RHSA-2026:26190: Moderate: libexif security update
Moderate: libexif security update
Other sources
The libexif packages provide a library for extracting extra information from image files.Security Fix(es): libexif: libexif: Information disclosure and crashes via integer overflow in Nikon MakerNote handling (CVE-2026-40385) libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding (CVE-2026-40386) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/libexifto a version that resolves this vulnerability.Fixed in 0.6.22-5.el8_8.1 - Upgrade
Upgrade
redhat/libexif-debuginfoto a version that resolves this vulnerability.Fixed in 0.6.22-5.el8_8.1 - Upgrade
Upgrade
redhat/libexif-debugsourceto a version that resolves this vulnerability.Fixed in 0.6.22-5.el8_8.1
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:26190?
The severity of RHSA-2026:26190 is classified as medium.
What type of vulnerabilities are addressed in RHSA-2026:26190?
RHSA-2026:26190 addresses information disclosure and denial of service vulnerabilities due to integer overflow in Nikon MakerNote handling.
How do I fix RHSA-2026:26190?
To fix RHSA-2026:26190, you need to update the libexif packages to the latest version provided by Red Hat.
Which systems are affected by RHSA-2026:26190?
RHSA-2026:26190 affects various versions of Red Hat Enterprise Linux and its variants.
What does the libexif library do as mentioned in RHSA-2026:26190?
The libexif library is used for extracting additional information from image files.