RLSA-2026:22553

Опубликовано: 05 июн. 2026

Источник: rocky

Оценка: Moderate

Описание

Moderate: libexif security update

The libexif packages provide a library for extracting extra information from image files.

Security Fix(es):

libexif: libexif: Information disclosure and crashes via integer overflow in Nikon MakerNote handling (CVE-2026-40385)
libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding (CVE-2026-40386)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

Rocky Linux 9

Наименование	Архитектура	Релиз	RPM
libexif	x86_64	6.el9_8.1	libexif-0.6.22-6.el9_8.1.x86_64.rpm
libexif	i686	6.el9_8.1	libexif-0.6.22-6.el9_8.1.i686.rpm

Показывать по

Связанные CVE

CVE-2026-40385

CVE-2026-40386

Ссылки на источники

Исправления

https://bugzilla.redhat.com/show_bug.cgi?id=2457687
Red Hat - 2457687
https://bugzilla.redhat.com/show_bug.cgi?id=2457689
Red Hat - 2457689

Связанные уязвимости

RLSA-2026:20929

rocky

2 месяца назад

Moderate: libexif security update

ELSA-2026-22553

oracle-oval

около 1 месяца назад

ELSA-2026-22553: libexif security update (MODERATE)

ELSA-2026-20929

oracle-oval

2 месяца назад

ELSA-2026-20929: libexif security update (MODERATE)

openSUSE-SU-2026:21023-1

suse-cvrf

около 1 месяца назад

Security update for libexif

CVE-2026-40385

CVSS3: 4

ubuntu

4 месяца назад

In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.

exploitDog