RHSA-2026:19609: Red Hat Security Advisory for libtiff CVE-2026-4775 (Signed Integer Overflow leading to RCE)

RHSA-2026:19609 - Security Advisory Vulnerability Overview Vulnerability Name: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing CVE ID: CVE-2026-4775 Severity: Important Description: The libtiff package contains a library of functions for manipulating Tagged Image File Format (TIFF) files. This vulnerability involves arbitrary code execution or denial of service caused by a signed integer overflow during TIFF file processing. Affected Systems Red Hat Enterprise Linux Server - AUS 9.2 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 s390x Remediation Updated Packages: Please update the relevant packages based on the affected system version. Reference Link: For more detailed information, please refer to https://access.redhat.com/articles/17258 Fixed Package Checksums (SRPM) Red Hat Enterprise Linux Server - AUS 9.2 : SHA-256: 8007ad5af0839657de0309c5d826497db189575f361c44a201466b23c5eaa38c64 : SHA-256: a9d29d8ab032b050aur51662cv4739fed5d9334324284eeec77ed4095fa2674f : SHA-256: 65731314d6b650e171a6ea24e964f7ad2c2cbc62d475a61b2b7d26210b50 : SHA-256: 64a242a24eaeb3c49c12e8bd45132184981d11d3a289393b086b02d2b091 : SHA-256: 0dc3982c7089777cbc7f25c478a2574638c92d33e6bdc67159adcc155dd49 : SHA-256: 76c20462c2e21e4e78361954ad01324b17865f7335347484d01784694b06 : SHA-256: 117d08f00f8c320e1ad118d37353942517143943520dd4731605f7272b624 : SHA-256: 77cd40f22e6f607e18384c8521f7ad488f3419f735904a135dc24b736b1 : SHA-256: 8c25489e1b4f68890a3a0130754a4bdbde469318d80c8c2baa589e3e54b : SHA-256: 6e01af7c5b38dc3b47996eace6b9a99021c344a1ef58394c9e969904682 : SHA-256: 11c18f4bcb4f6619993a9f4c3f75997319c246c9f7688811edd9372e91fe Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 : SHA-256: 8007ad5af0839657de0309c5d826497db189575f361c44a201466b23c5eaa38c64 : SHA-256: 45cecf0aa5af6a8bbdbe2aacbc5e3f1d8f663a4e84f434aafeec41f60f9310c : SHA-256: 3b44b1b13a02244d85a01dbe19fafe6994b434344f71c9b7c083f83839 : SHA-256: 5c641e314d52eaaa7347e95d6d6e95ff115d1d8753aa36b7087885447d9 : SHA-256: 11c18f4bcb4f6619993a9f4c3f75997319c246c9f7688811edd9372e91fe Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 : SHA-256: 8007ad5af0839657de0309c5d826497db189575f361c44a201466b23c5eaa38c64 : SHA-256: a9d29d8ab032b050aur51662cv4739fed5d9334324284eeec77ed4095fa2674f : SHA-256: 65731314d6b650e171a6ea24e964f7ad2c2cbc62d475a61b2b7d26210b50 : SHA-256: 64a242a24eaeb3c49c12e8bd45132184981d11d3a289393b086b02d2b091 : SHA-256: 0dc3982c7089777cbc7f25c478a2574638c92d33e6bdc67159adcc155dd49 : SHA-256: 76c20462c2e21e4e78361954ad01324b17865f7335347484d01784694b06 : SHA-256: 117d08f00f8c320e1ad118d37353942517143943520dd4731605f7272b624 : SHA-256: 77cd40f22e6f607e18384c8521f7ad488f3419f735904a135dc24b736b1 : SHA-256: 8c25489e1b4f68890a3a0130754a4bdbde469318d80c8c2baa589e3e54b : SHA-256: 6e01af7c5b38dc3b47996eace6b9a99021c344a1ef58394c9e969904682 : SHA-256: 11c18f4bcb4f6619993a9f4c3f75997319c246c9f7688811edd9372e91fe Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 : SHA-256: 8007ad5af0839657de0309c5d826497db189575f361c44a201466b23c5eaa38c64 : SHA-256: e98e8885c3837573eabe0a2977c34c35e200edda47f8629f2ea5471b59d : SHA-256: baf7f2f945467b372e963658284ce083343b2097e13d41ed44c5570d6e3439 : SHA-256: c9ef31696c53210b1d44833248d3a7e89fbaec3fc59e80d8d8437719436a65 : SHA-256: c7ce9d291778909ab8805c38843b52d6556c200147674b9c53c67863b8a8 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 : SHA-256: 8007ad5af0839657de0309c5d826497db189575f361c44a201466b23c5eaa38c64 : SHA-256: 4e6a2c278ac99f7a796c09f5abdbe5c35b6875232f38f00ecc42f584f6ad24a0 : SHA-256: 01d77523545d4199608e67d289b7b80b67d83b6b1540f9b021c04cf : SHA-256: 974e6880e3837537eabe0a2977c34c35e200edda47f8629f2ea5471b59d : SHA-256: 531c90253492817eefbca1f656083885f0850948d6e093b37ef1b8543cd2d : SHA-256: c76552e99928942d5357812ca0f3ec4506c28c76ae4f81ba5a88f112d171 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 `libtiff-4.4.0-8.el9_2.5.src.rpm

Goal Reached Thanks to every supporter — we hit 100%!

RHSA-2026:19609: Red Hat Security Advisory for libtiff CVE-2026-4775 (Signed Integer Overflow leading to RCE)