{"id":"CLSA-2026-1792169287","aliases":[],"status":"published","title":"libtiff: Fix of 13 CVEs","description":"- Build the rhel7-els target with dist .el7_9 to match the RHEL 7 ELS\n  vendor package suffix","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-10-16T19:42:30Z","modified":"2026-10-26T09:32:00Z","fixes":[{"ecosystem":"TuxCare:RHEL:7","package":"libtiff","fixed_in":["4.0.3-35.0.1.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libtiff-devel","fixed_in":["4.0.3-35.0.1.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libtiff-static","fixed_in":["4.0.3-35.0.1.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libtiff-tools","fixed_in":["4.0.3-35.0.1.el7_9.tuxcare.els2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-35.0.1.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-35.0.1.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libtiff-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-35.0.1.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-35.0.1.el7_9.tuxcare.els2"}]}]}],"references":[{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1792169287.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5225","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9117","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0891","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3970","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52355","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52356","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7006","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61144","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8176","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8177","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-9900","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12912","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4775","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2026-1792169287","title":"libtiff: Fix of 13 CVEs","description":"- Build the rhel7-els target with dist .el7_9 to match the RHEL 7 ELS\n  vendor package suffix","status":"published","published":"2026-10-16T19:42:30Z","modified":"2026-10-26T09:32:00.763604001Z","updated_at":"2026-11-02T15:43:51.747192Z"}]}}