ALSA-2026:12265

See a problem?

Import Source

https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:12265.json

JSON Data

https://api.osv.dev/v1/vulns/ALSA-2026:12265

Related

CVE-2026-4775

Published

2026-04-30T00:00:00Z

Modified

2026-05-01T20:45:19.245033Z

Summary

Important: libtiff security update

Details

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:10 / libtiff

Package

Name: libtiff
Purl: pkg:rpm/almalinux/libtiff

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.6.0-6.el10_1.3

Database specific

source

"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:12265.json"

AlmaLinux:10 / libtiff-devel

Package

Name: libtiff-devel
Purl: pkg:rpm/almalinux/libtiff-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.6.0-6.el10_1.3

Database specific

source

"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:12265.json"

AlmaLinux:10 / libtiff-tools

Package

Name: libtiff-tools
Purl: pkg:rpm/almalinux/libtiff-tools

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.6.0-6.el10_1.3

Database specific

source

"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:12265.json"