Red Hat Product Errata RHSA-2026:7304 - Security Advisory
Issued:
2026-04-09
Updated:
2026-04-09

RHSA-2026:7304 - Security Advisory

Synopsis

Moderate: libtiff security update

Type/Severity

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for libtiff is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: Segment fault in libtiff in TIFFReadRGBATileExt() leading to denial of service (CVE-2023-52356)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x
  • Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le
  • Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64

Fixes

  • BZ - 2251344 - CVE-2023-52356 libtiff: Segment fault in libtiff in TIFFReadRGBATileExt() leading to denial of service

Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0

SRPM
libtiff-4.6.0-6.el10_0.2.src.rpm SHA-256: 04a53b241662b9b1deac745362b50937e3bcbfa98528ed6a7bdccb4d21b15d04
x86_64
libtiff-4.6.0-6.el10_0.2.x86_64.rpm SHA-256: 4af1c7f34abfc2c452098aab097dd278d8919e553f443e231fa822ba4745ff5d
libtiff-debuginfo-4.6.0-6.el10_0.2.x86_64.rpm SHA-256: a41ed0fd91492597b1511eb2a3a34db462ca9a87c170b14065d01f2bab317638
libtiff-debugsource-4.6.0-6.el10_0.2.x86_64.rpm SHA-256: 300d5833ac17bfaa4939ffd77cd1da0bc3a0af6346136214e02e5539f2eff00b
libtiff-devel-4.6.0-6.el10_0.2.x86_64.rpm SHA-256: c3bdf97bd1ed9c2ac78b9c32716af3bede0f17878b5e8d670dc806f57b592113
libtiff-tools-debuginfo-4.6.0-6.el10_0.2.x86_64.rpm SHA-256: b3bb2b66c876971de9a833e44ac1a01c81719016d72e0e8d34fd9f333db2059f

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0

SRPM
libtiff-4.6.0-6.el10_0.2.src.rpm SHA-256: 04a53b241662b9b1deac745362b50937e3bcbfa98528ed6a7bdccb4d21b15d04
s390x
libtiff-4.6.0-6.el10_0.2.s390x.rpm SHA-256: 395971802279cbf4e1c1e016b1ae64fa962fb0a57295b2469b5fde8b00b53167
libtiff-debuginfo-4.6.0-6.el10_0.2.s390x.rpm SHA-256: 5e6669ae796116bca8a962d9e68f0667531dbbd17b50f80934fa6924042810e3
libtiff-debugsource-4.6.0-6.el10_0.2.s390x.rpm SHA-256: cfd2259c2ba18fd7c3756f1f3195dfa0482766b7c01edbbd4482e3475f040462
libtiff-devel-4.6.0-6.el10_0.2.s390x.rpm SHA-256: 9212c8ace4894783e0d6ccf09128d396be67b94093037dfa9b44c4d7b367c876
libtiff-tools-debuginfo-4.6.0-6.el10_0.2.s390x.rpm SHA-256: 33dd20b08007f58f1cae5576dff28c1e907eb955b77b3a39423ee9e588c7a90b

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0

SRPM
libtiff-4.6.0-6.el10_0.2.src.rpm SHA-256: 04a53b241662b9b1deac745362b50937e3bcbfa98528ed6a7bdccb4d21b15d04
ppc64le
libtiff-4.6.0-6.el10_0.2.ppc64le.rpm SHA-256: be0ce2f5390b55b9eec8b9746d332288da6b9725cd2b474acef6d9b993d857e0
libtiff-debuginfo-4.6.0-6.el10_0.2.ppc64le.rpm SHA-256: 1a09c1b6d134ac1b3cac7c394fde1f75d567318df77dc4dd060ad333a7109310
libtiff-debugsource-4.6.0-6.el10_0.2.ppc64le.rpm SHA-256: 999071a9cd18886970b5e10fabfdb97de41ff8e632320a8f8d6644303b5b6108
libtiff-devel-4.6.0-6.el10_0.2.ppc64le.rpm SHA-256: 442e9b83e0808ea04c27db753ff702752e3035a3ccd9b06ba92b8d09225124f4
libtiff-tools-debuginfo-4.6.0-6.el10_0.2.ppc64le.rpm SHA-256: b9a5e0c0f9fa3c79548378f8e676724cfee0c8b17ad02451b855ac8074c5636e

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0

SRPM
libtiff-4.6.0-6.el10_0.2.src.rpm SHA-256: 04a53b241662b9b1deac745362b50937e3bcbfa98528ed6a7bdccb4d21b15d04
aarch64
libtiff-4.6.0-6.el10_0.2.aarch64.rpm SHA-256: d0027c99e264a19332cb774fee0e4ed4f0f577046c02c6123c30abf7239c3e9d
libtiff-debuginfo-4.6.0-6.el10_0.2.aarch64.rpm SHA-256: f3951b580fd6824dde98f56efbdcb6302139e0a9a3967400d8b64841c4f399b0
libtiff-debugsource-4.6.0-6.el10_0.2.aarch64.rpm SHA-256: 302d2a173c408febff3d7618a0d1f02bc244fb77032b95be014cacdff26a2e3c
libtiff-devel-4.6.0-6.el10_0.2.aarch64.rpm SHA-256: 824f5127233b3c9c8b223375dfb40bc12ef2aa0e29d4d0e7f6e144b10f4af047
libtiff-tools-debuginfo-4.6.0-6.el10_0.2.aarch64.rpm SHA-256: eaa0d50161ae667a8ad1626ac9a20187f7f7bb29534be8f01b6a95d3a75ed4b5

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0

SRPM
x86_64
libtiff-debuginfo-4.6.0-6.el10_0.2.x86_64.rpm SHA-256: a41ed0fd91492597b1511eb2a3a34db462ca9a87c170b14065d01f2bab317638
libtiff-debugsource-4.6.0-6.el10_0.2.x86_64.rpm SHA-256: 300d5833ac17bfaa4939ffd77cd1da0bc3a0af6346136214e02e5539f2eff00b
libtiff-tools-4.6.0-6.el10_0.2.x86_64.rpm SHA-256: 0168edac5bc93fddce5a54cc93770f60dece9d8a5415bf5fa007c0f724d3abb8
libtiff-tools-debuginfo-4.6.0-6.el10_0.2.x86_64.rpm SHA-256: b3bb2b66c876971de9a833e44ac1a01c81719016d72e0e8d34fd9f333db2059f

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0

SRPM
ppc64le
libtiff-debuginfo-4.6.0-6.el10_0.2.ppc64le.rpm SHA-256: 1a09c1b6d134ac1b3cac7c394fde1f75d567318df77dc4dd060ad333a7109310
libtiff-debugsource-4.6.0-6.el10_0.2.ppc64le.rpm SHA-256: 999071a9cd18886970b5e10fabfdb97de41ff8e632320a8f8d6644303b5b6108
libtiff-tools-4.6.0-6.el10_0.2.ppc64le.rpm SHA-256: 73aed27dca918641ef0841ad1923b0d0e3800a1fb7ed78cc6d6bb53b8794d94b
libtiff-tools-debuginfo-4.6.0-6.el10_0.2.ppc64le.rpm SHA-256: b9a5e0c0f9fa3c79548378f8e676724cfee0c8b17ad02451b855ac8074c5636e

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0

SRPM
s390x
libtiff-debuginfo-4.6.0-6.el10_0.2.s390x.rpm SHA-256: 5e6669ae796116bca8a962d9e68f0667531dbbd17b50f80934fa6924042810e3
libtiff-debugsource-4.6.0-6.el10_0.2.s390x.rpm SHA-256: cfd2259c2ba18fd7c3756f1f3195dfa0482766b7c01edbbd4482e3475f040462
libtiff-tools-4.6.0-6.el10_0.2.s390x.rpm SHA-256: e00d69096cef9dea1b333c862619b023d034f863d87c6d264f256107844a952c
libtiff-tools-debuginfo-4.6.0-6.el10_0.2.s390x.rpm SHA-256: 33dd20b08007f58f1cae5576dff28c1e907eb955b77b3a39423ee9e588c7a90b

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0

SRPM
aarch64
libtiff-debuginfo-4.6.0-6.el10_0.2.aarch64.rpm SHA-256: f3951b580fd6824dde98f56efbdcb6302139e0a9a3967400d8b64841c4f399b0
libtiff-debugsource-4.6.0-6.el10_0.2.aarch64.rpm SHA-256: 302d2a173c408febff3d7618a0d1f02bc244fb77032b95be014cacdff26a2e3c
libtiff-tools-4.6.0-6.el10_0.2.aarch64.rpm SHA-256: 5b94c88b4e744912fabd2729accf09de30b4d2ea374ee241c6ee9ce925e38c41
libtiff-tools-debuginfo-4.6.0-6.el10_0.2.aarch64.rpm SHA-256: eaa0d50161ae667a8ad1626ac9a20187f7f7bb29534be8f01b6a95d3a75ed4b5

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0

SRPM
libtiff-4.6.0-6.el10_0.2.src.rpm SHA-256: 04a53b241662b9b1deac745362b50937e3bcbfa98528ed6a7bdccb4d21b15d04
aarch64
libtiff-4.6.0-6.el10_0.2.aarch64.rpm SHA-256: d0027c99e264a19332cb774fee0e4ed4f0f577046c02c6123c30abf7239c3e9d
libtiff-debuginfo-4.6.0-6.el10_0.2.aarch64.rpm SHA-256: f3951b580fd6824dde98f56efbdcb6302139e0a9a3967400d8b64841c4f399b0
libtiff-debugsource-4.6.0-6.el10_0.2.aarch64.rpm SHA-256: 302d2a173c408febff3d7618a0d1f02bc244fb77032b95be014cacdff26a2e3c
libtiff-devel-4.6.0-6.el10_0.2.aarch64.rpm SHA-256: 824f5127233b3c9c8b223375dfb40bc12ef2aa0e29d4d0e7f6e144b10f4af047
libtiff-tools-debuginfo-4.6.0-6.el10_0.2.aarch64.rpm SHA-256: eaa0d50161ae667a8ad1626ac9a20187f7f7bb29534be8f01b6a95d3a75ed4b5

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0

SRPM
libtiff-4.6.0-6.el10_0.2.src.rpm SHA-256: 04a53b241662b9b1deac745362b50937e3bcbfa98528ed6a7bdccb4d21b15d04
s390x
libtiff-4.6.0-6.el10_0.2.s390x.rpm SHA-256: 395971802279cbf4e1c1e016b1ae64fa962fb0a57295b2469b5fde8b00b53167
libtiff-debuginfo-4.6.0-6.el10_0.2.s390x.rpm SHA-256: 5e6669ae796116bca8a962d9e68f0667531dbbd17b50f80934fa6924042810e3
libtiff-debugsource-4.6.0-6.el10_0.2.s390x.rpm SHA-256: cfd2259c2ba18fd7c3756f1f3195dfa0482766b7c01edbbd4482e3475f040462
libtiff-devel-4.6.0-6.el10_0.2.s390x.rpm SHA-256: 9212c8ace4894783e0d6ccf09128d396be67b94093037dfa9b44c4d7b367c876
libtiff-tools-debuginfo-4.6.0-6.el10_0.2.s390x.rpm SHA-256: 33dd20b08007f58f1cae5576dff28c1e907eb955b77b3a39423ee9e588c7a90b

Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0

SRPM
libtiff-4.6.0-6.el10_0.2.src.rpm SHA-256: 04a53b241662b9b1deac745362b50937e3bcbfa98528ed6a7bdccb4d21b15d04
ppc64le
libtiff-4.6.0-6.el10_0.2.ppc64le.rpm SHA-256: be0ce2f5390b55b9eec8b9746d332288da6b9725cd2b474acef6d9b993d857e0
libtiff-debuginfo-4.6.0-6.el10_0.2.ppc64le.rpm SHA-256: 1a09c1b6d134ac1b3cac7c394fde1f75d567318df77dc4dd060ad333a7109310
libtiff-debugsource-4.6.0-6.el10_0.2.ppc64le.rpm SHA-256: 999071a9cd18886970b5e10fabfdb97de41ff8e632320a8f8d6644303b5b6108
libtiff-devel-4.6.0-6.el10_0.2.ppc64le.rpm SHA-256: 442e9b83e0808ea04c27db753ff702752e3035a3ccd9b06ba92b8d09225124f4
libtiff-tools-debuginfo-4.6.0-6.el10_0.2.ppc64le.rpm SHA-256: b9a5e0c0f9fa3c79548378f8e676724cfee0c8b17ad02451b855ac8074c5636e

Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0

SRPM
libtiff-4.6.0-6.el10_0.2.src.rpm SHA-256: 04a53b241662b9b1deac745362b50937e3bcbfa98528ed6a7bdccb4d21b15d04
x86_64
libtiff-4.6.0-6.el10_0.2.x86_64.rpm SHA-256: 4af1c7f34abfc2c452098aab097dd278d8919e553f443e231fa822ba4745ff5d
libtiff-debuginfo-4.6.0-6.el10_0.2.x86_64.rpm SHA-256: a41ed0fd91492597b1511eb2a3a34db462ca9a87c170b14065d01f2bab317638
libtiff-debugsource-4.6.0-6.el10_0.2.x86_64.rpm SHA-256: 300d5833ac17bfaa4939ffd77cd1da0bc3a0af6346136214e02e5539f2eff00b
libtiff-devel-4.6.0-6.el10_0.2.x86_64.rpm SHA-256: c3bdf97bd1ed9c2ac78b9c32716af3bede0f17878b5e8d670dc806f57b592113
libtiff-tools-debuginfo-4.6.0-6.el10_0.2.x86_64.rpm SHA-256: b3bb2b66c876971de9a833e44ac1a01c81719016d72e0e8d34fd9f333db2059f

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.