for CVE-2016-0740",
"url": "https://bugzilla.suse.com/965582"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-0740"
},
{
"cve": "CVE-2016-0775",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-0775"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a crafted FLI file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-0775",
"url": "https://www.suse.com/security/cve/CVE-2016-0775"
},
{
"category": "external",
"summary": "SUSE Bug 965579 for CVE-2016-0775",
"url": "https://bugzilla.suse.com/965579"
},
{
"category": "external",
"summary": "SUSE Bug 965582 for CVE-2016-0775",
"url": "https://bugzilla.suse.com/965582"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-0775"
},
{
"cve": "CVE-2016-3076",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-3076"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted Jpeg2000 file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-3076",
"url": "https://www.suse.com/security/cve/CVE-2016-3076"
},
{
"category": "external",
"summary": "SUSE Bug 973786 for CVE-2016-3076",
"url": "https://bugzilla.suse.com/973786"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-3076"
},
{
"cve": "CVE-2020-15999",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15999"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15999",
"url": "https://www.suse.com/security/cve/CVE-2020-15999"
},
{
"category": "external",
"summary": "SUSE Bug 1177914 for CVE-2020-15999",
"url": "https://bugzilla.suse.com/1177914"
},
{
"category": "external",
"summary": "SUSE Bug 1177936 for CVE-2020-15999",
"url": "https://bugzilla.suse.com/1177936"
},
{
"category": "external",
"summary": "SUSE Bug 1178824 for CVE-2020-15999",
"url": "https://bugzilla.suse.com/1178824"
},
{
"category": "external",
"summary": "SUSE Bug 1178894 for CVE-2020-15999",
"url": "https://bugzilla.suse.com/1178894"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-15999"
},
{
"cve": "CVE-2020-35653",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-35653"
}
],
"notes": [
{
"category": "general",
"text": "In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-35653",
"url": "https://www.suse.com/security/cve/CVE-2020-35653"
},
{
"category": "external",
"summary": "SUSE Bug 1180834 for CVE-2020-35653",
"url": "https://bugzilla.suse.com/1180834"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-35653"
},
{
"cve": "CVE-2020-35654",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-35654"
}
],
"notes": [
{
"category": "general",
"text": "In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-35654",
"url": "https://www.suse.com/security/cve/CVE-2020-35654"
},
{
"category": "external",
"summary": "SUSE Bug 1180833 for CVE-2020-35654",
"url": "https://bugzilla.suse.com/1180833"
},
{
"category": "external",
"summary": "SUSE Bug 1183103 for CVE-2020-35654",
"url": "https://bugzilla.suse.com/1183103"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-35654"
},
{
"cve": "CVE-2020-35655",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-35655"
}
],
"notes": [
{
"category": "general",
"text": "In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-35655",
"url": "https://www.suse.com/security/cve/CVE-2020-35655"
},
{
"category": "external",
"summary": "SUSE Bug 1180832 for CVE-2020-35655",
"url": "https://bugzilla.suse.com/1180832"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2020-35655"
},
{
"cve": "CVE-2021-23437",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-23437"
}
],
"notes": [
{
"category": "general",
"text": "The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-23437",
"url": "https://www.suse.com/security/cve/CVE-2021-23437"
},
{
"category": "external",
"summary": "SUSE Bug 1190229 for CVE-2021-23437",
"url": "https://bugzilla.suse.com/1190229"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-23437"
},
{
"cve": "CVE-2021-25289",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-25289"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-25289",
"url": "https://www.suse.com/security/cve/CVE-2021-25289"
},
{
"category": "external",
"summary": "SUSE Bug 1183103 for CVE-2021-25289",
"url": "https://bugzilla.suse.com/1183103"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-12T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2021-25289"
},
{
"cve": "CVE-2021-25290",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-25290"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-25290",
"url": "https://www.suse.com/security/cve/CVE-2021-25290"
},
{
"category": "external",
"summary": "SUSE Bug 1183105 for CVE-2021-25290",
"url": "https://bugzilla.suse.com/1183105"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-25290"
},
{
"cve": "CVE-2021-25291",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-25291"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is an out-of-bounds read in TiffreadRGBATile via invalid tile boundaries.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-25291",
"url": "https://www.suse.com/security/cve/CVE-2021-25291"
},
{
"category": "external",
"summary": "SUSE Bug 1183106 for CVE-2021-25291",
"url": "https://bugzilla.suse.com/1183106"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-25291"
},
{
"cve": "CVE-2021-25292",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-25292"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS (ReDoS) attack via a crafted PDF file because of a catastrophic backtracking regex.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-25292",
"url": "https://www.suse.com/security/cve/CVE-2021-25292"
},
{
"category": "external",
"summary": "SUSE Bug 1183101 for CVE-2021-25292",
"url": "https://bugzilla.suse.com/1183101"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-25292"
},
{
"cve": "CVE-2021-25293",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-25293"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Pillow before 8.1.1. There is an out-of-bounds read in SGIRleDecode.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-25293",
"url": "https://www.suse.com/security/cve/CVE-2021-25293"
},
{
"category": "external",
"summary": "SUSE Bug 1183102 for CVE-2021-25293",
"url": "https://bugzilla.suse.com/1183102"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-25293"
},
{
"cve": "CVE-2021-27921",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-27921"
}
],
"notes": [
{
"category": "general",
"text": "Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for a BLP container, and thus an attempted memory allocation can be very large.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-27921",
"url": "https://www.suse.com/security/cve/CVE-2021-27921"
},
{
"category": "external",
"summary": "SUSE Bug 1183110 for CVE-2021-27921",
"url": "https://bugzilla.suse.com/1183110"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-27921"
},
{
"cve": "CVE-2021-34552",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-34552"
}
],
"notes": [
{
"category": "general",
"text": "Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-34552",
"url": "https://www.suse.com/security/cve/CVE-2021-34552"
},
{
"category": "external",
"summary": "SUSE Bug 1188574 for CVE-2021-34552",
"url": "https://bugzilla.suse.com/1188574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-34552"
},
{
"cve": "CVE-2023-44271",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-44271"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for truetype in ImageFont when textlength in an ImageDraw instance operates on a long text argument.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-44271",
"url": "https://www.suse.com/security/cve/CVE-2023-44271"
},
{
"category": "external",
"summary": "SUSE Bug 1216894 for CVE-2023-44271",
"url": "https://bugzilla.suse.com/1216894"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-44271"
},
{
"cve": "CVE-2023-50447",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-50447"
}
],
"notes": [
{
"category": "general",
"text": "Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than CVE-2022-22817 (which was about the expression parameter).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-50447",
"url": "https://www.suse.com/security/cve/CVE-2023-50447"
},
{
"category": "external",
"summary": "SUSE Bug 1219048 for CVE-2023-50447",
"url": "https://bugzilla.suse.com/1219048"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-50447"
},
{
"cve": "CVE-2024-28219",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-28219"
}
],
"notes": [
{
"category": "general",
"text": "In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-28219",
"url": "https://www.suse.com/security/cve/CVE-2024-28219"
},
{
"category": "external",
"summary": "SUSE Bug 1222262 for CVE-2024-28219",
"url": "https://bugzilla.suse.com/1222262"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-28219"
},
{
"cve": "CVE-2026-42311",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-42311"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code execution. This issue has been patched in version 12.2.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-42311",
"url": "https://www.suse.com/security/cve/CVE-2026-42311"
},
{
"category": "external",
"summary": "SUSE Bug 1270404 for CVE-2026-42311",
"url": "https://bugzilla.suse.com/1270404"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-42311"
},
{
"cve": "CVE-2026-4775",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4775"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4775",
"url": "https://www.suse.com/security/cve/CVE-2026-4775"
},
{
"category": "external",
"summary": "SUSE Bug 1260411 for CVE-2026-4775",
"url": "https://bugzilla.suse.com/1260411"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-4775"
},
{
"cve": "CVE-2026-54059",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-54059"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py _load_bitmaps() read glyph dimensions from the PCF METRICS section and passed them directly to Image.frombytes() without calling Image._decompression_bomb_check(), allowing crafted PCF font data to cause excessive memory allocation. This issue is fixed in version 12.3.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-54059",
"url": "https://www.suse.com/security/cve/CVE-2026-54059"
},
{
"category": "external",
"summary": "SUSE Bug 1270409 for CVE-2026-54059",
"url": "https://bugzilla.suse.com/1270409"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-54059"
},
{
"cve": "CVE-2026-55379",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-55379"
}
],
"notes": [
{
"category": "general",
"text": "Pillow is a Python imaging library. Prior to 12.3.0, PIL/BdfFontFile.py bdf_char() read the BBX width and height field from a BDF font file and passed attacker-controlled dimensions to Image.new() without calling Image._decompression_bomb_check(), bypassing Pillow\u0027s documented decompression bomb protection and allowing excessive memory allocation. This issue is fixed in version 12.3.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-55379",
"url": "https://www.suse.com/security/cve/CVE-2026-55379"
},
{
"category": "external",
"summary": "SUSE Bug 1270411 for CVE-2026-55379",
"url": "https://bugzilla.suse.com/1270411"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python313-Pillow-tk-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-12.3.0-1.1.x86_64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.aarch64",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.ppc64le",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.s390x",
"openSUSE Tumbleweed:python314-Pillow-tk-12.3.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-55379"
}
]
}
RHSA-2026:12265
Vulnerability from csaf_redhat - Published: 2026-04-30 12:26 - Updated: 2026-06-30 04:20Summary
Red Hat Security Advisory: libtiff security update
Severity
Important
Notes
Topic: An update for libtiff is now available for Red Hat Enterprise Linux 10.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.
Security Fix(es):
* libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.
7.8 (High)
Affected products
Fixed
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:libtiff-devel-0:4.6.0-6.el10_1.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:libtiff-devel-0:4.6.0-6.el10_1.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:libtiff-devel-0:4.6.0-6.el10_1.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:libtiff-devel-0:4.6.0-6.el10_1.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.1.Z:libtiff-tools-0:4.6.0-6.el10_1.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.1.Z:libtiff-tools-0:4.6.0-6.el10_1.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.1.Z:libtiff-tools-0:4.6.0-6.el10_1.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.1.Z:libtiff-tools-0:4.6.0-6.el10_1.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
8 references
Acknowledgments
Quang Luong
PrymEvol
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for libtiff is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.\n\nSecurity Fix(es):\n\n* libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:12265",
"url": "https://access.redhat.com/errata/RHSA-2026:12265"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2450768",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450768"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_12265.json"
}
],
"title": "Red Hat Security Advisory: libtiff security update",
"tracking": {
"current_release_date": "2026-06-30T04:20:46+00:00",
"generator": {
"date": "2026-06-30T04:20:46+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.0"
}
},
"id": "RHSA-2026:12265",
"initial_release_date": "2026-04-30T12:26:28+00:00",
"revision_history": [
{
"date": "2026-04-30T12:26:28+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-04-30T12:26:28+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T04:20:46+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.1"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.6.0-6.el10_1.3.src",
"product": {
"name": "libtiff-0:4.6.0-6.el10_1.3.src",
"product_id": "libtiff-0:4.6.0-6.el10_1.3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.6.0-6.el10_1.3?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.6.0-6.el10_1.3.aarch64",
"product": {
"name": "libtiff-0:4.6.0-6.el10_1.3.aarch64",
"product_id": "libtiff-0:4.6.0-6.el10_1.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.6.0-6.el10_1.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.6.0-6.el10_1.3.aarch64",
"product": {
"name": "libtiff-devel-0:4.6.0-6.el10_1.3.aarch64",
"product_id": "libtiff-devel-0:4.6.0-6.el10_1.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.6.0-6.el10_1.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.6.0-6.el10_1.3.aarch64",
"product": {
"name": "libtiff-debugsource-0:4.6.0-6.el10_1.3.aarch64",
"product_id": "libtiff-debugsource-0:4.6.0-6.el10_1.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.6.0-6.el10_1.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.6.0-6.el10_1.3.aarch64",
"product": {
"name": "libtiff-debuginfo-0:4.6.0-6.el10_1.3.aarch64",
"product_id": "libtiff-debuginfo-0:4.6.0-6.el10_1.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.6.0-6.el10_1.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.aarch64",
"product": {
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.aarch64",
"product_id": "libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.6.0-6.el10_1.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-0:4.6.0-6.el10_1.3.aarch64",
"product": {
"name": "libtiff-tools-0:4.6.0-6.el10_1.3.aarch64",
"product_id": "libtiff-tools-0:4.6.0-6.el10_1.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools@4.6.0-6.el10_1.3?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.6.0-6.el10_1.3.ppc64le",
"product": {
"name": "libtiff-0:4.6.0-6.el10_1.3.ppc64le",
"product_id": "libtiff-0:4.6.0-6.el10_1.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.6.0-6.el10_1.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.6.0-6.el10_1.3.ppc64le",
"product": {
"name": "libtiff-devel-0:4.6.0-6.el10_1.3.ppc64le",
"product_id": "libtiff-devel-0:4.6.0-6.el10_1.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.6.0-6.el10_1.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.6.0-6.el10_1.3.ppc64le",
"product": {
"name": "libtiff-debugsource-0:4.6.0-6.el10_1.3.ppc64le",
"product_id": "libtiff-debugsource-0:4.6.0-6.el10_1.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.6.0-6.el10_1.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.6.0-6.el10_1.3.ppc64le",
"product": {
"name": "libtiff-debuginfo-0:4.6.0-6.el10_1.3.ppc64le",
"product_id": "libtiff-debuginfo-0:4.6.0-6.el10_1.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.6.0-6.el10_1.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.ppc64le",
"product": {
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.ppc64le",
"product_id": "libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.6.0-6.el10_1.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-0:4.6.0-6.el10_1.3.ppc64le",
"product": {
"name": "libtiff-tools-0:4.6.0-6.el10_1.3.ppc64le",
"product_id": "libtiff-tools-0:4.6.0-6.el10_1.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools@4.6.0-6.el10_1.3?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.6.0-6.el10_1.3.s390x",
"product": {
"name": "libtiff-0:4.6.0-6.el10_1.3.s390x",
"product_id": "libtiff-0:4.6.0-6.el10_1.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.6.0-6.el10_1.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.6.0-6.el10_1.3.s390x",
"product": {
"name": "libtiff-devel-0:4.6.0-6.el10_1.3.s390x",
"product_id": "libtiff-devel-0:4.6.0-6.el10_1.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.6.0-6.el10_1.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.6.0-6.el10_1.3.s390x",
"product": {
"name": "libtiff-debugsource-0:4.6.0-6.el10_1.3.s390x",
"product_id": "libtiff-debugsource-0:4.6.0-6.el10_1.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.6.0-6.el10_1.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.6.0-6.el10_1.3.s390x",
"product": {
"name": "libtiff-debuginfo-0:4.6.0-6.el10_1.3.s390x",
"product_id": "libtiff-debuginfo-0:4.6.0-6.el10_1.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.6.0-6.el10_1.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.s390x",
"product": {
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.s390x",
"product_id": "libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.6.0-6.el10_1.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-0:4.6.0-6.el10_1.3.s390x",
"product": {
"name": "libtiff-tools-0:4.6.0-6.el10_1.3.s390x",
"product_id": "libtiff-tools-0:4.6.0-6.el10_1.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools@4.6.0-6.el10_1.3?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.6.0-6.el10_1.3.x86_64",
"product": {
"name": "libtiff-0:4.6.0-6.el10_1.3.x86_64",
"product_id": "libtiff-0:4.6.0-6.el10_1.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.6.0-6.el10_1.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.6.0-6.el10_1.3.x86_64",
"product": {
"name": "libtiff-devel-0:4.6.0-6.el10_1.3.x86_64",
"product_id": "libtiff-devel-0:4.6.0-6.el10_1.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.6.0-6.el10_1.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.6.0-6.el10_1.3.x86_64",
"product": {
"name": "libtiff-debugsource-0:4.6.0-6.el10_1.3.x86_64",
"product_id": "libtiff-debugsource-0:4.6.0-6.el10_1.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.6.0-6.el10_1.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.6.0-6.el10_1.3.x86_64",
"product": {
"name": "libtiff-debuginfo-0:4.6.0-6.el10_1.3.x86_64",
"product_id": "libtiff-debuginfo-0:4.6.0-6.el10_1.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.6.0-6.el10_1.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.x86_64",
"product": {
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.x86_64",
"product_id": "libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.6.0-6.el10_1.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-0:4.6.0-6.el10_1.3.x86_64",
"product": {
"name": "libtiff-tools-0:4.6.0-6.el10_1.3.x86_64",
"product_id": "libtiff-tools-0:4.6.0-6.el10_1.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools@4.6.0-6.el10_1.3?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.6.0-6.el10_1.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.aarch64"
},
"product_reference": "libtiff-0:4.6.0-6.el10_1.3.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.6.0-6.el10_1.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.ppc64le"
},
"product_reference": "libtiff-0:4.6.0-6.el10_1.3.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.6.0-6.el10_1.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.s390x"
},
"product_reference": "libtiff-0:4.6.0-6.el10_1.3.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.6.0-6.el10_1.3.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.src"
},
"product_reference": "libtiff-0:4.6.0-6.el10_1.3.src",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.6.0-6.el10_1.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.x86_64"
},
"product_reference": "libtiff-0:4.6.0-6.el10_1.3.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.6.0-6.el10_1.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.aarch64"
},
"product_reference": "libtiff-debuginfo-0:4.6.0-6.el10_1.3.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.6.0-6.el10_1.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.ppc64le"
},
"product_reference": "libtiff-debuginfo-0:4.6.0-6.el10_1.3.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.6.0-6.el10_1.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.s390x"
},
"product_reference": "libtiff-debuginfo-0:4.6.0-6.el10_1.3.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.6.0-6.el10_1.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.x86_64"
},
"product_reference": "libtiff-debuginfo-0:4.6.0-6.el10_1.3.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.6.0-6.el10_1.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.aarch64"
},
"product_reference": "libtiff-debugsource-0:4.6.0-6.el10_1.3.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.6.0-6.el10_1.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.ppc64le"
},
"product_reference": "libtiff-debugsource-0:4.6.0-6.el10_1.3.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.6.0-6.el10_1.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.s390x"
},
"product_reference": "libtiff-debugsource-0:4.6.0-6.el10_1.3.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.6.0-6.el10_1.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.x86_64"
},
"product_reference": "libtiff-debugsource-0:4.6.0-6.el10_1.3.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.6.0-6.el10_1.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:libtiff-devel-0:4.6.0-6.el10_1.3.aarch64"
},
"product_reference": "libtiff-devel-0:4.6.0-6.el10_1.3.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.6.0-6.el10_1.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:libtiff-devel-0:4.6.0-6.el10_1.3.ppc64le"
},
"product_reference": "libtiff-devel-0:4.6.0-6.el10_1.3.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.6.0-6.el10_1.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:libtiff-devel-0:4.6.0-6.el10_1.3.s390x"
},
"product_reference": "libtiff-devel-0:4.6.0-6.el10_1.3.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.6.0-6.el10_1.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:libtiff-devel-0:4.6.0-6.el10_1.3.x86_64"
},
"product_reference": "libtiff-devel-0:4.6.0-6.el10_1.3.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.aarch64"
},
"product_reference": "libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.ppc64le"
},
"product_reference": "libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.s390x"
},
"product_reference": "libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.x86_64"
},
"product_reference": "libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.6.0-6.el10_1.3.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.aarch64"
},
"product_reference": "libtiff-debuginfo-0:4.6.0-6.el10_1.3.aarch64",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.6.0-6.el10_1.3.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.ppc64le"
},
"product_reference": "libtiff-debuginfo-0:4.6.0-6.el10_1.3.ppc64le",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.6.0-6.el10_1.3.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.s390x"
},
"product_reference": "libtiff-debuginfo-0:4.6.0-6.el10_1.3.s390x",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.6.0-6.el10_1.3.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.x86_64"
},
"product_reference": "libtiff-debuginfo-0:4.6.0-6.el10_1.3.x86_64",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.6.0-6.el10_1.3.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.aarch64"
},
"product_reference": "libtiff-debugsource-0:4.6.0-6.el10_1.3.aarch64",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.6.0-6.el10_1.3.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.ppc64le"
},
"product_reference": "libtiff-debugsource-0:4.6.0-6.el10_1.3.ppc64le",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.6.0-6.el10_1.3.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.s390x"
},
"product_reference": "libtiff-debugsource-0:4.6.0-6.el10_1.3.s390x",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.6.0-6.el10_1.3.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.x86_64"
},
"product_reference": "libtiff-debugsource-0:4.6.0-6.el10_1.3.x86_64",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-0:4.6.0-6.el10_1.3.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:libtiff-tools-0:4.6.0-6.el10_1.3.aarch64"
},
"product_reference": "libtiff-tools-0:4.6.0-6.el10_1.3.aarch64",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-0:4.6.0-6.el10_1.3.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:libtiff-tools-0:4.6.0-6.el10_1.3.ppc64le"
},
"product_reference": "libtiff-tools-0:4.6.0-6.el10_1.3.ppc64le",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-0:4.6.0-6.el10_1.3.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:libtiff-tools-0:4.6.0-6.el10_1.3.s390x"
},
"product_reference": "libtiff-tools-0:4.6.0-6.el10_1.3.s390x",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-0:4.6.0-6.el10_1.3.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:libtiff-tools-0:4.6.0-6.el10_1.3.x86_64"
},
"product_reference": "libtiff-tools-0:4.6.0-6.el10_1.3.x86_64",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.aarch64"
},
"product_reference": "libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.aarch64",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.ppc64le"
},
"product_reference": "libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.ppc64le",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.s390x"
},
"product_reference": "libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.s390x",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.x86_64"
},
"product_reference": "libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.x86_64",
"relates_to_product_reference": "CRB-10.1.Z"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Quang Luong",
"PrymEvol"
]
}
],
"cve": "CVE-2026-4775",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-03-24T14:23:23.826000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450768"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in the libtiff library, affecting the processing of specially crafted TIFF files, could lead to a denial of service or potentially arbitrary code execution. This vulnerability, caused by a signed integer overflow during TIFF image processing, results in an out-of-bounds heap write. Red Hat products that process untrusted TIFF files using libtiff may be impacted.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.aarch64",
"AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.ppc64le",
"AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.s390x",
"AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.src",
"AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.x86_64",
"AppStream-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.aarch64",
"AppStream-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.ppc64le",
"AppStream-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.s390x",
"AppStream-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.x86_64",
"AppStream-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.aarch64",
"AppStream-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.ppc64le",
"AppStream-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.s390x",
"AppStream-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.x86_64",
"AppStream-10.1.Z:libtiff-devel-0:4.6.0-6.el10_1.3.aarch64",
"AppStream-10.1.Z:libtiff-devel-0:4.6.0-6.el10_1.3.ppc64le",
"AppStream-10.1.Z:libtiff-devel-0:4.6.0-6.el10_1.3.s390x",
"AppStream-10.1.Z:libtiff-devel-0:4.6.0-6.el10_1.3.x86_64",
"AppStream-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.aarch64",
"AppStream-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.ppc64le",
"AppStream-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.s390x",
"AppStream-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.x86_64",
"CRB-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.aarch64",
"CRB-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.ppc64le",
"CRB-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.s390x",
"CRB-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.x86_64",
"CRB-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.aarch64",
"CRB-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.ppc64le",
"CRB-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.s390x",
"CRB-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.x86_64",
"CRB-10.1.Z:libtiff-tools-0:4.6.0-6.el10_1.3.aarch64",
"CRB-10.1.Z:libtiff-tools-0:4.6.0-6.el10_1.3.ppc64le",
"CRB-10.1.Z:libtiff-tools-0:4.6.0-6.el10_1.3.s390x",
"CRB-10.1.Z:libtiff-tools-0:4.6.0-6.el10_1.3.x86_64",
"CRB-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.aarch64",
"CRB-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.ppc64le",
"CRB-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.s390x",
"CRB-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4775"
},
{
"category": "external",
"summary": "RHBZ#2450768",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450768"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4775",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4775"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4775",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4775"
}
],
"release_date": "2026-03-24T14:33:35.730000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-30T12:26:28+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.aarch64",
"AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.ppc64le",
"AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.s390x",
"AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.src",
"AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.x86_64",
"AppStream-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.aarch64",
"AppStream-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.ppc64le",
"AppStream-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.s390x",
"AppStream-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.x86_64",
"AppStream-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.aarch64",
"AppStream-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.ppc64le",
"AppStream-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.s390x",
"AppStream-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.x86_64",
"AppStream-10.1.Z:libtiff-devel-0:4.6.0-6.el10_1.3.aarch64",
"AppStream-10.1.Z:libtiff-devel-0:4.6.0-6.el10_1.3.ppc64le",
"AppStream-10.1.Z:libtiff-devel-0:4.6.0-6.el10_1.3.s390x",
"AppStream-10.1.Z:libtiff-devel-0:4.6.0-6.el10_1.3.x86_64",
"AppStream-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.aarch64",
"AppStream-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.ppc64le",
"AppStream-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.s390x",
"AppStream-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.x86_64",
"CRB-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.aarch64",
"CRB-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.ppc64le",
"CRB-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.s390x",
"CRB-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.x86_64",
"CRB-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.aarch64",
"CRB-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.ppc64le",
"CRB-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.s390x",
"CRB-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.x86_64",
"CRB-10.1.Z:libtiff-tools-0:4.6.0-6.el10_1.3.aarch64",
"CRB-10.1.Z:libtiff-tools-0:4.6.0-6.el10_1.3.ppc64le",
"CRB-10.1.Z:libtiff-tools-0:4.6.0-6.el10_1.3.s390x",
"CRB-10.1.Z:libtiff-tools-0:4.6.0-6.el10_1.3.x86_64",
"CRB-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.aarch64",
"CRB-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.ppc64le",
"CRB-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.s390x",
"CRB-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:12265"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid processing untrusted or maliciously crafted TIFF files with applications linked against the libtiff library. If processing untrusted TIFF files is unavoidable, consider running the affected applications within a sandboxed environment to limit the potential impact of successful exploitation. This operational control helps contain the effects of an out-of-bounds write, reducing the risk of denial of service or arbitrary code execution.",
"product_ids": [
"AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.aarch64",
"AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.ppc64le",
"AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.s390x",
"AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.src",
"AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.x86_64",
"AppStream-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.aarch64",
"AppStream-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.ppc64le",
"AppStream-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.s390x",
"AppStream-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.x86_64",
"AppStream-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.aarch64",
"AppStream-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.ppc64le",
"AppStream-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.s390x",
"AppStream-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.x86_64",
"AppStream-10.1.Z:libtiff-devel-0:4.6.0-6.el10_1.3.aarch64",
"AppStream-10.1.Z:libtiff-devel-0:4.6.0-6.el10_1.3.ppc64le",
"AppStream-10.1.Z:libtiff-devel-0:4.6.0-6.el10_1.3.s390x",
"AppStream-10.1.Z:libtiff-devel-0:4.6.0-6.el10_1.3.x86_64",
"AppStream-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.aarch64",
"AppStream-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.ppc64le",
"AppStream-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.s390x",
"AppStream-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.x86_64",
"CRB-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.aarch64",
"CRB-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.ppc64le",
"CRB-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.s390x",
"CRB-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.x86_64",
"CRB-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.aarch64",
"CRB-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.ppc64le",
"CRB-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.s390x",
"CRB-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.x86_64",
"CRB-10.1.Z:libtiff-tools-0:4.6.0-6.el10_1.3.aarch64",
"CRB-10.1.Z:libtiff-tools-0:4.6.0-6.el10_1.3.ppc64le",
"CRB-10.1.Z:libtiff-tools-0:4.6.0-6.el10_1.3.s390x",
"CRB-10.1.Z:libtiff-tools-0:4.6.0-6.el10_1.3.x86_64",
"CRB-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.aarch64",
"CRB-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.ppc64le",
"CRB-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.s390x",
"CRB-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.aarch64",
"AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.ppc64le",
"AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.s390x",
"AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.src",
"AppStream-10.1.Z:libtiff-0:4.6.0-6.el10_1.3.x86_64",
"AppStream-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.aarch64",
"AppStream-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.ppc64le",
"AppStream-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.s390x",
"AppStream-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.x86_64",
"AppStream-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.aarch64",
"AppStream-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.ppc64le",
"AppStream-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.s390x",
"AppStream-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.x86_64",
"AppStream-10.1.Z:libtiff-devel-0:4.6.0-6.el10_1.3.aarch64",
"AppStream-10.1.Z:libtiff-devel-0:4.6.0-6.el10_1.3.ppc64le",
"AppStream-10.1.Z:libtiff-devel-0:4.6.0-6.el10_1.3.s390x",
"AppStream-10.1.Z:libtiff-devel-0:4.6.0-6.el10_1.3.x86_64",
"AppStream-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.aarch64",
"AppStream-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.ppc64le",
"AppStream-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.s390x",
"AppStream-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.x86_64",
"CRB-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.aarch64",
"CRB-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.ppc64le",
"CRB-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.s390x",
"CRB-10.1.Z:libtiff-debuginfo-0:4.6.0-6.el10_1.3.x86_64",
"CRB-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.aarch64",
"CRB-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.ppc64le",
"CRB-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.s390x",
"CRB-10.1.Z:libtiff-debugsource-0:4.6.0-6.el10_1.3.x86_64",
"CRB-10.1.Z:libtiff-tools-0:4.6.0-6.el10_1.3.aarch64",
"CRB-10.1.Z:libtiff-tools-0:4.6.0-6.el10_1.3.ppc64le",
"CRB-10.1.Z:libtiff-tools-0:4.6.0-6.el10_1.3.s390x",
"CRB-10.1.Z:libtiff-tools-0:4.6.0-6.el10_1.3.x86_64",
"CRB-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.aarch64",
"CRB-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.ppc64le",
"CRB-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.s390x",
"CRB-10.1.Z:libtiff-tools-debuginfo-0:4.6.0-6.el10_1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing"
}
]
}
RHSA-2026:12271
Vulnerability from csaf_redhat - Published: 2026-04-30 14:22 - Updated: 2026-06-30 04:20Summary
Red Hat Security Advisory: libtiff security update
Severity
Important
Notes
Topic: An update for libtiff is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.
Security Fix(es):
* libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.
7.8 (High)
Affected products
Fixed
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.7.0.Z.MAIN:libtiff-tools-0:4.4.0-15.el9_7.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.7.0.Z.MAIN:libtiff-tools-0:4.4.0-15.el9_7.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.7.0.Z.MAIN:libtiff-tools-0:4.4.0-15.el9_7.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.7.0.Z.MAIN:libtiff-tools-0:4.4.0-15.el9_7.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
8 references
Acknowledgments
Quang Luong
PrymEvol
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for libtiff is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.\n\nSecurity Fix(es):\n\n* libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:12271",
"url": "https://access.redhat.com/errata/RHSA-2026:12271"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2450768",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450768"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_12271.json"
}
],
"title": "Red Hat Security Advisory: libtiff security update",
"tracking": {
"current_release_date": "2026-06-30T04:20:46+00:00",
"generator": {
"date": "2026-06-30T04:20:46+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.0"
}
},
"id": "RHSA-2026:12271",
"initial_release_date": "2026-04-30T14:22:48+00:00",
"revision_history": [
{
"date": "2026-04-30T14:22:48+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-04-30T14:22:48+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T04:20:46+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.7.0.Z.MAIN",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::crb"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.4.0-15.el9_7.3.src",
"product": {
"name": "libtiff-0:4.4.0-15.el9_7.3.src",
"product_id": "libtiff-0:4.4.0-15.el9_7.3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.4.0-15.el9_7.3?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.4.0-15.el9_7.3.aarch64",
"product": {
"name": "libtiff-0:4.4.0-15.el9_7.3.aarch64",
"product_id": "libtiff-0:4.4.0-15.el9_7.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.4.0-15.el9_7.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.4.0-15.el9_7.3.aarch64",
"product": {
"name": "libtiff-devel-0:4.4.0-15.el9_7.3.aarch64",
"product_id": "libtiff-devel-0:4.4.0-15.el9_7.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.4.0-15.el9_7.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.4.0-15.el9_7.3.aarch64",
"product": {
"name": "libtiff-debugsource-0:4.4.0-15.el9_7.3.aarch64",
"product_id": "libtiff-debugsource-0:4.4.0-15.el9_7.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.4.0-15.el9_7.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.aarch64",
"product": {
"name": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.aarch64",
"product_id": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.4.0-15.el9_7.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.aarch64",
"product": {
"name": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.aarch64",
"product_id": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.4.0-15.el9_7.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-0:4.4.0-15.el9_7.3.aarch64",
"product": {
"name": "libtiff-tools-0:4.4.0-15.el9_7.3.aarch64",
"product_id": "libtiff-tools-0:4.4.0-15.el9_7.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools@4.4.0-15.el9_7.3?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.4.0-15.el9_7.3.ppc64le",
"product": {
"name": "libtiff-0:4.4.0-15.el9_7.3.ppc64le",
"product_id": "libtiff-0:4.4.0-15.el9_7.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.4.0-15.el9_7.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.4.0-15.el9_7.3.ppc64le",
"product": {
"name": "libtiff-devel-0:4.4.0-15.el9_7.3.ppc64le",
"product_id": "libtiff-devel-0:4.4.0-15.el9_7.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.4.0-15.el9_7.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.4.0-15.el9_7.3.ppc64le",
"product": {
"name": "libtiff-debugsource-0:4.4.0-15.el9_7.3.ppc64le",
"product_id": "libtiff-debugsource-0:4.4.0-15.el9_7.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.4.0-15.el9_7.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.ppc64le",
"product": {
"name": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.ppc64le",
"product_id": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.4.0-15.el9_7.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.ppc64le",
"product": {
"name": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.ppc64le",
"product_id": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.4.0-15.el9_7.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-0:4.4.0-15.el9_7.3.ppc64le",
"product": {
"name": "libtiff-tools-0:4.4.0-15.el9_7.3.ppc64le",
"product_id": "libtiff-tools-0:4.4.0-15.el9_7.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools@4.4.0-15.el9_7.3?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.4.0-15.el9_7.3.i686",
"product": {
"name": "libtiff-0:4.4.0-15.el9_7.3.i686",
"product_id": "libtiff-0:4.4.0-15.el9_7.3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.4.0-15.el9_7.3?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.4.0-15.el9_7.3.i686",
"product": {
"name": "libtiff-devel-0:4.4.0-15.el9_7.3.i686",
"product_id": "libtiff-devel-0:4.4.0-15.el9_7.3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.4.0-15.el9_7.3?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.4.0-15.el9_7.3.i686",
"product": {
"name": "libtiff-debugsource-0:4.4.0-15.el9_7.3.i686",
"product_id": "libtiff-debugsource-0:4.4.0-15.el9_7.3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.4.0-15.el9_7.3?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.i686",
"product": {
"name": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.i686",
"product_id": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.4.0-15.el9_7.3?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.i686",
"product": {
"name": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.i686",
"product_id": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.4.0-15.el9_7.3?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.4.0-15.el9_7.3.x86_64",
"product": {
"name": "libtiff-0:4.4.0-15.el9_7.3.x86_64",
"product_id": "libtiff-0:4.4.0-15.el9_7.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.4.0-15.el9_7.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.4.0-15.el9_7.3.x86_64",
"product": {
"name": "libtiff-devel-0:4.4.0-15.el9_7.3.x86_64",
"product_id": "libtiff-devel-0:4.4.0-15.el9_7.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.4.0-15.el9_7.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.4.0-15.el9_7.3.x86_64",
"product": {
"name": "libtiff-debugsource-0:4.4.0-15.el9_7.3.x86_64",
"product_id": "libtiff-debugsource-0:4.4.0-15.el9_7.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.4.0-15.el9_7.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.x86_64",
"product": {
"name": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.x86_64",
"product_id": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.4.0-15.el9_7.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.x86_64",
"product": {
"name": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.x86_64",
"product_id": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.4.0-15.el9_7.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-0:4.4.0-15.el9_7.3.x86_64",
"product": {
"name": "libtiff-tools-0:4.4.0-15.el9_7.3.x86_64",
"product_id": "libtiff-tools-0:4.4.0-15.el9_7.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools@4.4.0-15.el9_7.3?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.4.0-15.el9_7.3.s390x",
"product": {
"name": "libtiff-0:4.4.0-15.el9_7.3.s390x",
"product_id": "libtiff-0:4.4.0-15.el9_7.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.4.0-15.el9_7.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.4.0-15.el9_7.3.s390x",
"product": {
"name": "libtiff-devel-0:4.4.0-15.el9_7.3.s390x",
"product_id": "libtiff-devel-0:4.4.0-15.el9_7.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.4.0-15.el9_7.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.4.0-15.el9_7.3.s390x",
"product": {
"name": "libtiff-debugsource-0:4.4.0-15.el9_7.3.s390x",
"product_id": "libtiff-debugsource-0:4.4.0-15.el9_7.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.4.0-15.el9_7.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.s390x",
"product": {
"name": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.s390x",
"product_id": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.4.0-15.el9_7.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.s390x",
"product": {
"name": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.s390x",
"product_id": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.4.0-15.el9_7.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-0:4.4.0-15.el9_7.3.s390x",
"product": {
"name": "libtiff-tools-0:4.4.0-15.el9_7.3.s390x",
"product_id": "libtiff-tools-0:4.4.0-15.el9_7.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools@4.4.0-15.el9_7.3?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.4.0-15.el9_7.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.aarch64"
},
"product_reference": "libtiff-0:4.4.0-15.el9_7.3.aarch64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.4.0-15.el9_7.3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.i686"
},
"product_reference": "libtiff-0:4.4.0-15.el9_7.3.i686",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.4.0-15.el9_7.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.ppc64le"
},
"product_reference": "libtiff-0:4.4.0-15.el9_7.3.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.4.0-15.el9_7.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.s390x"
},
"product_reference": "libtiff-0:4.4.0-15.el9_7.3.s390x",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.4.0-15.el9_7.3.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.src"
},
"product_reference": "libtiff-0:4.4.0-15.el9_7.3.src",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.4.0-15.el9_7.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.x86_64"
},
"product_reference": "libtiff-0:4.4.0-15.el9_7.3.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.aarch64"
},
"product_reference": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.aarch64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.i686"
},
"product_reference": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.i686",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.ppc64le"
},
"product_reference": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.s390x"
},
"product_reference": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.s390x",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.x86_64"
},
"product_reference": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.4.0-15.el9_7.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.aarch64"
},
"product_reference": "libtiff-debugsource-0:4.4.0-15.el9_7.3.aarch64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.4.0-15.el9_7.3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.i686"
},
"product_reference": "libtiff-debugsource-0:4.4.0-15.el9_7.3.i686",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.4.0-15.el9_7.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.ppc64le"
},
"product_reference": "libtiff-debugsource-0:4.4.0-15.el9_7.3.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.4.0-15.el9_7.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.s390x"
},
"product_reference": "libtiff-debugsource-0:4.4.0-15.el9_7.3.s390x",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.4.0-15.el9_7.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.x86_64"
},
"product_reference": "libtiff-debugsource-0:4.4.0-15.el9_7.3.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.4.0-15.el9_7.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.aarch64"
},
"product_reference": "libtiff-devel-0:4.4.0-15.el9_7.3.aarch64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.4.0-15.el9_7.3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.i686"
},
"product_reference": "libtiff-devel-0:4.4.0-15.el9_7.3.i686",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.4.0-15.el9_7.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.ppc64le"
},
"product_reference": "libtiff-devel-0:4.4.0-15.el9_7.3.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.4.0-15.el9_7.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.s390x"
},
"product_reference": "libtiff-devel-0:4.4.0-15.el9_7.3.s390x",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.4.0-15.el9_7.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.x86_64"
},
"product_reference": "libtiff-devel-0:4.4.0-15.el9_7.3.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.aarch64"
},
"product_reference": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.aarch64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.i686"
},
"product_reference": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.i686",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.ppc64le"
},
"product_reference": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.s390x"
},
"product_reference": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.s390x",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.x86_64"
},
"product_reference": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.aarch64"
},
"product_reference": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.aarch64",
"relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.ppc64le"
},
"product_reference": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.ppc64le",
"relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.s390x"
},
"product_reference": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.s390x",
"relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.x86_64"
},
"product_reference": "libtiff-debuginfo-0:4.4.0-15.el9_7.3.x86_64",
"relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.4.0-15.el9_7.3.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.aarch64"
},
"product_reference": "libtiff-debugsource-0:4.4.0-15.el9_7.3.aarch64",
"relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.4.0-15.el9_7.3.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.ppc64le"
},
"product_reference": "libtiff-debugsource-0:4.4.0-15.el9_7.3.ppc64le",
"relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.4.0-15.el9_7.3.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.s390x"
},
"product_reference": "libtiff-debugsource-0:4.4.0-15.el9_7.3.s390x",
"relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.4.0-15.el9_7.3.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.x86_64"
},
"product_reference": "libtiff-debugsource-0:4.4.0-15.el9_7.3.x86_64",
"relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-0:4.4.0-15.el9_7.3.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.7.0.Z.MAIN:libtiff-tools-0:4.4.0-15.el9_7.3.aarch64"
},
"product_reference": "libtiff-tools-0:4.4.0-15.el9_7.3.aarch64",
"relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-0:4.4.0-15.el9_7.3.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.7.0.Z.MAIN:libtiff-tools-0:4.4.0-15.el9_7.3.ppc64le"
},
"product_reference": "libtiff-tools-0:4.4.0-15.el9_7.3.ppc64le",
"relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-0:4.4.0-15.el9_7.3.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.7.0.Z.MAIN:libtiff-tools-0:4.4.0-15.el9_7.3.s390x"
},
"product_reference": "libtiff-tools-0:4.4.0-15.el9_7.3.s390x",
"relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-0:4.4.0-15.el9_7.3.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.7.0.Z.MAIN:libtiff-tools-0:4.4.0-15.el9_7.3.x86_64"
},
"product_reference": "libtiff-tools-0:4.4.0-15.el9_7.3.x86_64",
"relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.aarch64"
},
"product_reference": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.aarch64",
"relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.ppc64le"
},
"product_reference": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.ppc64le",
"relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.s390x"
},
"product_reference": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.s390x",
"relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.x86_64"
},
"product_reference": "libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.x86_64",
"relates_to_product_reference": "CRB-9.7.0.Z.MAIN"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Quang Luong",
"PrymEvol"
]
}
],
"cve": "CVE-2026-4775",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-03-24T14:23:23.826000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450768"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in the libtiff library, affecting the processing of specially crafted TIFF files, could lead to a denial of service or potentially arbitrary code execution. This vulnerability, caused by a signed integer overflow during TIFF image processing, results in an out-of-bounds heap write. Red Hat products that process untrusted TIFF files using libtiff may be impacted.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.aarch64",
"AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.i686",
"AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.ppc64le",
"AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.s390x",
"AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.src",
"AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.x86_64",
"AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.aarch64",
"AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.i686",
"AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.ppc64le",
"AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.s390x",
"AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.x86_64",
"AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.aarch64",
"AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.i686",
"AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.ppc64le",
"AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.s390x",
"AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.x86_64",
"AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.aarch64",
"AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.i686",
"AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.ppc64le",
"AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.s390x",
"AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.x86_64",
"AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.aarch64",
"AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.i686",
"AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.ppc64le",
"AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.s390x",
"AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.x86_64",
"CRB-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.aarch64",
"CRB-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.ppc64le",
"CRB-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.s390x",
"CRB-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.x86_64",
"CRB-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.aarch64",
"CRB-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.ppc64le",
"CRB-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.s390x",
"CRB-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.x86_64",
"CRB-9.7.0.Z.MAIN:libtiff-tools-0:4.4.0-15.el9_7.3.aarch64",
"CRB-9.7.0.Z.MAIN:libtiff-tools-0:4.4.0-15.el9_7.3.ppc64le",
"CRB-9.7.0.Z.MAIN:libtiff-tools-0:4.4.0-15.el9_7.3.s390x",
"CRB-9.7.0.Z.MAIN:libtiff-tools-0:4.4.0-15.el9_7.3.x86_64",
"CRB-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.aarch64",
"CRB-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.ppc64le",
"CRB-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.s390x",
"CRB-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4775"
},
{
"category": "external",
"summary": "RHBZ#2450768",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450768"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4775",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4775"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4775",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4775"
}
],
"release_date": "2026-03-24T14:33:35.730000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-30T14:22:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.aarch64",
"AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.i686",
"AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.ppc64le",
"AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.s390x",
"AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.src",
"AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.x86_64",
"AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.aarch64",
"AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.i686",
"AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.ppc64le",
"AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.s390x",
"AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.x86_64",
"AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.aarch64",
"AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.i686",
"AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.ppc64le",
"AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.s390x",
"AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.x86_64",
"AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.aarch64",
"AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.i686",
"AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.ppc64le",
"AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.s390x",
"AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.x86_64",
"AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.aarch64",
"AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.i686",
"AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.ppc64le",
"AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.s390x",
"AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.x86_64",
"CRB-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.aarch64",
"CRB-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.ppc64le",
"CRB-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.s390x",
"CRB-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.x86_64",
"CRB-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.aarch64",
"CRB-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.ppc64le",
"CRB-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.s390x",
"CRB-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.x86_64",
"CRB-9.7.0.Z.MAIN:libtiff-tools-0:4.4.0-15.el9_7.3.aarch64",
"CRB-9.7.0.Z.MAIN:libtiff-tools-0:4.4.0-15.el9_7.3.ppc64le",
"CRB-9.7.0.Z.MAIN:libtiff-tools-0:4.4.0-15.el9_7.3.s390x",
"CRB-9.7.0.Z.MAIN:libtiff-tools-0:4.4.0-15.el9_7.3.x86_64",
"CRB-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.aarch64",
"CRB-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.ppc64le",
"CRB-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.s390x",
"CRB-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:12271"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid processing untrusted or maliciously crafted TIFF files with applications linked against the libtiff library. If processing untrusted TIFF files is unavoidable, consider running the affected applications within a sandboxed environment to limit the potential impact of successful exploitation. This operational control helps contain the effects of an out-of-bounds write, reducing the risk of denial of service or arbitrary code execution.",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.aarch64",
"AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.i686",
"AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.ppc64le",
"AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.s390x",
"AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.src",
"AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.x86_64",
"AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.aarch64",
"AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.i686",
"AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.ppc64le",
"AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.s390x",
"AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.x86_64",
"AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.aarch64",
"AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.i686",
"AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.ppc64le",
"AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.s390x",
"AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.x86_64",
"AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.aarch64",
"AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.i686",
"AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.ppc64le",
"AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.s390x",
"AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.x86_64",
"AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.aarch64",
"AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.i686",
"AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.ppc64le",
"AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.s390x",
"AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.x86_64",
"CRB-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.aarch64",
"CRB-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.ppc64le",
"CRB-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.s390x",
"CRB-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.x86_64",
"CRB-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.aarch64",
"CRB-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.ppc64le",
"CRB-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.s390x",
"CRB-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.x86_64",
"CRB-9.7.0.Z.MAIN:libtiff-tools-0:4.4.0-15.el9_7.3.aarch64",
"CRB-9.7.0.Z.MAIN:libtiff-tools-0:4.4.0-15.el9_7.3.ppc64le",
"CRB-9.7.0.Z.MAIN:libtiff-tools-0:4.4.0-15.el9_7.3.s390x",
"CRB-9.7.0.Z.MAIN:libtiff-tools-0:4.4.0-15.el9_7.3.x86_64",
"CRB-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.aarch64",
"CRB-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.ppc64le",
"CRB-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.s390x",
"CRB-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.aarch64",
"AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.i686",
"AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.ppc64le",
"AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.s390x",
"AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.src",
"AppStream-9.7.0.Z.MAIN:libtiff-0:4.4.0-15.el9_7.3.x86_64",
"AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.aarch64",
"AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.i686",
"AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.ppc64le",
"AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.s390x",
"AppStream-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.x86_64",
"AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.aarch64",
"AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.i686",
"AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.ppc64le",
"AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.s390x",
"AppStream-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.x86_64",
"AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.aarch64",
"AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.i686",
"AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.ppc64le",
"AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.s390x",
"AppStream-9.7.0.Z.MAIN:libtiff-devel-0:4.4.0-15.el9_7.3.x86_64",
"AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.aarch64",
"AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.i686",
"AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.ppc64le",
"AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.s390x",
"AppStream-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.x86_64",
"CRB-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.aarch64",
"CRB-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.ppc64le",
"CRB-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.s390x",
"CRB-9.7.0.Z.MAIN:libtiff-debuginfo-0:4.4.0-15.el9_7.3.x86_64",
"CRB-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.aarch64",
"CRB-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.ppc64le",
"CRB-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.s390x",
"CRB-9.7.0.Z.MAIN:libtiff-debugsource-0:4.4.0-15.el9_7.3.x86_64",
"CRB-9.7.0.Z.MAIN:libtiff-tools-0:4.4.0-15.el9_7.3.aarch64",
"CRB-9.7.0.Z.MAIN:libtiff-tools-0:4.4.0-15.el9_7.3.ppc64le",
"CRB-9.7.0.Z.MAIN:libtiff-tools-0:4.4.0-15.el9_7.3.s390x",
"CRB-9.7.0.Z.MAIN:libtiff-tools-0:4.4.0-15.el9_7.3.x86_64",
"CRB-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.aarch64",
"CRB-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.ppc64le",
"CRB-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.s390x",
"CRB-9.7.0.Z.MAIN:libtiff-tools-debuginfo-0:4.4.0-15.el9_7.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing"
}
]
}
RHSA-2026:14929
Vulnerability from csaf_redhat - Published: 2026-05-07 21:01 - Updated: 2026-06-30 04:20Summary
Red Hat Security Advisory: mingw-libtiff security update
Severity
Important
Notes
Topic: An update for mingw-libtiff is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The libtiff package contains a library of functions for manipulating TIFF (Tagged Image File Format) image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if you need to manipulate TIFF format image files.
Security Fix(es):
* libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.
7.8 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:mingw-libtiff-0:4.0.9-4.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:mingw32-libtiff-0:4.0.9-4.el8_10.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:mingw32-libtiff-debuginfo-0:4.0.9-4.el8_10.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:mingw32-libtiff-static-0:4.0.9-4.el8_10.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:mingw64-libtiff-0:4.0.9-4.el8_10.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:mingw64-libtiff-debuginfo-0:4.0.9-4.el8_10.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:mingw64-libtiff-static-0:4.0.9-4.el8_10.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
8 references
Acknowledgments
Quang Luong
PrymEvol
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for mingw-libtiff is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The libtiff package contains a library of functions for manipulating TIFF (Tagged Image File Format) image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if you need to manipulate TIFF format image files.\n\nSecurity Fix(es):\n\n* libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:14929",
"url": "https://access.redhat.com/errata/RHSA-2026:14929"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2450768",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450768"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_14929.json"
}
],
"title": "Red Hat Security Advisory: mingw-libtiff security update",
"tracking": {
"current_release_date": "2026-06-30T04:20:53+00:00",
"generator": {
"date": "2026-06-30T04:20:53+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.0"
}
},
"id": "RHSA-2026:14929",
"initial_release_date": "2026-05-07T21:01:11+00:00",
"revision_history": [
{
"date": "2026-05-07T21:01:11+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-05-07T21:01:11+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T04:20:53+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux CRB (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::crb"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "mingw-libtiff-0:4.0.9-4.el8_10.src",
"product": {
"name": "mingw-libtiff-0:4.0.9-4.el8_10.src",
"product_id": "mingw-libtiff-0:4.0.9-4.el8_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mingw-libtiff@4.0.9-4.el8_10?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "mingw32-libtiff-0:4.0.9-4.el8_10.noarch",
"product": {
"name": "mingw32-libtiff-0:4.0.9-4.el8_10.noarch",
"product_id": "mingw32-libtiff-0:4.0.9-4.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mingw32-libtiff@4.0.9-4.el8_10?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "mingw32-libtiff-static-0:4.0.9-4.el8_10.noarch",
"product": {
"name": "mingw32-libtiff-static-0:4.0.9-4.el8_10.noarch",
"product_id": "mingw32-libtiff-static-0:4.0.9-4.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mingw32-libtiff-static@4.0.9-4.el8_10?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "mingw64-libtiff-0:4.0.9-4.el8_10.noarch",
"product": {
"name": "mingw64-libtiff-0:4.0.9-4.el8_10.noarch",
"product_id": "mingw64-libtiff-0:4.0.9-4.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mingw64-libtiff@4.0.9-4.el8_10?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "mingw64-libtiff-static-0:4.0.9-4.el8_10.noarch",
"product": {
"name": "mingw64-libtiff-static-0:4.0.9-4.el8_10.noarch",
"product_id": "mingw64-libtiff-static-0:4.0.9-4.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mingw64-libtiff-static@4.0.9-4.el8_10?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "mingw32-libtiff-debuginfo-0:4.0.9-4.el8_10.noarch",
"product": {
"name": "mingw32-libtiff-debuginfo-0:4.0.9-4.el8_10.noarch",
"product_id": "mingw32-libtiff-debuginfo-0:4.0.9-4.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mingw32-libtiff-debuginfo@4.0.9-4.el8_10?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "mingw64-libtiff-debuginfo-0:4.0.9-4.el8_10.noarch",
"product": {
"name": "mingw64-libtiff-debuginfo-0:4.0.9-4.el8_10.noarch",
"product_id": "mingw64-libtiff-debuginfo-0:4.0.9-4.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mingw64-libtiff-debuginfo@4.0.9-4.el8_10?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "mingw-libtiff-0:4.0.9-4.el8_10.src as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:mingw-libtiff-0:4.0.9-4.el8_10.src"
},
"product_reference": "mingw-libtiff-0:4.0.9-4.el8_10.src",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mingw32-libtiff-0:4.0.9-4.el8_10.noarch as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:mingw32-libtiff-0:4.0.9-4.el8_10.noarch"
},
"product_reference": "mingw32-libtiff-0:4.0.9-4.el8_10.noarch",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mingw32-libtiff-debuginfo-0:4.0.9-4.el8_10.noarch as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:mingw32-libtiff-debuginfo-0:4.0.9-4.el8_10.noarch"
},
"product_reference": "mingw32-libtiff-debuginfo-0:4.0.9-4.el8_10.noarch",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mingw32-libtiff-static-0:4.0.9-4.el8_10.noarch as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:mingw32-libtiff-static-0:4.0.9-4.el8_10.noarch"
},
"product_reference": "mingw32-libtiff-static-0:4.0.9-4.el8_10.noarch",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mingw64-libtiff-0:4.0.9-4.el8_10.noarch as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:mingw64-libtiff-0:4.0.9-4.el8_10.noarch"
},
"product_reference": "mingw64-libtiff-0:4.0.9-4.el8_10.noarch",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mingw64-libtiff-debuginfo-0:4.0.9-4.el8_10.noarch as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:mingw64-libtiff-debuginfo-0:4.0.9-4.el8_10.noarch"
},
"product_reference": "mingw64-libtiff-debuginfo-0:4.0.9-4.el8_10.noarch",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mingw64-libtiff-static-0:4.0.9-4.el8_10.noarch as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:mingw64-libtiff-static-0:4.0.9-4.el8_10.noarch"
},
"product_reference": "mingw64-libtiff-static-0:4.0.9-4.el8_10.noarch",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Quang Luong",
"PrymEvol"
]
}
],
"cve": "CVE-2026-4775",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-03-24T14:23:23.826000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450768"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in the libtiff library, affecting the processing of specially crafted TIFF files, could lead to a denial of service or potentially arbitrary code execution. This vulnerability, caused by a signed integer overflow during TIFF image processing, results in an out-of-bounds heap write. Red Hat products that process untrusted TIFF files using libtiff may be impacted.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"CRB-8.10.0.Z.MAIN.EUS:mingw-libtiff-0:4.0.9-4.el8_10.src",
"CRB-8.10.0.Z.MAIN.EUS:mingw32-libtiff-0:4.0.9-4.el8_10.noarch",
"CRB-8.10.0.Z.MAIN.EUS:mingw32-libtiff-debuginfo-0:4.0.9-4.el8_10.noarch",
"CRB-8.10.0.Z.MAIN.EUS:mingw32-libtiff-static-0:4.0.9-4.el8_10.noarch",
"CRB-8.10.0.Z.MAIN.EUS:mingw64-libtiff-0:4.0.9-4.el8_10.noarch",
"CRB-8.10.0.Z.MAIN.EUS:mingw64-libtiff-debuginfo-0:4.0.9-4.el8_10.noarch",
"CRB-8.10.0.Z.MAIN.EUS:mingw64-libtiff-static-0:4.0.9-4.el8_10.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4775"
},
{
"category": "external",
"summary": "RHBZ#2450768",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450768"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4775",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4775"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4775",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4775"
}
],
"release_date": "2026-03-24T14:33:35.730000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-07T21:01:11+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"CRB-8.10.0.Z.MAIN.EUS:mingw-libtiff-0:4.0.9-4.el8_10.src",
"CRB-8.10.0.Z.MAIN.EUS:mingw32-libtiff-0:4.0.9-4.el8_10.noarch",
"CRB-8.10.0.Z.MAIN.EUS:mingw32-libtiff-debuginfo-0:4.0.9-4.el8_10.noarch",
"CRB-8.10.0.Z.MAIN.EUS:mingw32-libtiff-static-0:4.0.9-4.el8_10.noarch",
"CRB-8.10.0.Z.MAIN.EUS:mingw64-libtiff-0:4.0.9-4.el8_10.noarch",
"CRB-8.10.0.Z.MAIN.EUS:mingw64-libtiff-debuginfo-0:4.0.9-4.el8_10.noarch",
"CRB-8.10.0.Z.MAIN.EUS:mingw64-libtiff-static-0:4.0.9-4.el8_10.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:14929"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid processing untrusted or maliciously crafted TIFF files with applications linked against the libtiff library. If processing untrusted TIFF files is unavoidable, consider running the affected applications within a sandboxed environment to limit the potential impact of successful exploitation. This operational control helps contain the effects of an out-of-bounds write, reducing the risk of denial of service or arbitrary code execution.",
"product_ids": [
"CRB-8.10.0.Z.MAIN.EUS:mingw-libtiff-0:4.0.9-4.el8_10.src",
"CRB-8.10.0.Z.MAIN.EUS:mingw32-libtiff-0:4.0.9-4.el8_10.noarch",
"CRB-8.10.0.Z.MAIN.EUS:mingw32-libtiff-debuginfo-0:4.0.9-4.el8_10.noarch",
"CRB-8.10.0.Z.MAIN.EUS:mingw32-libtiff-static-0:4.0.9-4.el8_10.noarch",
"CRB-8.10.0.Z.MAIN.EUS:mingw64-libtiff-0:4.0.9-4.el8_10.noarch",
"CRB-8.10.0.Z.MAIN.EUS:mingw64-libtiff-debuginfo-0:4.0.9-4.el8_10.noarch",
"CRB-8.10.0.Z.MAIN.EUS:mingw64-libtiff-static-0:4.0.9-4.el8_10.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CRB-8.10.0.Z.MAIN.EUS:mingw-libtiff-0:4.0.9-4.el8_10.src",
"CRB-8.10.0.Z.MAIN.EUS:mingw32-libtiff-0:4.0.9-4.el8_10.noarch",
"CRB-8.10.0.Z.MAIN.EUS:mingw32-libtiff-debuginfo-0:4.0.9-4.el8_10.noarch",
"CRB-8.10.0.Z.MAIN.EUS:mingw32-libtiff-static-0:4.0.9-4.el8_10.noarch",
"CRB-8.10.0.Z.MAIN.EUS:mingw64-libtiff-0:4.0.9-4.el8_10.noarch",
"CRB-8.10.0.Z.MAIN.EUS:mingw64-libtiff-debuginfo-0:4.0.9-4.el8_10.noarch",
"CRB-8.10.0.Z.MAIN.EUS:mingw64-libtiff-static-0:4.0.9-4.el8_10.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing"
}
]
}
RHSA-2026:16055
Vulnerability from csaf_redhat - Published: 2026-05-11 20:52 - Updated: 2026-06-30 04:20Summary
Red Hat Security Advisory: libtiff security update
Severity
Important
Notes
Topic: An update for libtiff is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.
Security Fix(es):
* libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.
7.8 (High)
Affected products
Fixed
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-0:4.0.9-37.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-0:4.0.9-37.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-0:4.0.9-37.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-0:4.0.9-37.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
8 references
Acknowledgments
Quang Luong
PrymEvol
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for libtiff is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.\n\nSecurity Fix(es):\n\n* libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:16055",
"url": "https://access.redhat.com/errata/RHSA-2026:16055"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2450768",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450768"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_16055.json"
}
],
"title": "Red Hat Security Advisory: libtiff security update",
"tracking": {
"current_release_date": "2026-06-30T04:20:58+00:00",
"generator": {
"date": "2026-06-30T04:20:58+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.0"
}
},
"id": "RHSA-2026:16055",
"initial_release_date": "2026-05-11T20:52:46+00:00",
"revision_history": [
{
"date": "2026-05-11T20:52:46+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-05-11T20:52:46+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T04:20:58+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux CRB (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::crb"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.0.9-37.el8_10.src",
"product": {
"name": "libtiff-0:4.0.9-37.el8_10.src",
"product_id": "libtiff-0:4.0.9-37.el8_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.0.9-37.el8_10?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.0.9-37.el8_10.aarch64",
"product": {
"name": "libtiff-0:4.0.9-37.el8_10.aarch64",
"product_id": "libtiff-0:4.0.9-37.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.0.9-37.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.0.9-37.el8_10.aarch64",
"product": {
"name": "libtiff-devel-0:4.0.9-37.el8_10.aarch64",
"product_id": "libtiff-devel-0:4.0.9-37.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.0.9-37.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.0.9-37.el8_10.aarch64",
"product": {
"name": "libtiff-debugsource-0:4.0.9-37.el8_10.aarch64",
"product_id": "libtiff-debugsource-0:4.0.9-37.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.0.9-37.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.0.9-37.el8_10.aarch64",
"product": {
"name": "libtiff-debuginfo-0:4.0.9-37.el8_10.aarch64",
"product_id": "libtiff-debuginfo-0:4.0.9-37.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.0.9-37.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.aarch64",
"product": {
"name": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.aarch64",
"product_id": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.0.9-37.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-0:4.0.9-37.el8_10.aarch64",
"product": {
"name": "libtiff-tools-0:4.0.9-37.el8_10.aarch64",
"product_id": "libtiff-tools-0:4.0.9-37.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools@4.0.9-37.el8_10?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.0.9-37.el8_10.ppc64le",
"product": {
"name": "libtiff-0:4.0.9-37.el8_10.ppc64le",
"product_id": "libtiff-0:4.0.9-37.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.0.9-37.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.0.9-37.el8_10.ppc64le",
"product": {
"name": "libtiff-devel-0:4.0.9-37.el8_10.ppc64le",
"product_id": "libtiff-devel-0:4.0.9-37.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.0.9-37.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.0.9-37.el8_10.ppc64le",
"product": {
"name": "libtiff-debugsource-0:4.0.9-37.el8_10.ppc64le",
"product_id": "libtiff-debugsource-0:4.0.9-37.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.0.9-37.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.0.9-37.el8_10.ppc64le",
"product": {
"name": "libtiff-debuginfo-0:4.0.9-37.el8_10.ppc64le",
"product_id": "libtiff-debuginfo-0:4.0.9-37.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.0.9-37.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.ppc64le",
"product": {
"name": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.ppc64le",
"product_id": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.0.9-37.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-0:4.0.9-37.el8_10.ppc64le",
"product": {
"name": "libtiff-tools-0:4.0.9-37.el8_10.ppc64le",
"product_id": "libtiff-tools-0:4.0.9-37.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools@4.0.9-37.el8_10?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.0.9-37.el8_10.i686",
"product": {
"name": "libtiff-0:4.0.9-37.el8_10.i686",
"product_id": "libtiff-0:4.0.9-37.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.0.9-37.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.0.9-37.el8_10.i686",
"product": {
"name": "libtiff-devel-0:4.0.9-37.el8_10.i686",
"product_id": "libtiff-devel-0:4.0.9-37.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.0.9-37.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.0.9-37.el8_10.i686",
"product": {
"name": "libtiff-debugsource-0:4.0.9-37.el8_10.i686",
"product_id": "libtiff-debugsource-0:4.0.9-37.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.0.9-37.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.0.9-37.el8_10.i686",
"product": {
"name": "libtiff-debuginfo-0:4.0.9-37.el8_10.i686",
"product_id": "libtiff-debuginfo-0:4.0.9-37.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.0.9-37.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.i686",
"product": {
"name": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.i686",
"product_id": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.0.9-37.el8_10?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.0.9-37.el8_10.x86_64",
"product": {
"name": "libtiff-0:4.0.9-37.el8_10.x86_64",
"product_id": "libtiff-0:4.0.9-37.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.0.9-37.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.0.9-37.el8_10.x86_64",
"product": {
"name": "libtiff-devel-0:4.0.9-37.el8_10.x86_64",
"product_id": "libtiff-devel-0:4.0.9-37.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.0.9-37.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.0.9-37.el8_10.x86_64",
"product": {
"name": "libtiff-debugsource-0:4.0.9-37.el8_10.x86_64",
"product_id": "libtiff-debugsource-0:4.0.9-37.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.0.9-37.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.0.9-37.el8_10.x86_64",
"product": {
"name": "libtiff-debuginfo-0:4.0.9-37.el8_10.x86_64",
"product_id": "libtiff-debuginfo-0:4.0.9-37.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.0.9-37.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.x86_64",
"product": {
"name": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.x86_64",
"product_id": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.0.9-37.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-0:4.0.9-37.el8_10.x86_64",
"product": {
"name": "libtiff-tools-0:4.0.9-37.el8_10.x86_64",
"product_id": "libtiff-tools-0:4.0.9-37.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools@4.0.9-37.el8_10?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.0.9-37.el8_10.s390x",
"product": {
"name": "libtiff-0:4.0.9-37.el8_10.s390x",
"product_id": "libtiff-0:4.0.9-37.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.0.9-37.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.0.9-37.el8_10.s390x",
"product": {
"name": "libtiff-devel-0:4.0.9-37.el8_10.s390x",
"product_id": "libtiff-devel-0:4.0.9-37.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.0.9-37.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.0.9-37.el8_10.s390x",
"product": {
"name": "libtiff-debugsource-0:4.0.9-37.el8_10.s390x",
"product_id": "libtiff-debugsource-0:4.0.9-37.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.0.9-37.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.0.9-37.el8_10.s390x",
"product": {
"name": "libtiff-debuginfo-0:4.0.9-37.el8_10.s390x",
"product_id": "libtiff-debuginfo-0:4.0.9-37.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.0.9-37.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.s390x",
"product": {
"name": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.s390x",
"product_id": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.0.9-37.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-0:4.0.9-37.el8_10.s390x",
"product": {
"name": "libtiff-tools-0:4.0.9-37.el8_10.s390x",
"product_id": "libtiff-tools-0:4.0.9-37.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools@4.0.9-37.el8_10?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.0.9-37.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.aarch64"
},
"product_reference": "libtiff-0:4.0.9-37.el8_10.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.0.9-37.el8_10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.i686"
},
"product_reference": "libtiff-0:4.0.9-37.el8_10.i686",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.0.9-37.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.ppc64le"
},
"product_reference": "libtiff-0:4.0.9-37.el8_10.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.0.9-37.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.s390x"
},
"product_reference": "libtiff-0:4.0.9-37.el8_10.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.0.9-37.el8_10.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.src"
},
"product_reference": "libtiff-0:4.0.9-37.el8_10.src",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.0.9-37.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.x86_64"
},
"product_reference": "libtiff-0:4.0.9-37.el8_10.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.0.9-37.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.aarch64"
},
"product_reference": "libtiff-debuginfo-0:4.0.9-37.el8_10.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.0.9-37.el8_10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.i686"
},
"product_reference": "libtiff-debuginfo-0:4.0.9-37.el8_10.i686",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.0.9-37.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.ppc64le"
},
"product_reference": "libtiff-debuginfo-0:4.0.9-37.el8_10.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.0.9-37.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.s390x"
},
"product_reference": "libtiff-debuginfo-0:4.0.9-37.el8_10.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.0.9-37.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.x86_64"
},
"product_reference": "libtiff-debuginfo-0:4.0.9-37.el8_10.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.0.9-37.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.aarch64"
},
"product_reference": "libtiff-debugsource-0:4.0.9-37.el8_10.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.0.9-37.el8_10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.i686"
},
"product_reference": "libtiff-debugsource-0:4.0.9-37.el8_10.i686",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.0.9-37.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.ppc64le"
},
"product_reference": "libtiff-debugsource-0:4.0.9-37.el8_10.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.0.9-37.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.s390x"
},
"product_reference": "libtiff-debugsource-0:4.0.9-37.el8_10.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.0.9-37.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.x86_64"
},
"product_reference": "libtiff-debugsource-0:4.0.9-37.el8_10.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.0.9-37.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.aarch64"
},
"product_reference": "libtiff-devel-0:4.0.9-37.el8_10.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.0.9-37.el8_10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.i686"
},
"product_reference": "libtiff-devel-0:4.0.9-37.el8_10.i686",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.0.9-37.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.ppc64le"
},
"product_reference": "libtiff-devel-0:4.0.9-37.el8_10.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.0.9-37.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.s390x"
},
"product_reference": "libtiff-devel-0:4.0.9-37.el8_10.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.0.9-37.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.x86_64"
},
"product_reference": "libtiff-devel-0:4.0.9-37.el8_10.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.aarch64"
},
"product_reference": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.aarch64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.i686"
},
"product_reference": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.i686",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.ppc64le"
},
"product_reference": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.ppc64le",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.s390x"
},
"product_reference": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.s390x",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.x86_64"
},
"product_reference": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.x86_64",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.0.9-37.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.aarch64"
},
"product_reference": "libtiff-debuginfo-0:4.0.9-37.el8_10.aarch64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.0.9-37.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.ppc64le"
},
"product_reference": "libtiff-debuginfo-0:4.0.9-37.el8_10.ppc64le",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.0.9-37.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.s390x"
},
"product_reference": "libtiff-debuginfo-0:4.0.9-37.el8_10.s390x",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.0.9-37.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.x86_64"
},
"product_reference": "libtiff-debuginfo-0:4.0.9-37.el8_10.x86_64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.0.9-37.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.aarch64"
},
"product_reference": "libtiff-debugsource-0:4.0.9-37.el8_10.aarch64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.0.9-37.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.ppc64le"
},
"product_reference": "libtiff-debugsource-0:4.0.9-37.el8_10.ppc64le",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.0.9-37.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.s390x"
},
"product_reference": "libtiff-debugsource-0:4.0.9-37.el8_10.s390x",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.0.9-37.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.x86_64"
},
"product_reference": "libtiff-debugsource-0:4.0.9-37.el8_10.x86_64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-0:4.0.9-37.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-0:4.0.9-37.el8_10.aarch64"
},
"product_reference": "libtiff-tools-0:4.0.9-37.el8_10.aarch64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-0:4.0.9-37.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-0:4.0.9-37.el8_10.ppc64le"
},
"product_reference": "libtiff-tools-0:4.0.9-37.el8_10.ppc64le",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-0:4.0.9-37.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-0:4.0.9-37.el8_10.s390x"
},
"product_reference": "libtiff-tools-0:4.0.9-37.el8_10.s390x",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-0:4.0.9-37.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-0:4.0.9-37.el8_10.x86_64"
},
"product_reference": "libtiff-tools-0:4.0.9-37.el8_10.x86_64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.aarch64"
},
"product_reference": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.aarch64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.ppc64le"
},
"product_reference": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.ppc64le",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.s390x"
},
"product_reference": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.s390x",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.x86_64"
},
"product_reference": "libtiff-tools-debuginfo-0:4.0.9-37.el8_10.x86_64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Quang Luong",
"PrymEvol"
]
}
],
"cve": "CVE-2026-4775",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-03-24T14:23:23.826000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450768"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in the libtiff library, affecting the processing of specially crafted TIFF files, could lead to a denial of service or potentially arbitrary code execution. This vulnerability, caused by a signed integer overflow during TIFF image processing, results in an out-of-bounds heap write. Red Hat products that process untrusted TIFF files using libtiff may be impacted.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-0:4.0.9-37.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-0:4.0.9-37.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-0:4.0.9-37.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-0:4.0.9-37.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4775"
},
{
"category": "external",
"summary": "RHBZ#2450768",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450768"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4775",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4775"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4775",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4775"
}
],
"release_date": "2026-03-24T14:33:35.730000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-11T20:52:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-0:4.0.9-37.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-0:4.0.9-37.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-0:4.0.9-37.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-0:4.0.9-37.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:16055"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid processing untrusted or maliciously crafted TIFF files with applications linked against the libtiff library. If processing untrusted TIFF files is unavoidable, consider running the affected applications within a sandboxed environment to limit the potential impact of successful exploitation. This operational control helps contain the effects of an out-of-bounds write, reducing the risk of denial of service or arbitrary code execution.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-0:4.0.9-37.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-0:4.0.9-37.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-0:4.0.9-37.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-0:4.0.9-37.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.src",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-0:4.0.9-37.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-devel-0:4.0.9-37.el8_10.x86_64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.aarch64",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.i686",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.ppc64le",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.s390x",
"AppStream-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.0.9-37.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-debugsource-0:4.0.9-37.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-0:4.0.9-37.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-0:4.0.9-37.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-0:4.0.9-37.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-0:4.0.9-37.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.0.9-37.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing"
}
]
}
RHSA-2026:19150
Vulnerability from csaf_redhat - Published: 2026-05-19 16:26 - Updated: 2026-06-30 04:21Summary
Red Hat Security Advisory: libtiff security update
Severity
Important
Notes
Topic: An update for libtiff is now available for Red Hat Enterprise Linux 10.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.
Security Fix(es):
* libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.
7.8 (High)
Affected products
Fixed
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libtiff-devel-0:4.6.0-8.el10_2.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libtiff-devel-0:4.6.0-8.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libtiff-devel-0:4.6.0-8.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libtiff-devel-0:4.6.0-8.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libtiff-tools-0:4.6.0-8.el10_2.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libtiff-tools-0:4.6.0-8.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libtiff-tools-0:4.6.0-8.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libtiff-tools-0:4.6.0-8.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
8 references
Acknowledgments
Quang Luong
PrymEvol
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for libtiff is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.\n\nSecurity Fix(es):\n\n* libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:19150",
"url": "https://access.redhat.com/errata/RHSA-2026:19150"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2450768",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450768"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19150.json"
}
],
"title": "Red Hat Security Advisory: libtiff security update",
"tracking": {
"current_release_date": "2026-06-30T04:21:15+00:00",
"generator": {
"date": "2026-06-30T04:21:15+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.0"
}
},
"id": "RHSA-2026:19150",
"initial_release_date": "2026-05-19T16:26:01+00:00",
"revision_history": [
{
"date": "2026-05-19T16:26:01+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-05-19T16:26:01+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T04:21:15+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.2"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.2"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.6.0-8.el10_2.1.src",
"product": {
"name": "libtiff-0:4.6.0-8.el10_2.1.src",
"product_id": "libtiff-0:4.6.0-8.el10_2.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.6.0-8.el10_2.1?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.6.0-8.el10_2.1.aarch64",
"product": {
"name": "libtiff-0:4.6.0-8.el10_2.1.aarch64",
"product_id": "libtiff-0:4.6.0-8.el10_2.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.6.0-8.el10_2.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.6.0-8.el10_2.1.aarch64",
"product": {
"name": "libtiff-devel-0:4.6.0-8.el10_2.1.aarch64",
"product_id": "libtiff-devel-0:4.6.0-8.el10_2.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.6.0-8.el10_2.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.6.0-8.el10_2.1.aarch64",
"product": {
"name": "libtiff-debugsource-0:4.6.0-8.el10_2.1.aarch64",
"product_id": "libtiff-debugsource-0:4.6.0-8.el10_2.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.6.0-8.el10_2.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.6.0-8.el10_2.1.aarch64",
"product": {
"name": "libtiff-debuginfo-0:4.6.0-8.el10_2.1.aarch64",
"product_id": "libtiff-debuginfo-0:4.6.0-8.el10_2.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.6.0-8.el10_2.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.aarch64",
"product": {
"name": "libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.aarch64",
"product_id": "libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.6.0-8.el10_2.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-0:4.6.0-8.el10_2.1.aarch64",
"product": {
"name": "libtiff-tools-0:4.6.0-8.el10_2.1.aarch64",
"product_id": "libtiff-tools-0:4.6.0-8.el10_2.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools@4.6.0-8.el10_2.1?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.6.0-8.el10_2.1.ppc64le",
"product": {
"name": "libtiff-0:4.6.0-8.el10_2.1.ppc64le",
"product_id": "libtiff-0:4.6.0-8.el10_2.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.6.0-8.el10_2.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.6.0-8.el10_2.1.ppc64le",
"product": {
"name": "libtiff-devel-0:4.6.0-8.el10_2.1.ppc64le",
"product_id": "libtiff-devel-0:4.6.0-8.el10_2.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.6.0-8.el10_2.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.6.0-8.el10_2.1.ppc64le",
"product": {
"name": "libtiff-debugsource-0:4.6.0-8.el10_2.1.ppc64le",
"product_id": "libtiff-debugsource-0:4.6.0-8.el10_2.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.6.0-8.el10_2.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.6.0-8.el10_2.1.ppc64le",
"product": {
"name": "libtiff-debuginfo-0:4.6.0-8.el10_2.1.ppc64le",
"product_id": "libtiff-debuginfo-0:4.6.0-8.el10_2.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.6.0-8.el10_2.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.ppc64le",
"product": {
"name": "libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.ppc64le",
"product_id": "libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.6.0-8.el10_2.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-0:4.6.0-8.el10_2.1.ppc64le",
"product": {
"name": "libtiff-tools-0:4.6.0-8.el10_2.1.ppc64le",
"product_id": "libtiff-tools-0:4.6.0-8.el10_2.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools@4.6.0-8.el10_2.1?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.6.0-8.el10_2.1.s390x",
"product": {
"name": "libtiff-0:4.6.0-8.el10_2.1.s390x",
"product_id": "libtiff-0:4.6.0-8.el10_2.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.6.0-8.el10_2.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.6.0-8.el10_2.1.s390x",
"product": {
"name": "libtiff-devel-0:4.6.0-8.el10_2.1.s390x",
"product_id": "libtiff-devel-0:4.6.0-8.el10_2.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.6.0-8.el10_2.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.6.0-8.el10_2.1.s390x",
"product": {
"name": "libtiff-debugsource-0:4.6.0-8.el10_2.1.s390x",
"product_id": "libtiff-debugsource-0:4.6.0-8.el10_2.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.6.0-8.el10_2.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.6.0-8.el10_2.1.s390x",
"product": {
"name": "libtiff-debuginfo-0:4.6.0-8.el10_2.1.s390x",
"product_id": "libtiff-debuginfo-0:4.6.0-8.el10_2.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.6.0-8.el10_2.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.s390x",
"product": {
"name": "libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.s390x",
"product_id": "libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.6.0-8.el10_2.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-0:4.6.0-8.el10_2.1.s390x",
"product": {
"name": "libtiff-tools-0:4.6.0-8.el10_2.1.s390x",
"product_id": "libtiff-tools-0:4.6.0-8.el10_2.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools@4.6.0-8.el10_2.1?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.6.0-8.el10_2.1.x86_64",
"product": {
"name": "libtiff-0:4.6.0-8.el10_2.1.x86_64",
"product_id": "libtiff-0:4.6.0-8.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.6.0-8.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.6.0-8.el10_2.1.x86_64",
"product": {
"name": "libtiff-devel-0:4.6.0-8.el10_2.1.x86_64",
"product_id": "libtiff-devel-0:4.6.0-8.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.6.0-8.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.6.0-8.el10_2.1.x86_64",
"product": {
"name": "libtiff-debugsource-0:4.6.0-8.el10_2.1.x86_64",
"product_id": "libtiff-debugsource-0:4.6.0-8.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.6.0-8.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.6.0-8.el10_2.1.x86_64",
"product": {
"name": "libtiff-debuginfo-0:4.6.0-8.el10_2.1.x86_64",
"product_id": "libtiff-debuginfo-0:4.6.0-8.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.6.0-8.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.x86_64",
"product": {
"name": "libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.x86_64",
"product_id": "libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.6.0-8.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-0:4.6.0-8.el10_2.1.x86_64",
"product": {
"name": "libtiff-tools-0:4.6.0-8.el10_2.1.x86_64",
"product_id": "libtiff-tools-0:4.6.0-8.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools@4.6.0-8.el10_2.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.6.0-8.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.aarch64"
},
"product_reference": "libtiff-0:4.6.0-8.el10_2.1.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.6.0-8.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.ppc64le"
},
"product_reference": "libtiff-0:4.6.0-8.el10_2.1.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.6.0-8.el10_2.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.s390x"
},
"product_reference": "libtiff-0:4.6.0-8.el10_2.1.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.6.0-8.el10_2.1.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.src"
},
"product_reference": "libtiff-0:4.6.0-8.el10_2.1.src",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.6.0-8.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.x86_64"
},
"product_reference": "libtiff-0:4.6.0-8.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.6.0-8.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.aarch64"
},
"product_reference": "libtiff-debuginfo-0:4.6.0-8.el10_2.1.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.6.0-8.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.ppc64le"
},
"product_reference": "libtiff-debuginfo-0:4.6.0-8.el10_2.1.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.6.0-8.el10_2.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.s390x"
},
"product_reference": "libtiff-debuginfo-0:4.6.0-8.el10_2.1.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.6.0-8.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.x86_64"
},
"product_reference": "libtiff-debuginfo-0:4.6.0-8.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.6.0-8.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.aarch64"
},
"product_reference": "libtiff-debugsource-0:4.6.0-8.el10_2.1.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.6.0-8.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.ppc64le"
},
"product_reference": "libtiff-debugsource-0:4.6.0-8.el10_2.1.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.6.0-8.el10_2.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.s390x"
},
"product_reference": "libtiff-debugsource-0:4.6.0-8.el10_2.1.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.6.0-8.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.x86_64"
},
"product_reference": "libtiff-debugsource-0:4.6.0-8.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.6.0-8.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libtiff-devel-0:4.6.0-8.el10_2.1.aarch64"
},
"product_reference": "libtiff-devel-0:4.6.0-8.el10_2.1.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.6.0-8.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libtiff-devel-0:4.6.0-8.el10_2.1.ppc64le"
},
"product_reference": "libtiff-devel-0:4.6.0-8.el10_2.1.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.6.0-8.el10_2.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libtiff-devel-0:4.6.0-8.el10_2.1.s390x"
},
"product_reference": "libtiff-devel-0:4.6.0-8.el10_2.1.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.6.0-8.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libtiff-devel-0:4.6.0-8.el10_2.1.x86_64"
},
"product_reference": "libtiff-devel-0:4.6.0-8.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.aarch64"
},
"product_reference": "libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.ppc64le"
},
"product_reference": "libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.s390x"
},
"product_reference": "libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.x86_64"
},
"product_reference": "libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.6.0-8.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.aarch64"
},
"product_reference": "libtiff-debuginfo-0:4.6.0-8.el10_2.1.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.6.0-8.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.ppc64le"
},
"product_reference": "libtiff-debuginfo-0:4.6.0-8.el10_2.1.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.6.0-8.el10_2.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.s390x"
},
"product_reference": "libtiff-debuginfo-0:4.6.0-8.el10_2.1.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.6.0-8.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.x86_64"
},
"product_reference": "libtiff-debuginfo-0:4.6.0-8.el10_2.1.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.6.0-8.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.aarch64"
},
"product_reference": "libtiff-debugsource-0:4.6.0-8.el10_2.1.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.6.0-8.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.ppc64le"
},
"product_reference": "libtiff-debugsource-0:4.6.0-8.el10_2.1.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.6.0-8.el10_2.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.s390x"
},
"product_reference": "libtiff-debugsource-0:4.6.0-8.el10_2.1.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.6.0-8.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.x86_64"
},
"product_reference": "libtiff-debugsource-0:4.6.0-8.el10_2.1.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-0:4.6.0-8.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libtiff-tools-0:4.6.0-8.el10_2.1.aarch64"
},
"product_reference": "libtiff-tools-0:4.6.0-8.el10_2.1.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-0:4.6.0-8.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libtiff-tools-0:4.6.0-8.el10_2.1.ppc64le"
},
"product_reference": "libtiff-tools-0:4.6.0-8.el10_2.1.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-0:4.6.0-8.el10_2.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libtiff-tools-0:4.6.0-8.el10_2.1.s390x"
},
"product_reference": "libtiff-tools-0:4.6.0-8.el10_2.1.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-0:4.6.0-8.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libtiff-tools-0:4.6.0-8.el10_2.1.x86_64"
},
"product_reference": "libtiff-tools-0:4.6.0-8.el10_2.1.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.aarch64"
},
"product_reference": "libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.ppc64le"
},
"product_reference": "libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.s390x"
},
"product_reference": "libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.x86_64"
},
"product_reference": "libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Quang Luong",
"PrymEvol"
]
}
],
"cve": "CVE-2026-4775",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-03-24T14:23:23.826000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450768"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in the libtiff library, affecting the processing of specially crafted TIFF files, could lead to a denial of service or potentially arbitrary code execution. This vulnerability, caused by a signed integer overflow during TIFF image processing, results in an out-of-bounds heap write. Red Hat products that process untrusted TIFF files using libtiff may be impacted.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.aarch64",
"AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.ppc64le",
"AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.s390x",
"AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.src",
"AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.x86_64",
"AppStream-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.aarch64",
"AppStream-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.ppc64le",
"AppStream-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.s390x",
"AppStream-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.x86_64",
"AppStream-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.aarch64",
"AppStream-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.ppc64le",
"AppStream-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.s390x",
"AppStream-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.x86_64",
"AppStream-10.2.Z:libtiff-devel-0:4.6.0-8.el10_2.1.aarch64",
"AppStream-10.2.Z:libtiff-devel-0:4.6.0-8.el10_2.1.ppc64le",
"AppStream-10.2.Z:libtiff-devel-0:4.6.0-8.el10_2.1.s390x",
"AppStream-10.2.Z:libtiff-devel-0:4.6.0-8.el10_2.1.x86_64",
"AppStream-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.aarch64",
"AppStream-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.ppc64le",
"AppStream-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.s390x",
"AppStream-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.x86_64",
"CRB-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.aarch64",
"CRB-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.ppc64le",
"CRB-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.s390x",
"CRB-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.x86_64",
"CRB-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.aarch64",
"CRB-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.ppc64le",
"CRB-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.s390x",
"CRB-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.x86_64",
"CRB-10.2.Z:libtiff-tools-0:4.6.0-8.el10_2.1.aarch64",
"CRB-10.2.Z:libtiff-tools-0:4.6.0-8.el10_2.1.ppc64le",
"CRB-10.2.Z:libtiff-tools-0:4.6.0-8.el10_2.1.s390x",
"CRB-10.2.Z:libtiff-tools-0:4.6.0-8.el10_2.1.x86_64",
"CRB-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.aarch64",
"CRB-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.ppc64le",
"CRB-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.s390x",
"CRB-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4775"
},
{
"category": "external",
"summary": "RHBZ#2450768",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450768"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4775",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4775"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4775",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4775"
}
],
"release_date": "2026-03-24T14:33:35.730000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T16:26:01+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.aarch64",
"AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.ppc64le",
"AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.s390x",
"AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.src",
"AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.x86_64",
"AppStream-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.aarch64",
"AppStream-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.ppc64le",
"AppStream-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.s390x",
"AppStream-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.x86_64",
"AppStream-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.aarch64",
"AppStream-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.ppc64le",
"AppStream-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.s390x",
"AppStream-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.x86_64",
"AppStream-10.2.Z:libtiff-devel-0:4.6.0-8.el10_2.1.aarch64",
"AppStream-10.2.Z:libtiff-devel-0:4.6.0-8.el10_2.1.ppc64le",
"AppStream-10.2.Z:libtiff-devel-0:4.6.0-8.el10_2.1.s390x",
"AppStream-10.2.Z:libtiff-devel-0:4.6.0-8.el10_2.1.x86_64",
"AppStream-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.aarch64",
"AppStream-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.ppc64le",
"AppStream-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.s390x",
"AppStream-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.x86_64",
"CRB-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.aarch64",
"CRB-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.ppc64le",
"CRB-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.s390x",
"CRB-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.x86_64",
"CRB-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.aarch64",
"CRB-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.ppc64le",
"CRB-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.s390x",
"CRB-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.x86_64",
"CRB-10.2.Z:libtiff-tools-0:4.6.0-8.el10_2.1.aarch64",
"CRB-10.2.Z:libtiff-tools-0:4.6.0-8.el10_2.1.ppc64le",
"CRB-10.2.Z:libtiff-tools-0:4.6.0-8.el10_2.1.s390x",
"CRB-10.2.Z:libtiff-tools-0:4.6.0-8.el10_2.1.x86_64",
"CRB-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.aarch64",
"CRB-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.ppc64le",
"CRB-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.s390x",
"CRB-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19150"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid processing untrusted or maliciously crafted TIFF files with applications linked against the libtiff library. If processing untrusted TIFF files is unavoidable, consider running the affected applications within a sandboxed environment to limit the potential impact of successful exploitation. This operational control helps contain the effects of an out-of-bounds write, reducing the risk of denial of service or arbitrary code execution.",
"product_ids": [
"AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.aarch64",
"AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.ppc64le",
"AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.s390x",
"AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.src",
"AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.x86_64",
"AppStream-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.aarch64",
"AppStream-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.ppc64le",
"AppStream-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.s390x",
"AppStream-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.x86_64",
"AppStream-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.aarch64",
"AppStream-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.ppc64le",
"AppStream-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.s390x",
"AppStream-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.x86_64",
"AppStream-10.2.Z:libtiff-devel-0:4.6.0-8.el10_2.1.aarch64",
"AppStream-10.2.Z:libtiff-devel-0:4.6.0-8.el10_2.1.ppc64le",
"AppStream-10.2.Z:libtiff-devel-0:4.6.0-8.el10_2.1.s390x",
"AppStream-10.2.Z:libtiff-devel-0:4.6.0-8.el10_2.1.x86_64",
"AppStream-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.aarch64",
"AppStream-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.ppc64le",
"AppStream-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.s390x",
"AppStream-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.x86_64",
"CRB-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.aarch64",
"CRB-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.ppc64le",
"CRB-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.s390x",
"CRB-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.x86_64",
"CRB-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.aarch64",
"CRB-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.ppc64le",
"CRB-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.s390x",
"CRB-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.x86_64",
"CRB-10.2.Z:libtiff-tools-0:4.6.0-8.el10_2.1.aarch64",
"CRB-10.2.Z:libtiff-tools-0:4.6.0-8.el10_2.1.ppc64le",
"CRB-10.2.Z:libtiff-tools-0:4.6.0-8.el10_2.1.s390x",
"CRB-10.2.Z:libtiff-tools-0:4.6.0-8.el10_2.1.x86_64",
"CRB-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.aarch64",
"CRB-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.ppc64le",
"CRB-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.s390x",
"CRB-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.aarch64",
"AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.ppc64le",
"AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.s390x",
"AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.src",
"AppStream-10.2.Z:libtiff-0:4.6.0-8.el10_2.1.x86_64",
"AppStream-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.aarch64",
"AppStream-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.ppc64le",
"AppStream-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.s390x",
"AppStream-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.x86_64",
"AppStream-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.aarch64",
"AppStream-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.ppc64le",
"AppStream-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.s390x",
"AppStream-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.x86_64",
"AppStream-10.2.Z:libtiff-devel-0:4.6.0-8.el10_2.1.aarch64",
"AppStream-10.2.Z:libtiff-devel-0:4.6.0-8.el10_2.1.ppc64le",
"AppStream-10.2.Z:libtiff-devel-0:4.6.0-8.el10_2.1.s390x",
"AppStream-10.2.Z:libtiff-devel-0:4.6.0-8.el10_2.1.x86_64",
"AppStream-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.aarch64",
"AppStream-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.ppc64le",
"AppStream-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.s390x",
"AppStream-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.x86_64",
"CRB-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.aarch64",
"CRB-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.ppc64le",
"CRB-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.s390x",
"CRB-10.2.Z:libtiff-debuginfo-0:4.6.0-8.el10_2.1.x86_64",
"CRB-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.aarch64",
"CRB-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.ppc64le",
"CRB-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.s390x",
"CRB-10.2.Z:libtiff-debugsource-0:4.6.0-8.el10_2.1.x86_64",
"CRB-10.2.Z:libtiff-tools-0:4.6.0-8.el10_2.1.aarch64",
"CRB-10.2.Z:libtiff-tools-0:4.6.0-8.el10_2.1.ppc64le",
"CRB-10.2.Z:libtiff-tools-0:4.6.0-8.el10_2.1.s390x",
"CRB-10.2.Z:libtiff-tools-0:4.6.0-8.el10_2.1.x86_64",
"CRB-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.aarch64",
"CRB-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.ppc64le",
"CRB-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.s390x",
"CRB-10.2.Z:libtiff-tools-debuginfo-0:4.6.0-8.el10_2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing"
}
]
}
RHSA-2026:19363
Vulnerability from csaf_redhat - Published: 2026-05-19 22:06 - Updated: 2026-06-30 04:21Summary
Red Hat Security Advisory: libtiff security update
Severity
Important
Notes
Topic: An update for libtiff is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.
Security Fix(es):
* libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.
7.8 (High)
Affected products
Fixed
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-0:4.4.0-18.el9_8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-0:4.4.0-18.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-0:4.4.0-18.el9_8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-0:4.4.0-18.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
8 references
Acknowledgments
Quang Luong
PrymEvol
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for libtiff is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.\n\nSecurity Fix(es):\n\n* libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:19363",
"url": "https://access.redhat.com/errata/RHSA-2026:19363"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2450768",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450768"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19363.json"
}
],
"title": "Red Hat Security Advisory: libtiff security update",
"tracking": {
"current_release_date": "2026-06-30T04:21:19+00:00",
"generator": {
"date": "2026-06-30T04:21:19+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.0"
}
},
"id": "RHSA-2026:19363",
"initial_release_date": "2026-05-19T22:06:52+00:00",
"revision_history": [
{
"date": "2026-05-19T22:06:52+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-05-19T22:06:52+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T04:21:19+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::crb"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-tools-0:4.4.0-18.el9_8.s390x",
"product": {
"name": "libtiff-tools-0:4.4.0-18.el9_8.s390x",
"product_id": "libtiff-tools-0:4.4.0-18.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools@4.4.0-18.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.4.0-18.el9_8.s390x",
"product": {
"name": "libtiff-debugsource-0:4.4.0-18.el9_8.s390x",
"product_id": "libtiff-debugsource-0:4.4.0-18.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.4.0-18.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.4.0-18.el9_8.s390x",
"product": {
"name": "libtiff-debuginfo-0:4.4.0-18.el9_8.s390x",
"product_id": "libtiff-debuginfo-0:4.4.0-18.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.4.0-18.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.s390x",
"product": {
"name": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.s390x",
"product_id": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.4.0-18.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-0:4.4.0-18.el9_8.s390x",
"product": {
"name": "libtiff-0:4.4.0-18.el9_8.s390x",
"product_id": "libtiff-0:4.4.0-18.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.4.0-18.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.4.0-18.el9_8.s390x",
"product": {
"name": "libtiff-devel-0:4.4.0-18.el9_8.s390x",
"product_id": "libtiff-devel-0:4.4.0-18.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.4.0-18.el9_8?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-tools-0:4.4.0-18.el9_8.aarch64",
"product": {
"name": "libtiff-tools-0:4.4.0-18.el9_8.aarch64",
"product_id": "libtiff-tools-0:4.4.0-18.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools@4.4.0-18.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.4.0-18.el9_8.aarch64",
"product": {
"name": "libtiff-debugsource-0:4.4.0-18.el9_8.aarch64",
"product_id": "libtiff-debugsource-0:4.4.0-18.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.4.0-18.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.4.0-18.el9_8.aarch64",
"product": {
"name": "libtiff-debuginfo-0:4.4.0-18.el9_8.aarch64",
"product_id": "libtiff-debuginfo-0:4.4.0-18.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.4.0-18.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.aarch64",
"product": {
"name": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.aarch64",
"product_id": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.4.0-18.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-0:4.4.0-18.el9_8.aarch64",
"product": {
"name": "libtiff-0:4.4.0-18.el9_8.aarch64",
"product_id": "libtiff-0:4.4.0-18.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.4.0-18.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.4.0-18.el9_8.aarch64",
"product": {
"name": "libtiff-devel-0:4.4.0-18.el9_8.aarch64",
"product_id": "libtiff-devel-0:4.4.0-18.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.4.0-18.el9_8?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-tools-0:4.4.0-18.el9_8.ppc64le",
"product": {
"name": "libtiff-tools-0:4.4.0-18.el9_8.ppc64le",
"product_id": "libtiff-tools-0:4.4.0-18.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools@4.4.0-18.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.4.0-18.el9_8.ppc64le",
"product": {
"name": "libtiff-debugsource-0:4.4.0-18.el9_8.ppc64le",
"product_id": "libtiff-debugsource-0:4.4.0-18.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.4.0-18.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.4.0-18.el9_8.ppc64le",
"product": {
"name": "libtiff-debuginfo-0:4.4.0-18.el9_8.ppc64le",
"product_id": "libtiff-debuginfo-0:4.4.0-18.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.4.0-18.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.ppc64le",
"product": {
"name": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.ppc64le",
"product_id": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.4.0-18.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-0:4.4.0-18.el9_8.ppc64le",
"product": {
"name": "libtiff-0:4.4.0-18.el9_8.ppc64le",
"product_id": "libtiff-0:4.4.0-18.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.4.0-18.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.4.0-18.el9_8.ppc64le",
"product": {
"name": "libtiff-devel-0:4.4.0-18.el9_8.ppc64le",
"product_id": "libtiff-devel-0:4.4.0-18.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.4.0-18.el9_8?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-tools-0:4.4.0-18.el9_8.x86_64",
"product": {
"name": "libtiff-tools-0:4.4.0-18.el9_8.x86_64",
"product_id": "libtiff-tools-0:4.4.0-18.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools@4.4.0-18.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.4.0-18.el9_8.x86_64",
"product": {
"name": "libtiff-debugsource-0:4.4.0-18.el9_8.x86_64",
"product_id": "libtiff-debugsource-0:4.4.0-18.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.4.0-18.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.4.0-18.el9_8.x86_64",
"product": {
"name": "libtiff-debuginfo-0:4.4.0-18.el9_8.x86_64",
"product_id": "libtiff-debuginfo-0:4.4.0-18.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.4.0-18.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.x86_64",
"product": {
"name": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.x86_64",
"product_id": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.4.0-18.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-0:4.4.0-18.el9_8.x86_64",
"product": {
"name": "libtiff-0:4.4.0-18.el9_8.x86_64",
"product_id": "libtiff-0:4.4.0-18.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.4.0-18.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.4.0-18.el9_8.x86_64",
"product": {
"name": "libtiff-devel-0:4.4.0-18.el9_8.x86_64",
"product_id": "libtiff-devel-0:4.4.0-18.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.4.0-18.el9_8?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.4.0-18.el9_8.src",
"product": {
"name": "libtiff-0:4.4.0-18.el9_8.src",
"product_id": "libtiff-0:4.4.0-18.el9_8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.4.0-18.el9_8?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.4.0-18.el9_8.i686",
"product": {
"name": "libtiff-0:4.4.0-18.el9_8.i686",
"product_id": "libtiff-0:4.4.0-18.el9_8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.4.0-18.el9_8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.4.0-18.el9_8.i686",
"product": {
"name": "libtiff-devel-0:4.4.0-18.el9_8.i686",
"product_id": "libtiff-devel-0:4.4.0-18.el9_8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.4.0-18.el9_8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.4.0-18.el9_8.i686",
"product": {
"name": "libtiff-debugsource-0:4.4.0-18.el9_8.i686",
"product_id": "libtiff-debugsource-0:4.4.0-18.el9_8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.4.0-18.el9_8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.4.0-18.el9_8.i686",
"product": {
"name": "libtiff-debuginfo-0:4.4.0-18.el9_8.i686",
"product_id": "libtiff-debuginfo-0:4.4.0-18.el9_8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.4.0-18.el9_8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.i686",
"product": {
"name": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.i686",
"product_id": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.4.0-18.el9_8?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.4.0-18.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.aarch64"
},
"product_reference": "libtiff-0:4.4.0-18.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.4.0-18.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.i686"
},
"product_reference": "libtiff-0:4.4.0-18.el9_8.i686",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.4.0-18.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.ppc64le"
},
"product_reference": "libtiff-0:4.4.0-18.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.4.0-18.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.s390x"
},
"product_reference": "libtiff-0:4.4.0-18.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.4.0-18.el9_8.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.src"
},
"product_reference": "libtiff-0:4.4.0-18.el9_8.src",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.4.0-18.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.x86_64"
},
"product_reference": "libtiff-0:4.4.0-18.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.4.0-18.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.aarch64"
},
"product_reference": "libtiff-debuginfo-0:4.4.0-18.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.4.0-18.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.i686"
},
"product_reference": "libtiff-debuginfo-0:4.4.0-18.el9_8.i686",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.4.0-18.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.ppc64le"
},
"product_reference": "libtiff-debuginfo-0:4.4.0-18.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.4.0-18.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.s390x"
},
"product_reference": "libtiff-debuginfo-0:4.4.0-18.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.4.0-18.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.x86_64"
},
"product_reference": "libtiff-debuginfo-0:4.4.0-18.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.4.0-18.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.aarch64"
},
"product_reference": "libtiff-debugsource-0:4.4.0-18.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.4.0-18.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.i686"
},
"product_reference": "libtiff-debugsource-0:4.4.0-18.el9_8.i686",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.4.0-18.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.ppc64le"
},
"product_reference": "libtiff-debugsource-0:4.4.0-18.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.4.0-18.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.s390x"
},
"product_reference": "libtiff-debugsource-0:4.4.0-18.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.4.0-18.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.x86_64"
},
"product_reference": "libtiff-debugsource-0:4.4.0-18.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.4.0-18.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.aarch64"
},
"product_reference": "libtiff-devel-0:4.4.0-18.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.4.0-18.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.i686"
},
"product_reference": "libtiff-devel-0:4.4.0-18.el9_8.i686",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.4.0-18.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.ppc64le"
},
"product_reference": "libtiff-devel-0:4.4.0-18.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.4.0-18.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.s390x"
},
"product_reference": "libtiff-devel-0:4.4.0-18.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.4.0-18.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.x86_64"
},
"product_reference": "libtiff-devel-0:4.4.0-18.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.aarch64"
},
"product_reference": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.i686"
},
"product_reference": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.i686",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.ppc64le"
},
"product_reference": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.s390x"
},
"product_reference": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.x86_64"
},
"product_reference": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.4.0-18.el9_8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.aarch64"
},
"product_reference": "libtiff-debuginfo-0:4.4.0-18.el9_8.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.4.0-18.el9_8.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.ppc64le"
},
"product_reference": "libtiff-debuginfo-0:4.4.0-18.el9_8.ppc64le",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.4.0-18.el9_8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.s390x"
},
"product_reference": "libtiff-debuginfo-0:4.4.0-18.el9_8.s390x",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.4.0-18.el9_8.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.x86_64"
},
"product_reference": "libtiff-debuginfo-0:4.4.0-18.el9_8.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.4.0-18.el9_8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.aarch64"
},
"product_reference": "libtiff-debugsource-0:4.4.0-18.el9_8.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.4.0-18.el9_8.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.ppc64le"
},
"product_reference": "libtiff-debugsource-0:4.4.0-18.el9_8.ppc64le",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.4.0-18.el9_8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.s390x"
},
"product_reference": "libtiff-debugsource-0:4.4.0-18.el9_8.s390x",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.4.0-18.el9_8.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.x86_64"
},
"product_reference": "libtiff-debugsource-0:4.4.0-18.el9_8.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-0:4.4.0-18.el9_8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-0:4.4.0-18.el9_8.aarch64"
},
"product_reference": "libtiff-tools-0:4.4.0-18.el9_8.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-0:4.4.0-18.el9_8.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-0:4.4.0-18.el9_8.ppc64le"
},
"product_reference": "libtiff-tools-0:4.4.0-18.el9_8.ppc64le",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-0:4.4.0-18.el9_8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-0:4.4.0-18.el9_8.s390x"
},
"product_reference": "libtiff-tools-0:4.4.0-18.el9_8.s390x",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-0:4.4.0-18.el9_8.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-0:4.4.0-18.el9_8.x86_64"
},
"product_reference": "libtiff-tools-0:4.4.0-18.el9_8.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.aarch64"
},
"product_reference": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.aarch64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.ppc64le"
},
"product_reference": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.ppc64le",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.s390x"
},
"product_reference": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.s390x",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)",
"product_id": "CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.x86_64"
},
"product_reference": "libtiff-tools-debuginfo-0:4.4.0-18.el9_8.x86_64",
"relates_to_product_reference": "CRB-9.8.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Quang Luong",
"PrymEvol"
]
}
],
"cve": "CVE-2026-4775",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-03-24T14:23:23.826000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450768"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in the libtiff library, affecting the processing of specially crafted TIFF files, could lead to a denial of service or potentially arbitrary code execution. This vulnerability, caused by a signed integer overflow during TIFF image processing, results in an out-of-bounds heap write. Red Hat products that process untrusted TIFF files using libtiff may be impacted.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-0:4.4.0-18.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-0:4.4.0-18.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-0:4.4.0-18.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-0:4.4.0-18.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4775"
},
{
"category": "external",
"summary": "RHBZ#2450768",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450768"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4775",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4775"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4775",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4775"
}
],
"release_date": "2026-03-24T14:33:35.730000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T22:06:52+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-0:4.4.0-18.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-0:4.4.0-18.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-0:4.4.0-18.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-0:4.4.0-18.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19363"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid processing untrusted or maliciously crafted TIFF files with applications linked against the libtiff library. If processing untrusted TIFF files is unavoidable, consider running the affected applications within a sandboxed environment to limit the potential impact of successful exploitation. This operational control helps contain the effects of an out-of-bounds write, reducing the risk of denial of service or arbitrary code execution.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-0:4.4.0-18.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-0:4.4.0-18.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-0:4.4.0-18.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-0:4.4.0-18.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.src",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-0:4.4.0-18.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-devel-0:4.4.0-18.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.i686",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debuginfo-0:4.4.0-18.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-debugsource-0:4.4.0-18.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-0:4.4.0-18.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-0:4.4.0-18.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-0:4.4.0-18.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-0:4.4.0-18.el9_8.x86_64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.aarch64",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.ppc64le",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.s390x",
"CRB-9.8.0.Z.MAIN.EUS:libtiff-tools-debuginfo-0:4.4.0-18.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing"
}
]
}
RHSA-2026:19585
Vulnerability from csaf_redhat - Published: 2026-05-20 11:53 - Updated: 2026-06-30 04:21Summary
Red Hat Security Advisory: libtiff security update
Severity
Important
Notes
Topic: An update for libtiff is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.
Security Fix(es):
* libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.
7.8 (High)
Affected products
Fixed
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:libtiff-tools-0:4.4.0-13.el9_6.4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:libtiff-tools-0:4.4.0-13.el9_6.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:libtiff-tools-0:4.4.0-13.el9_6.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:libtiff-tools-0:4.4.0-13.el9_6.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
8 references
Acknowledgments
Quang Luong
PrymEvol
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for libtiff is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.\n\nSecurity Fix(es):\n\n* libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:19585",
"url": "https://access.redhat.com/errata/RHSA-2026:19585"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2450768",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450768"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19585.json"
}
],
"title": "Red Hat Security Advisory: libtiff security update",
"tracking": {
"current_release_date": "2026-06-30T04:21:29+00:00",
"generator": {
"date": "2026-06-30T04:21:29+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.0"
}
},
"id": "RHSA-2026:19585",
"initial_release_date": "2026-05-20T11:53:00+00:00",
"revision_history": [
{
"date": "2026-05-20T11:53:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-05-20T11:53:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T04:21:29+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.6::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product": {
"name": "Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.6::crb"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.4.0-13.el9_6.4.ppc64le",
"product": {
"name": "libtiff-0:4.4.0-13.el9_6.4.ppc64le",
"product_id": "libtiff-0:4.4.0-13.el9_6.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.4.0-13.el9_6.4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.4.0-13.el9_6.4.ppc64le",
"product": {
"name": "libtiff-devel-0:4.4.0-13.el9_6.4.ppc64le",
"product_id": "libtiff-devel-0:4.4.0-13.el9_6.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.4.0-13.el9_6.4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.4.0-13.el9_6.4.ppc64le",
"product": {
"name": "libtiff-debugsource-0:4.4.0-13.el9_6.4.ppc64le",
"product_id": "libtiff-debugsource-0:4.4.0-13.el9_6.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.4.0-13.el9_6.4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.ppc64le",
"product": {
"name": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.ppc64le",
"product_id": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.4.0-13.el9_6.4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.ppc64le",
"product": {
"name": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.ppc64le",
"product_id": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.4.0-13.el9_6.4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-0:4.4.0-13.el9_6.4.ppc64le",
"product": {
"name": "libtiff-tools-0:4.4.0-13.el9_6.4.ppc64le",
"product_id": "libtiff-tools-0:4.4.0-13.el9_6.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools@4.4.0-13.el9_6.4?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.4.0-13.el9_6.4.i686",
"product": {
"name": "libtiff-0:4.4.0-13.el9_6.4.i686",
"product_id": "libtiff-0:4.4.0-13.el9_6.4.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.4.0-13.el9_6.4?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.4.0-13.el9_6.4.i686",
"product": {
"name": "libtiff-devel-0:4.4.0-13.el9_6.4.i686",
"product_id": "libtiff-devel-0:4.4.0-13.el9_6.4.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.4.0-13.el9_6.4?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.4.0-13.el9_6.4.i686",
"product": {
"name": "libtiff-debugsource-0:4.4.0-13.el9_6.4.i686",
"product_id": "libtiff-debugsource-0:4.4.0-13.el9_6.4.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.4.0-13.el9_6.4?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.i686",
"product": {
"name": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.i686",
"product_id": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.4.0-13.el9_6.4?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.i686",
"product": {
"name": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.i686",
"product_id": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.4.0-13.el9_6.4?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.4.0-13.el9_6.4.x86_64",
"product": {
"name": "libtiff-0:4.4.0-13.el9_6.4.x86_64",
"product_id": "libtiff-0:4.4.0-13.el9_6.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.4.0-13.el9_6.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.4.0-13.el9_6.4.x86_64",
"product": {
"name": "libtiff-devel-0:4.4.0-13.el9_6.4.x86_64",
"product_id": "libtiff-devel-0:4.4.0-13.el9_6.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.4.0-13.el9_6.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.4.0-13.el9_6.4.x86_64",
"product": {
"name": "libtiff-debugsource-0:4.4.0-13.el9_6.4.x86_64",
"product_id": "libtiff-debugsource-0:4.4.0-13.el9_6.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.4.0-13.el9_6.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.x86_64",
"product": {
"name": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.x86_64",
"product_id": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.4.0-13.el9_6.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.x86_64",
"product": {
"name": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.x86_64",
"product_id": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.4.0-13.el9_6.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-0:4.4.0-13.el9_6.4.x86_64",
"product": {
"name": "libtiff-tools-0:4.4.0-13.el9_6.4.x86_64",
"product_id": "libtiff-tools-0:4.4.0-13.el9_6.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools@4.4.0-13.el9_6.4?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.4.0-13.el9_6.4.s390x",
"product": {
"name": "libtiff-0:4.4.0-13.el9_6.4.s390x",
"product_id": "libtiff-0:4.4.0-13.el9_6.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.4.0-13.el9_6.4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.4.0-13.el9_6.4.s390x",
"product": {
"name": "libtiff-devel-0:4.4.0-13.el9_6.4.s390x",
"product_id": "libtiff-devel-0:4.4.0-13.el9_6.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.4.0-13.el9_6.4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.4.0-13.el9_6.4.s390x",
"product": {
"name": "libtiff-debugsource-0:4.4.0-13.el9_6.4.s390x",
"product_id": "libtiff-debugsource-0:4.4.0-13.el9_6.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.4.0-13.el9_6.4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.s390x",
"product": {
"name": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.s390x",
"product_id": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.4.0-13.el9_6.4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.s390x",
"product": {
"name": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.s390x",
"product_id": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.4.0-13.el9_6.4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-0:4.4.0-13.el9_6.4.s390x",
"product": {
"name": "libtiff-tools-0:4.4.0-13.el9_6.4.s390x",
"product_id": "libtiff-tools-0:4.4.0-13.el9_6.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools@4.4.0-13.el9_6.4?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.4.0-13.el9_6.4.src",
"product": {
"name": "libtiff-0:4.4.0-13.el9_6.4.src",
"product_id": "libtiff-0:4.4.0-13.el9_6.4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.4.0-13.el9_6.4?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.4.0-13.el9_6.4.aarch64",
"product": {
"name": "libtiff-0:4.4.0-13.el9_6.4.aarch64",
"product_id": "libtiff-0:4.4.0-13.el9_6.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.4.0-13.el9_6.4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.4.0-13.el9_6.4.aarch64",
"product": {
"name": "libtiff-devel-0:4.4.0-13.el9_6.4.aarch64",
"product_id": "libtiff-devel-0:4.4.0-13.el9_6.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.4.0-13.el9_6.4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.4.0-13.el9_6.4.aarch64",
"product": {
"name": "libtiff-debugsource-0:4.4.0-13.el9_6.4.aarch64",
"product_id": "libtiff-debugsource-0:4.4.0-13.el9_6.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.4.0-13.el9_6.4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.aarch64",
"product": {
"name": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.aarch64",
"product_id": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.4.0-13.el9_6.4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.aarch64",
"product": {
"name": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.aarch64",
"product_id": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.4.0-13.el9_6.4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-0:4.4.0-13.el9_6.4.aarch64",
"product": {
"name": "libtiff-tools-0:4.4.0-13.el9_6.4.aarch64",
"product_id": "libtiff-tools-0:4.4.0-13.el9_6.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools@4.4.0-13.el9_6.4?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.4.0-13.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.aarch64"
},
"product_reference": "libtiff-0:4.4.0-13.el9_6.4.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.4.0-13.el9_6.4.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.i686"
},
"product_reference": "libtiff-0:4.4.0-13.el9_6.4.i686",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.4.0-13.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.ppc64le"
},
"product_reference": "libtiff-0:4.4.0-13.el9_6.4.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.4.0-13.el9_6.4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.s390x"
},
"product_reference": "libtiff-0:4.4.0-13.el9_6.4.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.4.0-13.el9_6.4.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.src"
},
"product_reference": "libtiff-0:4.4.0-13.el9_6.4.src",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.4.0-13.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.x86_64"
},
"product_reference": "libtiff-0:4.4.0-13.el9_6.4.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.aarch64"
},
"product_reference": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.i686"
},
"product_reference": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.i686",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.ppc64le"
},
"product_reference": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.s390x"
},
"product_reference": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.x86_64"
},
"product_reference": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.4.0-13.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.aarch64"
},
"product_reference": "libtiff-debugsource-0:4.4.0-13.el9_6.4.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.4.0-13.el9_6.4.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.i686"
},
"product_reference": "libtiff-debugsource-0:4.4.0-13.el9_6.4.i686",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.4.0-13.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.ppc64le"
},
"product_reference": "libtiff-debugsource-0:4.4.0-13.el9_6.4.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.4.0-13.el9_6.4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.s390x"
},
"product_reference": "libtiff-debugsource-0:4.4.0-13.el9_6.4.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.4.0-13.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.x86_64"
},
"product_reference": "libtiff-debugsource-0:4.4.0-13.el9_6.4.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.4.0-13.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.aarch64"
},
"product_reference": "libtiff-devel-0:4.4.0-13.el9_6.4.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.4.0-13.el9_6.4.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.i686"
},
"product_reference": "libtiff-devel-0:4.4.0-13.el9_6.4.i686",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.4.0-13.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.ppc64le"
},
"product_reference": "libtiff-devel-0:4.4.0-13.el9_6.4.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.4.0-13.el9_6.4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.s390x"
},
"product_reference": "libtiff-devel-0:4.4.0-13.el9_6.4.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.4.0-13.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.x86_64"
},
"product_reference": "libtiff-devel-0:4.4.0-13.el9_6.4.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.aarch64"
},
"product_reference": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.i686"
},
"product_reference": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.i686",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.ppc64le"
},
"product_reference": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.s390x"
},
"product_reference": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.x86_64"
},
"product_reference": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.aarch64"
},
"product_reference": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.ppc64le"
},
"product_reference": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.s390x"
},
"product_reference": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.x86_64"
},
"product_reference": "libtiff-debuginfo-0:4.4.0-13.el9_6.4.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.4.0-13.el9_6.4.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.aarch64"
},
"product_reference": "libtiff-debugsource-0:4.4.0-13.el9_6.4.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.4.0-13.el9_6.4.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.ppc64le"
},
"product_reference": "libtiff-debugsource-0:4.4.0-13.el9_6.4.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.4.0-13.el9_6.4.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.s390x"
},
"product_reference": "libtiff-debugsource-0:4.4.0-13.el9_6.4.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.4.0-13.el9_6.4.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.x86_64"
},
"product_reference": "libtiff-debugsource-0:4.4.0-13.el9_6.4.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-0:4.4.0-13.el9_6.4.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:libtiff-tools-0:4.4.0-13.el9_6.4.aarch64"
},
"product_reference": "libtiff-tools-0:4.4.0-13.el9_6.4.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-0:4.4.0-13.el9_6.4.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:libtiff-tools-0:4.4.0-13.el9_6.4.ppc64le"
},
"product_reference": "libtiff-tools-0:4.4.0-13.el9_6.4.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-0:4.4.0-13.el9_6.4.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:libtiff-tools-0:4.4.0-13.el9_6.4.s390x"
},
"product_reference": "libtiff-tools-0:4.4.0-13.el9_6.4.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-0:4.4.0-13.el9_6.4.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:libtiff-tools-0:4.4.0-13.el9_6.4.x86_64"
},
"product_reference": "libtiff-tools-0:4.4.0-13.el9_6.4.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.aarch64"
},
"product_reference": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.aarch64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.ppc64le"
},
"product_reference": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.ppc64le",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.s390x"
},
"product_reference": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.s390x",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
"product_id": "CRB-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.x86_64"
},
"product_reference": "libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.x86_64",
"relates_to_product_reference": "CRB-9.6.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Quang Luong",
"PrymEvol"
]
}
],
"cve": "CVE-2026-4775",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-03-24T14:23:23.826000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450768"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in the libtiff library, affecting the processing of specially crafted TIFF files, could lead to a denial of service or potentially arbitrary code execution. This vulnerability, caused by a signed integer overflow during TIFF image processing, results in an out-of-bounds heap write. Red Hat products that process untrusted TIFF files using libtiff may be impacted.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.i686",
"AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.src",
"AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.i686",
"AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.i686",
"AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.i686",
"AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.i686",
"AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.x86_64",
"CRB-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.aarch64",
"CRB-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.ppc64le",
"CRB-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.s390x",
"CRB-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.x86_64",
"CRB-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.aarch64",
"CRB-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.ppc64le",
"CRB-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.s390x",
"CRB-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.x86_64",
"CRB-9.6.0.Z.EUS:libtiff-tools-0:4.4.0-13.el9_6.4.aarch64",
"CRB-9.6.0.Z.EUS:libtiff-tools-0:4.4.0-13.el9_6.4.ppc64le",
"CRB-9.6.0.Z.EUS:libtiff-tools-0:4.4.0-13.el9_6.4.s390x",
"CRB-9.6.0.Z.EUS:libtiff-tools-0:4.4.0-13.el9_6.4.x86_64",
"CRB-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.aarch64",
"CRB-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.ppc64le",
"CRB-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.s390x",
"CRB-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4775"
},
{
"category": "external",
"summary": "RHBZ#2450768",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450768"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4775",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4775"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4775",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4775"
}
],
"release_date": "2026-03-24T14:33:35.730000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-20T11:53:00+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.i686",
"AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.src",
"AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.i686",
"AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.i686",
"AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.i686",
"AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.i686",
"AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.x86_64",
"CRB-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.aarch64",
"CRB-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.ppc64le",
"CRB-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.s390x",
"CRB-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.x86_64",
"CRB-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.aarch64",
"CRB-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.ppc64le",
"CRB-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.s390x",
"CRB-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.x86_64",
"CRB-9.6.0.Z.EUS:libtiff-tools-0:4.4.0-13.el9_6.4.aarch64",
"CRB-9.6.0.Z.EUS:libtiff-tools-0:4.4.0-13.el9_6.4.ppc64le",
"CRB-9.6.0.Z.EUS:libtiff-tools-0:4.4.0-13.el9_6.4.s390x",
"CRB-9.6.0.Z.EUS:libtiff-tools-0:4.4.0-13.el9_6.4.x86_64",
"CRB-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.aarch64",
"CRB-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.ppc64le",
"CRB-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.s390x",
"CRB-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19585"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid processing untrusted or maliciously crafted TIFF files with applications linked against the libtiff library. If processing untrusted TIFF files is unavoidable, consider running the affected applications within a sandboxed environment to limit the potential impact of successful exploitation. This operational control helps contain the effects of an out-of-bounds write, reducing the risk of denial of service or arbitrary code execution.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.i686",
"AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.src",
"AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.i686",
"AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.i686",
"AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.i686",
"AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.i686",
"AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.x86_64",
"CRB-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.aarch64",
"CRB-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.ppc64le",
"CRB-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.s390x",
"CRB-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.x86_64",
"CRB-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.aarch64",
"CRB-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.ppc64le",
"CRB-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.s390x",
"CRB-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.x86_64",
"CRB-9.6.0.Z.EUS:libtiff-tools-0:4.4.0-13.el9_6.4.aarch64",
"CRB-9.6.0.Z.EUS:libtiff-tools-0:4.4.0-13.el9_6.4.ppc64le",
"CRB-9.6.0.Z.EUS:libtiff-tools-0:4.4.0-13.el9_6.4.s390x",
"CRB-9.6.0.Z.EUS:libtiff-tools-0:4.4.0-13.el9_6.4.x86_64",
"CRB-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.aarch64",
"CRB-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.ppc64le",
"CRB-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.s390x",
"CRB-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.i686",
"AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.src",
"AppStream-9.6.0.Z.EUS:libtiff-0:4.4.0-13.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.i686",
"AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.i686",
"AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.i686",
"AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:libtiff-devel-0:4.4.0-13.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.i686",
"AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.x86_64",
"CRB-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.aarch64",
"CRB-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.ppc64le",
"CRB-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.s390x",
"CRB-9.6.0.Z.EUS:libtiff-debuginfo-0:4.4.0-13.el9_6.4.x86_64",
"CRB-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.aarch64",
"CRB-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.ppc64le",
"CRB-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.s390x",
"CRB-9.6.0.Z.EUS:libtiff-debugsource-0:4.4.0-13.el9_6.4.x86_64",
"CRB-9.6.0.Z.EUS:libtiff-tools-0:4.4.0-13.el9_6.4.aarch64",
"CRB-9.6.0.Z.EUS:libtiff-tools-0:4.4.0-13.el9_6.4.ppc64le",
"CRB-9.6.0.Z.EUS:libtiff-tools-0:4.4.0-13.el9_6.4.s390x",
"CRB-9.6.0.Z.EUS:libtiff-tools-0:4.4.0-13.el9_6.4.x86_64",
"CRB-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.aarch64",
"CRB-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.ppc64le",
"CRB-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.s390x",
"CRB-9.6.0.Z.EUS:libtiff-tools-debuginfo-0:4.4.0-13.el9_6.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing"
}
]
}
RHSA-2026:19586
Vulnerability from csaf_redhat - Published: 2026-05-20 11:26 - Updated: 2026-06-30 04:21Summary
Red Hat Security Advisory: libtiff security update
Severity
Important
Notes
Topic: An update for libtiff is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.
Security Fix(es):
* libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.
7.8 (High)
Affected products
Fixed
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:libtiff-devel-0:4.6.0-6.el10_0.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:libtiff-devel-0:4.6.0-6.el10_0.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:libtiff-devel-0:4.6.0-6.el10_0.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:libtiff-devel-0:4.6.0-6.el10_0.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:libtiff-tools-0:4.6.0-6.el10_0.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:libtiff-tools-0:4.6.0-6.el10_0.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:libtiff-tools-0:4.6.0-6.el10_0.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:libtiff-tools-0:4.6.0-6.el10_0.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
8 references
Acknowledgments
Quang Luong
PrymEvol
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for libtiff is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.\n\nSecurity Fix(es):\n\n* libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:19586",
"url": "https://access.redhat.com/errata/RHSA-2026:19586"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2450768",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450768"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19586.json"
}
],
"title": "Red Hat Security Advisory: libtiff security update",
"tracking": {
"current_release_date": "2026-06-30T04:21:28+00:00",
"generator": {
"date": "2026-06-30T04:21:28+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.0"
}
},
"id": "RHSA-2026:19586",
"initial_release_date": "2026-05-20T11:26:44+00:00",
"revision_history": [
{
"date": "2026-05-20T11:26:44+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-05-20T11:26:44+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T04:21:28+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux_eus:10.0"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product": {
"name": "Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux_eus:10.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.6.0-6.el10_0.3.src",
"product": {
"name": "libtiff-0:4.6.0-6.el10_0.3.src",
"product_id": "libtiff-0:4.6.0-6.el10_0.3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.6.0-6.el10_0.3?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.6.0-6.el10_0.3.aarch64",
"product": {
"name": "libtiff-0:4.6.0-6.el10_0.3.aarch64",
"product_id": "libtiff-0:4.6.0-6.el10_0.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.6.0-6.el10_0.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.6.0-6.el10_0.3.aarch64",
"product": {
"name": "libtiff-devel-0:4.6.0-6.el10_0.3.aarch64",
"product_id": "libtiff-devel-0:4.6.0-6.el10_0.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.6.0-6.el10_0.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.6.0-6.el10_0.3.aarch64",
"product": {
"name": "libtiff-debugsource-0:4.6.0-6.el10_0.3.aarch64",
"product_id": "libtiff-debugsource-0:4.6.0-6.el10_0.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.6.0-6.el10_0.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.6.0-6.el10_0.3.aarch64",
"product": {
"name": "libtiff-debuginfo-0:4.6.0-6.el10_0.3.aarch64",
"product_id": "libtiff-debuginfo-0:4.6.0-6.el10_0.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.6.0-6.el10_0.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.aarch64",
"product": {
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.aarch64",
"product_id": "libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.6.0-6.el10_0.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-0:4.6.0-6.el10_0.3.aarch64",
"product": {
"name": "libtiff-tools-0:4.6.0-6.el10_0.3.aarch64",
"product_id": "libtiff-tools-0:4.6.0-6.el10_0.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools@4.6.0-6.el10_0.3?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.6.0-6.el10_0.3.ppc64le",
"product": {
"name": "libtiff-0:4.6.0-6.el10_0.3.ppc64le",
"product_id": "libtiff-0:4.6.0-6.el10_0.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.6.0-6.el10_0.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.6.0-6.el10_0.3.ppc64le",
"product": {
"name": "libtiff-devel-0:4.6.0-6.el10_0.3.ppc64le",
"product_id": "libtiff-devel-0:4.6.0-6.el10_0.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.6.0-6.el10_0.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.6.0-6.el10_0.3.ppc64le",
"product": {
"name": "libtiff-debugsource-0:4.6.0-6.el10_0.3.ppc64le",
"product_id": "libtiff-debugsource-0:4.6.0-6.el10_0.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.6.0-6.el10_0.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.6.0-6.el10_0.3.ppc64le",
"product": {
"name": "libtiff-debuginfo-0:4.6.0-6.el10_0.3.ppc64le",
"product_id": "libtiff-debuginfo-0:4.6.0-6.el10_0.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.6.0-6.el10_0.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.ppc64le",
"product": {
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.ppc64le",
"product_id": "libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.6.0-6.el10_0.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-0:4.6.0-6.el10_0.3.ppc64le",
"product": {
"name": "libtiff-tools-0:4.6.0-6.el10_0.3.ppc64le",
"product_id": "libtiff-tools-0:4.6.0-6.el10_0.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools@4.6.0-6.el10_0.3?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.6.0-6.el10_0.3.s390x",
"product": {
"name": "libtiff-0:4.6.0-6.el10_0.3.s390x",
"product_id": "libtiff-0:4.6.0-6.el10_0.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.6.0-6.el10_0.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.6.0-6.el10_0.3.s390x",
"product": {
"name": "libtiff-devel-0:4.6.0-6.el10_0.3.s390x",
"product_id": "libtiff-devel-0:4.6.0-6.el10_0.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.6.0-6.el10_0.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.6.0-6.el10_0.3.s390x",
"product": {
"name": "libtiff-debugsource-0:4.6.0-6.el10_0.3.s390x",
"product_id": "libtiff-debugsource-0:4.6.0-6.el10_0.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.6.0-6.el10_0.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.6.0-6.el10_0.3.s390x",
"product": {
"name": "libtiff-debuginfo-0:4.6.0-6.el10_0.3.s390x",
"product_id": "libtiff-debuginfo-0:4.6.0-6.el10_0.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.6.0-6.el10_0.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.s390x",
"product": {
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.s390x",
"product_id": "libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.6.0-6.el10_0.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-0:4.6.0-6.el10_0.3.s390x",
"product": {
"name": "libtiff-tools-0:4.6.0-6.el10_0.3.s390x",
"product_id": "libtiff-tools-0:4.6.0-6.el10_0.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools@4.6.0-6.el10_0.3?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libtiff-0:4.6.0-6.el10_0.3.x86_64",
"product": {
"name": "libtiff-0:4.6.0-6.el10_0.3.x86_64",
"product_id": "libtiff-0:4.6.0-6.el10_0.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff@4.6.0-6.el10_0.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-devel-0:4.6.0-6.el10_0.3.x86_64",
"product": {
"name": "libtiff-devel-0:4.6.0-6.el10_0.3.x86_64",
"product_id": "libtiff-devel-0:4.6.0-6.el10_0.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-devel@4.6.0-6.el10_0.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-debugsource-0:4.6.0-6.el10_0.3.x86_64",
"product": {
"name": "libtiff-debugsource-0:4.6.0-6.el10_0.3.x86_64",
"product_id": "libtiff-debugsource-0:4.6.0-6.el10_0.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debugsource@4.6.0-6.el10_0.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-debuginfo-0:4.6.0-6.el10_0.3.x86_64",
"product": {
"name": "libtiff-debuginfo-0:4.6.0-6.el10_0.3.x86_64",
"product_id": "libtiff-debuginfo-0:4.6.0-6.el10_0.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-debuginfo@4.6.0-6.el10_0.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.x86_64",
"product": {
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.x86_64",
"product_id": "libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools-debuginfo@4.6.0-6.el10_0.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libtiff-tools-0:4.6.0-6.el10_0.3.x86_64",
"product": {
"name": "libtiff-tools-0:4.6.0-6.el10_0.3.x86_64",
"product_id": "libtiff-tools-0:4.6.0-6.el10_0.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libtiff-tools@4.6.0-6.el10_0.3?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.6.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.aarch64"
},
"product_reference": "libtiff-0:4.6.0-6.el10_0.3.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.6.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.ppc64le"
},
"product_reference": "libtiff-0:4.6.0-6.el10_0.3.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.6.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.s390x"
},
"product_reference": "libtiff-0:4.6.0-6.el10_0.3.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.6.0-6.el10_0.3.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.src"
},
"product_reference": "libtiff-0:4.6.0-6.el10_0.3.src",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-0:4.6.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.x86_64"
},
"product_reference": "libtiff-0:4.6.0-6.el10_0.3.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.6.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.aarch64"
},
"product_reference": "libtiff-debuginfo-0:4.6.0-6.el10_0.3.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.6.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.ppc64le"
},
"product_reference": "libtiff-debuginfo-0:4.6.0-6.el10_0.3.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.6.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.s390x"
},
"product_reference": "libtiff-debuginfo-0:4.6.0-6.el10_0.3.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.6.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.x86_64"
},
"product_reference": "libtiff-debuginfo-0:4.6.0-6.el10_0.3.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.6.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.aarch64"
},
"product_reference": "libtiff-debugsource-0:4.6.0-6.el10_0.3.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.6.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.ppc64le"
},
"product_reference": "libtiff-debugsource-0:4.6.0-6.el10_0.3.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.6.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.s390x"
},
"product_reference": "libtiff-debugsource-0:4.6.0-6.el10_0.3.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.6.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.x86_64"
},
"product_reference": "libtiff-debugsource-0:4.6.0-6.el10_0.3.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.6.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:libtiff-devel-0:4.6.0-6.el10_0.3.aarch64"
},
"product_reference": "libtiff-devel-0:4.6.0-6.el10_0.3.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.6.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:libtiff-devel-0:4.6.0-6.el10_0.3.ppc64le"
},
"product_reference": "libtiff-devel-0:4.6.0-6.el10_0.3.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.6.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:libtiff-devel-0:4.6.0-6.el10_0.3.s390x"
},
"product_reference": "libtiff-devel-0:4.6.0-6.el10_0.3.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-devel-0:4.6.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:libtiff-devel-0:4.6.0-6.el10_0.3.x86_64"
},
"product_reference": "libtiff-devel-0:4.6.0-6.el10_0.3.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.aarch64"
},
"product_reference": "libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.ppc64le"
},
"product_reference": "libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.s390x"
},
"product_reference": "libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.x86_64"
},
"product_reference": "libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.6.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.aarch64"
},
"product_reference": "libtiff-debuginfo-0:4.6.0-6.el10_0.3.aarch64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.6.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.ppc64le"
},
"product_reference": "libtiff-debuginfo-0:4.6.0-6.el10_0.3.ppc64le",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.6.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.s390x"
},
"product_reference": "libtiff-debuginfo-0:4.6.0-6.el10_0.3.s390x",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debuginfo-0:4.6.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.x86_64"
},
"product_reference": "libtiff-debuginfo-0:4.6.0-6.el10_0.3.x86_64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.6.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.aarch64"
},
"product_reference": "libtiff-debugsource-0:4.6.0-6.el10_0.3.aarch64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.6.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.ppc64le"
},
"product_reference": "libtiff-debugsource-0:4.6.0-6.el10_0.3.ppc64le",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.6.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.s390x"
},
"product_reference": "libtiff-debugsource-0:4.6.0-6.el10_0.3.s390x",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-debugsource-0:4.6.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.x86_64"
},
"product_reference": "libtiff-debugsource-0:4.6.0-6.el10_0.3.x86_64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-0:4.6.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:libtiff-tools-0:4.6.0-6.el10_0.3.aarch64"
},
"product_reference": "libtiff-tools-0:4.6.0-6.el10_0.3.aarch64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-0:4.6.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:libtiff-tools-0:4.6.0-6.el10_0.3.ppc64le"
},
"product_reference": "libtiff-tools-0:4.6.0-6.el10_0.3.ppc64le",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-0:4.6.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:libtiff-tools-0:4.6.0-6.el10_0.3.s390x"
},
"product_reference": "libtiff-tools-0:4.6.0-6.el10_0.3.s390x",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-0:4.6.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:libtiff-tools-0:4.6.0-6.el10_0.3.x86_64"
},
"product_reference": "libtiff-tools-0:4.6.0-6.el10_0.3.x86_64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.aarch64"
},
"product_reference": "libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.aarch64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.ppc64le"
},
"product_reference": "libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.ppc64le",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.s390x"
},
"product_reference": "libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.s390x",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)",
"product_id": "CRB-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.x86_64"
},
"product_reference": "libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.x86_64",
"relates_to_product_reference": "CRB-10.0.Z.E2S"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Quang Luong",
"PrymEvol"
]
}
],
"cve": "CVE-2026-4775",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-03-24T14:23:23.826000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450768"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in the libtiff library, affecting the processing of specially crafted TIFF files, could lead to a denial of service or potentially arbitrary code execution. This vulnerability, caused by a signed integer overflow during TIFF image processing, results in an out-of-bounds heap write. Red Hat products that process untrusted TIFF files using libtiff may be impacted.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.src",
"AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:libtiff-devel-0:4.6.0-6.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:libtiff-devel-0:4.6.0-6.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:libtiff-devel-0:4.6.0-6.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:libtiff-devel-0:4.6.0-6.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.x86_64",
"CRB-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.aarch64",
"CRB-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.ppc64le",
"CRB-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.s390x",
"CRB-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.x86_64",
"CRB-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.aarch64",
"CRB-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.ppc64le",
"CRB-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.s390x",
"CRB-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.x86_64",
"CRB-10.0.Z.E2S:libtiff-tools-0:4.6.0-6.el10_0.3.aarch64",
"CRB-10.0.Z.E2S:libtiff-tools-0:4.6.0-6.el10_0.3.ppc64le",
"CRB-10.0.Z.E2S:libtiff-tools-0:4.6.0-6.el10_0.3.s390x",
"CRB-10.0.Z.E2S:libtiff-tools-0:4.6.0-6.el10_0.3.x86_64",
"CRB-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.aarch64",
"CRB-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.ppc64le",
"CRB-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.s390x",
"CRB-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4775"
},
{
"category": "external",
"summary": "RHBZ#2450768",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450768"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4775",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4775"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4775",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4775"
}
],
"release_date": "2026-03-24T14:33:35.730000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-20T11:26:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.src",
"AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:libtiff-devel-0:4.6.0-6.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:libtiff-devel-0:4.6.0-6.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:libtiff-devel-0:4.6.0-6.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:libtiff-devel-0:4.6.0-6.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.x86_64",
"CRB-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.aarch64",
"CRB-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.ppc64le",
"CRB-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.s390x",
"CRB-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.x86_64",
"CRB-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.aarch64",
"CRB-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.ppc64le",
"CRB-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.s390x",
"CRB-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.x86_64",
"CRB-10.0.Z.E2S:libtiff-tools-0:4.6.0-6.el10_0.3.aarch64",
"CRB-10.0.Z.E2S:libtiff-tools-0:4.6.0-6.el10_0.3.ppc64le",
"CRB-10.0.Z.E2S:libtiff-tools-0:4.6.0-6.el10_0.3.s390x",
"CRB-10.0.Z.E2S:libtiff-tools-0:4.6.0-6.el10_0.3.x86_64",
"CRB-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.aarch64",
"CRB-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.ppc64le",
"CRB-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.s390x",
"CRB-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19586"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid processing untrusted or maliciously crafted TIFF files with applications linked against the libtiff library. If processing untrusted TIFF files is unavoidable, consider running the affected applications within a sandboxed environment to limit the potential impact of successful exploitation. This operational control helps contain the effects of an out-of-bounds write, reducing the risk of denial of service or arbitrary code execution.",
"product_ids": [
"AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.src",
"AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:libtiff-devel-0:4.6.0-6.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:libtiff-devel-0:4.6.0-6.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:libtiff-devel-0:4.6.0-6.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:libtiff-devel-0:4.6.0-6.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.x86_64",
"CRB-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.aarch64",
"CRB-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.ppc64le",
"CRB-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.s390x",
"CRB-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.x86_64",
"CRB-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.aarch64",
"CRB-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.ppc64le",
"CRB-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.s390x",
"CRB-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.x86_64",
"CRB-10.0.Z.E2S:libtiff-tools-0:4.6.0-6.el10_0.3.aarch64",
"CRB-10.0.Z.E2S:libtiff-tools-0:4.6.0-6.el10_0.3.ppc64le",
"CRB-10.0.Z.E2S:libtiff-tools-0:4.6.0-6.el10_0.3.s390x",
"CRB-10.0.Z.E2S:libtiff-tools-0:4.6.0-6.el10_0.3.x86_64",
"CRB-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.aarch64",
"CRB-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.ppc64le",
"CRB-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.s390x",
"CRB-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.src",
"AppStream-10.0.Z.E2S:libtiff-0:4.6.0-6.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:libtiff-devel-0:4.6.0-6.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:libtiff-devel-0:4.6.0-6.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:libtiff-devel-0:4.6.0-6.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:libtiff-devel-0:4.6.0-6.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.x86_64",
"CRB-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.aarch64",
"CRB-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.ppc64le",
"CRB-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.s390x",
"CRB-10.0.Z.E2S:libtiff-debuginfo-0:4.6.0-6.el10_0.3.x86_64",
"CRB-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.aarch64",
"CRB-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.ppc64le",
"CRB-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.s390x",
"CRB-10.0.Z.E2S:libtiff-debugsource-0:4.6.0-6.el10_0.3.x86_64",
"CRB-10.0.Z.E2S:libtiff-tools-0:4.6.0-6.el10_0.3.aarch64",
"CRB-10.0.Z.E2S:libtiff-tools-0:4.6.0-6.el10_0.3.ppc64le",
"CRB-10.0.Z.E2S:libtiff-tools-0:4.6.0-6.el10_0.3.s390x",
"CRB-10.0.Z.E2S:libtiff-tools-0:4.6.0-6.el10_0.3.x86_64",
"CRB-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.aarch64",
"CRB-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.ppc64le",
"CRB-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.s390x",
"CRB-10.0.Z.E2S:libtiff-tools-debuginfo-0:4.6.0-6.el10_0.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…