Libtiff Security Update — AlmaLinux 8 (ALSA-2026:47184)

This is a security release for AlmaLinux 8. Update the product on every affected server to the patched release — there is no workaround, and unpatched servers remain exposed until updated.

High 2026-07-29

AlmaLinux 8

Fix Commands

EL8+ (AlmaLinux/CloudLinux/Rocky)

sudo dnf update

What this means under a SharedLicense license

libtiff: on AlmaLinux 8 is the exposure surface; the advisory's own severity data tops out at CVSS .

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912)

For more details about the security issue(s), including the impact, a CVSS…

Type:

security

Severity:

important

Release date:

2026-07-29

Description:

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References:

Updated packages listed below:

Architecture	Package	Checksum
aarch64	libtiff-4.0.9-38.el8_10.aarch64.rpm	834e4dce485839c8a88fe74e6de39a96d9cd3fd47676a9611ddc81930b55261b
aarch64	libtiff-tools-4.0.9-38.el8_10.aarch64.rpm	aae91af916fcaa7e2543501138d40de3a565e88da938b2b21d596acdf7152bee
aarch64	libtiff-devel-4.0.9-38.el8_10.aarch64.rpm	ecbff597048eec88081f7e356888881936267baf62c0f6854bf8ad479fc35f81
i686	libtiff-4.0.9-38.el8_10.i686.rpm	38963dc11e80b9623a1802d1932b47e3b7765378e5c76d60bfd1705fbb6ad94b
i686	libtiff-devel-4.0.9-38.el8_10.i686.rpm	7be6b4a92ffba1f40bd5406fbf4d63dde927054437139a7332e9d34c9a040146
ppc64le	libtiff-tools-4.0.9-38.el8_10.ppc64le.rpm	3c6ef479c11b8c7c75f3520b0b17a7c1f79c294014876713122add0651bab859
ppc64le	libtiff-4.0.9-38.el8_10.ppc64le.rpm	7eabc1d2003cc8d265174b72300ca9d445e91e746a4972e6d8e7f4366af59d35
ppc64le	libtiff-devel-4.0.9-38.el8_10.ppc64le.rpm	db5b67c92e583ca2c5a454e2f7d55faf76b1a8307496ecc2bd5981ba047c879e
s390x	libtiff-4.0.9-38.el8_10.s390x.rpm	b71013691e5df8cc49f4d5748d992c42e81b397de811bb97dde2ef031074fba4
s390x	libtiff-tools-4.0.9-38.el8_10.s390x.rpm	d377f4de7411c2c840f10cf35b758cc18631a86bac407554336031deca8c56a2
s390x	libtiff-devel-4.0.9-38.el8_10.s390x.rpm	e7d7175697d4e0da823c25f1eb99dad30d72002229d66da5a812b9547d97caae
x86_64	libtiff-4.0.9-38.el8_10.x86_64.rpm	28cb7e35a1da8689ac312dada1a1f46021dee9c293b4b8f9a358d2b0d7305e76
x86_64	libtiff-tools-4.0.9-38.el8_10.x86_64.rpm	d0494e96b9023d3a9d4ef39536b10368befa5ba9be9535de82e1e5e37634831b
x86_64	libtiff-devel-4.0.9-38.el8_10.x86_64.rpm	d5225b180f67ce4ac35366b567bac72e9927742cecd8578bb7221217ceeec50a

Notes:

This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.

Frequently Asked Questions

What does ALSA-2026:47184 fix?

1 CVEs in libtiff:, including libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912).

Which release is covered?

AlmaLinux 8.

How do I apply it?

dnf update libtiff: — restart the service if it runs persistently.

References

Security Advisories

Related Advisories

Qt5-Qtdeclarative Security Update — AlmaLinux 8 (ALSA-2026:96075)

2026-11-10

Webkit2gtk3 Security Update — AlmaLinux 8 (ALSA-2026:96080)

2026-11-09

Util-Linux Security Update — AlmaLinux 8 (ALSA-2026:96212)

2026-11-09

Check your system for vulnerabilities

Select your product and operating system to see the exact fix commands that apply to you.

Check Your System