Red Hat Product Errata RHSA-2026:24992 - Security Advisory Issued: 2026-06-10 Updated: 2026-06-10 RHSA-2026:24992 - Security Advisory Overview Updated Packages Synopsis Important: compat-libtiff3 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for compat-libtiff3 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libtiff3 package provides libtiff 3, an older version of libtiff library for manipulating TIFF (Tagged Image File Format) image format files. This version should be used only if you are unable to use the current version of libtiff. Security Fix(es): libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64 Fixes BZ - 2450768 - CVE-2026-4775 libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing CVEs CVE-2026-4775 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 SRPM compat-libtiff3-3.9.4-12.el7_9.2.src.rpm SHA-256: 03ca59b68346e574f46e54b03e287985a1c616df851e777b212035f8a717e4d2 x86_64 compat-libtiff3-3.9.4-12.el7_9.2.i686.rpm SHA-256: 423ea5e0fbe78099c4fadb8e48d1dd0e15767a14096b8c3c614f9ae3d6399914 compat-libtiff3-3.9.4-12.el7_9.2.x86_64.rpm SHA-256: f523d8e59c6dfd7d3b79cff3245c65d2adb1fb869091196d02f27db43592fe5c compat-libtiff3-debuginfo-3.9.4-12.el7_9.2.i686.rpm SHA-256: d9ffe8b1ecd9b65c8ca1fba553307a776492c0fc317ffbdac45cfeb927d5ba79 compat-libtiff3-debuginfo-3.9.4-12.el7_9.2.x86_64.rpm SHA-256: 890e0b5a49987c4a5eff631efb6ed79fd5c249c48a75917933cd5857113557ee Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 SRPM compat-libtiff3-3.9.4-12.el7_9.2.src.rpm SHA-256: 03ca59b68346e574f46e54b03e287985a1c616df851e777b212035f8a717e4d2 s390x compat-libtiff3-3.9.4-12.el7_9.2.s390.rpm SHA-256: 774ec6da6573b51841cf83d9cf9d26a7b58a9b7313523765d66431379937b97f compat-libtiff3-3.9.4-12.el7_9.2.s390x.rpm SHA-256: 51298c02956957c8da3b9f55e2b4743326f76cbdfc024fc30c37b09fdb6453cf compat-libtiff3-debuginfo-3.9.4-12.el7_9.2.s390.rpm SHA-256: 8863cc17d4ca896bd5ab4f2774820fc4946f9e6f6d0ef9dfe77bfba36541bad1 compat-libtiff3-debuginfo-3.9.4-12.el7_9.2.s390x.rpm SHA-256: 000bf6fe75cb68a0a2202904bbd0d5d2adb5ab8041189bfa8eefdc594286fb56 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 SRPM compat-libtiff3-3.9.4-12.el7_9.2.src.rpm SHA-256: 03ca59b68346e574f46e54b03e287985a1c616df851e777b212035f8a717e4d2 ppc64 compat-libtiff3-3.9.4-12.el7_9.2.ppc.rpm SHA-256: dc879f7b65dfb4d08d43f3af3b7b3af5e514224a738e006db8145a950c37b6ee compat-libtiff3-3.9.4-12.el7_9.2.ppc64.rpm SHA-256: 0875595437f697342fa19bc3f34288aac5b39efe061272376e321cda8bb5d256 compat-libtiff3-debuginfo-3.9.4-12.el7_9.2.ppc.rpm SHA-256: 16083e0c87c6f9711e057c776b4b514a7a4c20f1e3738d8375789d1a230e1fa0 compat-libtiff3-debuginfo-3.9.4-12.el7_9.2.ppc64.rpm SHA-256: eb8a281a6a2fcf5be115e4b02a2d639abf8bcc7e8714b3c3218e6f5db0b7734c The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .