RHSA-2026:26191: Moderate: libexif security update
Moderate: libexif security update
Other sources
The libexif packages provide a library for extracting extra information from image files.Security Fix(es): libexif: libexif: Information disclosure and crashes via integer overflow in Nikon MakerNote handling (CVE-2026-40385) libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding (CVE-2026-40386) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/libexifto a version that resolves this vulnerability.Fixed in 0.6.22-5.el8_6.1 - Upgrade
Upgrade
redhat/libexif-debuginfoto a version that resolves this vulnerability.Fixed in 0.6.22-5.el8_6.1 - Upgrade
Upgrade
redhat/libexif-debugsourceto a version that resolves this vulnerability.Fixed in 0.6.22-5.el8_6.1
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:26191?
The severity of RHSA-2026:26191 is classified as medium with a score of 4.
How do I fix RHSA-2026:26191?
To fix RHSA-2026:26191, update the libexif packages to the latest version provided by Red Hat.
What vulnerabilities are addressed in RHSA-2026:26191?
RHSA-2026:26191 addresses an integer overflow vulnerability and potential denial of service in Nikon MakerNote handling.
What software is affected by RHSA-2026:26191?
The affected software includes the libexif packages in Red Hat Enterprise Linux Server and related distributions.
What is the nature of the risk associated with RHSA-2026:26191?
The risk associated with RHSA-2026:26191 includes information disclosure and crashes due to integer overflow in specific image file handling.