Red Hat Product Errata RHSA-2026:26274 - Security Advisory
Issued:
2026-06-16
Updated:
2026-06-16

RHSA-2026:26274 - Security Advisory

Synopsis

Moderate: libexif security update

Type/Severity

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for libexif is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The libexif packages provide a library for extracting extra information from image files.

Security Fix(es):

  • libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding (CVE-2026-40386)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x
  • Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le
  • Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64

Fixes

  • BZ - 2457689 - CVE-2026-40386 libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding

Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0

SRPM
libexif-0.6.24-9.el10_0.1.src.rpm SHA-256: e9d6add85acc4d01154a24adb3da04067da37c00b123dbd6a4bd74c31b81f0b4
x86_64
libexif-0.6.24-9.el10_0.1.x86_64.rpm SHA-256: 861828aafbce207c4c99fe5e796807c6a3ca6a9e1bbc4f491adf28a47611b6a1
libexif-debuginfo-0.6.24-9.el10_0.1.x86_64.rpm SHA-256: 2e1dbd8c53ffdaf532ef5bb6934684de6ae12b563b0654e2cd12f0c17ca677a2
libexif-debugsource-0.6.24-9.el10_0.1.x86_64.rpm SHA-256: 3a9796e0b8b3babe2bce2d5af0bdbc9592863b26dc978f61bab6b1896534e889

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0

SRPM
libexif-0.6.24-9.el10_0.1.src.rpm SHA-256: e9d6add85acc4d01154a24adb3da04067da37c00b123dbd6a4bd74c31b81f0b4
s390x
libexif-0.6.24-9.el10_0.1.s390x.rpm SHA-256: f31c17c4dccf63593a5ea75576430bec3acee67319a7b4da3f18c87fe195d6c1
libexif-debuginfo-0.6.24-9.el10_0.1.s390x.rpm SHA-256: fe567fc12b692fba701af31aab048657d9b5ef93cddb09f6972319ed87d1a629
libexif-debugsource-0.6.24-9.el10_0.1.s390x.rpm SHA-256: 87aa884aef25b7989d1a6518746954efa15d8725b8e357cc86edf5efeaaf015f

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0

SRPM
libexif-0.6.24-9.el10_0.1.src.rpm SHA-256: e9d6add85acc4d01154a24adb3da04067da37c00b123dbd6a4bd74c31b81f0b4
ppc64le
libexif-0.6.24-9.el10_0.1.ppc64le.rpm SHA-256: 5bc3facdfd082e37d0719c1a12348cb14d6d118b5ceb72900d715e347489dbf5
libexif-debuginfo-0.6.24-9.el10_0.1.ppc64le.rpm SHA-256: 93875169fff5f77fd0423de071083d455ce5bef52f76ed7c513e502ba19a06da
libexif-debugsource-0.6.24-9.el10_0.1.ppc64le.rpm SHA-256: a2ad80b92eb5fe6dc8c09c2a18e4ac6ab4ffa918f641faedc94bcb15c0d4efbf

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0

SRPM
libexif-0.6.24-9.el10_0.1.src.rpm SHA-256: e9d6add85acc4d01154a24adb3da04067da37c00b123dbd6a4bd74c31b81f0b4
aarch64
libexif-0.6.24-9.el10_0.1.aarch64.rpm SHA-256: 94ec8de9d7a60223bd61fd404b83b65ef4e198cf7b61fb6adab5d2137877c49e
libexif-debuginfo-0.6.24-9.el10_0.1.aarch64.rpm SHA-256: 567dcb09ea827aa58d77c201b94268db3fbf3c5a8db8f5557a5a2747a293b9e0
libexif-debugsource-0.6.24-9.el10_0.1.aarch64.rpm SHA-256: 10319451c591cd10a551ac02c9f1f180f2fae95ac643df91d78ad83e37cf6cb8

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0

SRPM
x86_64
libexif-debuginfo-0.6.24-9.el10_0.1.x86_64.rpm SHA-256: 2e1dbd8c53ffdaf532ef5bb6934684de6ae12b563b0654e2cd12f0c17ca677a2
libexif-debugsource-0.6.24-9.el10_0.1.x86_64.rpm SHA-256: 3a9796e0b8b3babe2bce2d5af0bdbc9592863b26dc978f61bab6b1896534e889
libexif-devel-0.6.24-9.el10_0.1.x86_64.rpm SHA-256: 18c8ed5542ec86de0f7bd692a28e600688efe81a6bb94ed567e854d144891c49
libexif-doc-0.6.24-9.el10_0.1.x86_64.rpm SHA-256: 20238f70df033eca22fe61dcbafd5f07197c67dbebad7d24f727063d96d8e730

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0

SRPM
ppc64le
libexif-debuginfo-0.6.24-9.el10_0.1.ppc64le.rpm SHA-256: 93875169fff5f77fd0423de071083d455ce5bef52f76ed7c513e502ba19a06da
libexif-debugsource-0.6.24-9.el10_0.1.ppc64le.rpm SHA-256: a2ad80b92eb5fe6dc8c09c2a18e4ac6ab4ffa918f641faedc94bcb15c0d4efbf
libexif-devel-0.6.24-9.el10_0.1.ppc64le.rpm SHA-256: d09df46b862aeb1c9cccb5f39887e7abe2fa6076bd3bf5d6db14adebcf4b77f5
libexif-doc-0.6.24-9.el10_0.1.ppc64le.rpm SHA-256: 5cc2ede01a78e01e2b06e3c886700fe646c493a7d689b53c25efa80e376c9367

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0

SRPM
s390x
libexif-debuginfo-0.6.24-9.el10_0.1.s390x.rpm SHA-256: fe567fc12b692fba701af31aab048657d9b5ef93cddb09f6972319ed87d1a629
libexif-debugsource-0.6.24-9.el10_0.1.s390x.rpm SHA-256: 87aa884aef25b7989d1a6518746954efa15d8725b8e357cc86edf5efeaaf015f
libexif-devel-0.6.24-9.el10_0.1.s390x.rpm SHA-256: 7b1628fecd9efe7a33dfa83b67afa303c3f569e3ca03f07ad2ded65c2d3bd07e
libexif-doc-0.6.24-9.el10_0.1.s390x.rpm SHA-256: 806f1769074a38d2953b196f0afc55dac333370ed3784dcde187ef4922aed48f

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0

SRPM
aarch64
libexif-debuginfo-0.6.24-9.el10_0.1.aarch64.rpm SHA-256: 567dcb09ea827aa58d77c201b94268db3fbf3c5a8db8f5557a5a2747a293b9e0
libexif-debugsource-0.6.24-9.el10_0.1.aarch64.rpm SHA-256: 10319451c591cd10a551ac02c9f1f180f2fae95ac643df91d78ad83e37cf6cb8
libexif-devel-0.6.24-9.el10_0.1.aarch64.rpm SHA-256: c82dd5c709aae7fed487c2e39407084fce5243891afc94c6f8f09368b871ae6e
libexif-doc-0.6.24-9.el10_0.1.aarch64.rpm SHA-256: ba36a9c8c18cc846986213e5d0cd16b5db83ff287e0992486d45c89c4080a7df

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0

SRPM
libexif-0.6.24-9.el10_0.1.src.rpm SHA-256: e9d6add85acc4d01154a24adb3da04067da37c00b123dbd6a4bd74c31b81f0b4
aarch64
libexif-0.6.24-9.el10_0.1.aarch64.rpm SHA-256: 94ec8de9d7a60223bd61fd404b83b65ef4e198cf7b61fb6adab5d2137877c49e
libexif-debuginfo-0.6.24-9.el10_0.1.aarch64.rpm SHA-256: 567dcb09ea827aa58d77c201b94268db3fbf3c5a8db8f5557a5a2747a293b9e0
libexif-debugsource-0.6.24-9.el10_0.1.aarch64.rpm SHA-256: 10319451c591cd10a551ac02c9f1f180f2fae95ac643df91d78ad83e37cf6cb8

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0

SRPM
libexif-0.6.24-9.el10_0.1.src.rpm SHA-256: e9d6add85acc4d01154a24adb3da04067da37c00b123dbd6a4bd74c31b81f0b4
s390x
libexif-0.6.24-9.el10_0.1.s390x.rpm SHA-256: f31c17c4dccf63593a5ea75576430bec3acee67319a7b4da3f18c87fe195d6c1
libexif-debuginfo-0.6.24-9.el10_0.1.s390x.rpm SHA-256: fe567fc12b692fba701af31aab048657d9b5ef93cddb09f6972319ed87d1a629
libexif-debugsource-0.6.24-9.el10_0.1.s390x.rpm SHA-256: 87aa884aef25b7989d1a6518746954efa15d8725b8e357cc86edf5efeaaf015f

Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0

SRPM
libexif-0.6.24-9.el10_0.1.src.rpm SHA-256: e9d6add85acc4d01154a24adb3da04067da37c00b123dbd6a4bd74c31b81f0b4
ppc64le
libexif-0.6.24-9.el10_0.1.ppc64le.rpm SHA-256: 5bc3facdfd082e37d0719c1a12348cb14d6d118b5ceb72900d715e347489dbf5
libexif-debuginfo-0.6.24-9.el10_0.1.ppc64le.rpm SHA-256: 93875169fff5f77fd0423de071083d455ce5bef52f76ed7c513e502ba19a06da
libexif-debugsource-0.6.24-9.el10_0.1.ppc64le.rpm SHA-256: a2ad80b92eb5fe6dc8c09c2a18e4ac6ab4ffa918f641faedc94bcb15c0d4efbf

Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0

SRPM
libexif-0.6.24-9.el10_0.1.src.rpm SHA-256: e9d6add85acc4d01154a24adb3da04067da37c00b123dbd6a4bd74c31b81f0b4
x86_64
libexif-0.6.24-9.el10_0.1.x86_64.rpm SHA-256: 861828aafbce207c4c99fe5e796807c6a3ca6a9e1bbc4f491adf28a47611b6a1
libexif-debuginfo-0.6.24-9.el10_0.1.x86_64.rpm SHA-256: 2e1dbd8c53ffdaf532ef5bb6934684de6ae12b563b0654e2cd12f0c17ca677a2
libexif-debugsource-0.6.24-9.el10_0.1.x86_64.rpm SHA-256: 3a9796e0b8b3babe2bce2d5af0bdbc9592863b26dc978f61bab6b1896534e889

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.