Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

CVE-2026-52490 is a high severity vulnerability in the libtiff library used for TIFF file manipulation within Red Hat Hardened Images RPMs. The vulnerability involves the process_command_opts() function and allows arbitrary code execution. Red Hat issued an update containing libtiff version 4.7.2-2.hum1 to fix this issue across supported architectures. The advisory also references related CVEs and provides updated RPM packages for libtiff and related components. No active exploitation has been reported.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on affected systems running vulnerable versions of libtiff within Red Hat Hardened Images. This could lead to full system compromise depending on the privileges of the exploited process. However, there are no known exploits in the wild at this time.

Red Hat has released an official update that addresses this vulnerability. Users of Red Hat Hardened Images RPMs should apply the update including libtiff version 4.7.2-2.hum1 for their respective architectures (aarch64, x86_64) as soon as possible. Refer to the Red Hat advisory RHSA-2026:53467 and https://images.redhat.com/ for detailed update instructions. No additional mitigation steps are currently required beyond applying the official patch.