RHSA-2026:26292: Moderate: libexif security update
Moderate: libexif security update
Other sources
The libexif packages provide a library for extracting extra information from image files.Security Fix(es): libexif: libexif: Information disclosure and crashes via integer overflow in Nikon MakerNote handling (CVE-2026-40385) libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding (CVE-2026-40386) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/libexifto a version that resolves this vulnerability.Fixed in 0.6.22-5.el8_4.1 - Upgrade
Upgrade
redhat/libexif-debuginfoto a version that resolves this vulnerability.Fixed in 0.6.22-5.el8_4.1 - Upgrade
Upgrade
redhat/libexif-debugsourceto a version that resolves this vulnerability.Fixed in 0.6.22-5.el8_4.1
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:26292?
The severity of RHSA-2026:26292 is classified as medium (4).
How do I fix RHSA-2026:26292?
To fix RHSA-2026:26292, you need to update the libexif package to the latest version provided in the security update.
What issues does RHSA-2026:26292 address?
RHSA-2026:26292 addresses security vulnerabilities found in the libexif library.
Which software is affected by RHSA-2026:26292?
RHSA-2026:26292 affects Red Hat Enterprise Linux for x86_64 and Red Hat Enterprise Linux Server.
When was RHSA-2026:26292 published?
RHSA-2026:26292 was published on June 16, 2026.