ELSA-2026-22529

Опубликовано: 16 июл. 2026

Источник: oracle-oval

Платформа: Oracle Linux 10

Описание

ELSA-2026-22529: libexif security update (MODERATE)

[0.6.24-9.1]

Fix integer underflow in MakerNote decoding (CVE-2026-40386) Resolves: RHEL-170240

Обновленные пакеты

Oracle Linux 10

Oracle Linux aarch64

libexif

0.6.24-9.el10_2.1

libexif-devel

0.6.24-9.el10_2.1

libexif-doc

0.6.24-9.el10_2.1

Oracle Linux x86_64

libexif

0.6.24-9.el10_2.1

libexif-devel

0.6.24-9.el10_2.1

libexif-doc

0.6.24-9.el10_2.1

Связанные CVE

CVE-2026-40386

Ссылки на источники

Связанные уязвимости

CVE-2026-40386

CVSS3: 4

ubuntu

4 месяца назад

In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.

CVE-2026-40386

CVSS3: 4

redhat

4 месяца назад

In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.

CVE-2026-40386

CVSS3: 4

nvd

4 месяца назад

In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.

CVE-2026-40386

CVSS3: 4

msrc

4 месяца назад

Описание отсутствует

CVE-2026-40386

CVSS3: 4

debian

4 месяца назад

In libexif through 0.6.25, an integer underflow in size checking for F ...