ALSA-2026:42668

Details

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Packages

libtiff

AlmaLinux 9

Fixed in:

4.4.0-18.el9_8.1

libtiff-devel

AlmaLinux 9

Fixed in:

4.4.0-18.el9_8.1

References

ADVISORY

https://access.redhat.com/errata/RHSA-2026:42668

ADVISORY

https://bugzilla.redhat.com/2492871

ADVISORY

https://errata.almalinux.org/9/ALSA-2026-42668.html