Red Hat Product Errata RHSA-2026:26274 - Security Advisory Issued: 2026-06-16 Updated: 2026-06-16 RHSA-2026:26274 - Security Advisory Overview Updated Packages Synopsis Moderate: libexif security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libexif is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libexif packages provide a library for extracting extra information from image files. Security Fix(es): libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding (CVE-2026-40386) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2457689 - CVE-2026-40386 libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding CVEs CVE-2026-40386 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM libexif-0.6.24-9.el10_0.1.src.rpm SHA-256: e9d6add85acc4d01154a24adb3da04067da37c00b123dbd6a4bd74c31b81f0b4 x86_64 libexif-0.6.24-9.el10_0.1.x86_64.rpm SHA-256: 861828aafbce207c4c99fe5e796807c6a3ca6a9e1bbc4f491adf28a47611b6a1 libexif-debuginfo-0.6.24-9.el10_0.1.x86_64.rpm SHA-256: 2e1dbd8c53ffdaf532ef5bb6934684de6ae12b563b0654e2cd12f0c17ca677a2 libexif-debugsource-0.6.24-9.el10_0.1.x86_64.rpm SHA-256: 3a9796e0b8b3babe2bce2d5af0bdbc9592863b26dc978f61bab6b1896534e889 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 SRPM libexif-0.6.24-9.el10_0.1.src.rpm SHA-256: e9d6add85acc4d01154a24adb3da04067da37c00b123dbd6a4bd74c31b81f0b4 s390x libexif-0.6.24-9.el10_0.1.s390x.rpm SHA-256: f31c17c4dccf63593a5ea75576430bec3acee67319a7b4da3f18c87fe195d6c1 libexif-debuginfo-0.6.24-9.el10_0.1.s390x.rpm SHA-256: fe567fc12b692fba701af31aab048657d9b5ef93cddb09f6972319ed87d1a629 libexif-debugsource-0.6.24-9.el10_0.1.s390x.rpm SHA-256: 87aa884aef25b7989d1a6518746954efa15d8725b8e357cc86edf5efeaaf015f Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 SRPM libexif-0.6.24-9.el10_0.1.src.rpm SHA-256: e9d6add85acc4d01154a24adb3da04067da37c00b123dbd6a4bd74c31b81f0b4 ppc64le libexif-0.6.24-9.el10_0.1.ppc64le.rpm SHA-256: 5bc3facdfd082e37d0719c1a12348cb14d6d118b5ceb72900d715e347489dbf5 libexif-debuginfo-0.6.24-9.el10_0.1.ppc64le.rpm SHA-256: 93875169fff5f77fd0423de071083d455ce5bef52f76ed7c513e502ba19a06da libexif-debugsource-0.6.24-9.el10_0.1.ppc64le.rpm SHA-256: a2ad80b92eb5fe6dc8c09c2a18e4ac6ab4ffa918f641faedc94bcb15c0d4efbf Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 SRPM libexif-0.6.24-9.el10_0.1.src.rpm SHA-256: e9d6add85acc4d01154a24adb3da04067da37c00b123dbd6a4bd74c31b81f0b4 aarch64 libexif-0.6.24-9.el10_0.1.aarch64.rpm SHA-256: 94ec8de9d7a60223bd61fd404b83b65ef4e198cf7b61fb6adab5d2137877c49e libexif-debuginfo-0.6.24-9.el10_0.1.aarch64.rpm SHA-256: 567dcb09ea827aa58d77c201b94268db3fbf3c5a8db8f5557a5a2747a293b9e0 libexif-debugsource-0.6.24-9.el10_0.1.aarch64.rpm SHA-256: 10319451c591cd10a551ac02c9f1f180f2fae95ac643df91d78ad83e37cf6cb8 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 SRPM x86_64 libexif-debuginfo-0.6.24-9.el10_0.1.x86_64.rpm SHA-256: 2e1dbd8c53ffdaf532ef5bb6934684de6ae12b563b0654e2cd12f0c17ca677a2 libexif-debugsource-0.6.24-9.el10_0.1.x86_64.rpm SHA-256: 3a9796e0b8b3babe2bce2d5af0bdbc9592863b26dc978f61bab6b1896534e889 libexif-devel-0.6.24-9.el10_0.1.x86_64.rpm SHA-256: 18c8ed5542ec86de0f7bd692a28e600688efe81a6bb94ed567e854d144891c49 libexif-doc-0.6.24-9.el10_0.1.x86_64.rpm SHA-256: 20238f70df033eca22fe61dcbafd5f07197c67dbebad7d24f727063d96d8e730 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 SRPM ppc64le libexif-debuginfo-0.6.24-9.el10_0.1.ppc64le.rpm SHA-256: 93875169fff5f77fd0423de071083d455ce5bef52f76ed7c513e502ba19a06da libexif-debugsource-0.6.24-9.el10_0.1.ppc64le.rpm SHA-256: a2ad80b92eb5fe6dc8c09c2a18e4ac6ab4ffa918f641faedc94bcb15c0d4efbf libexif-devel-0.6.24-9.el10_0.1.ppc64le.rpm SHA-256: d09df46b862aeb1c9cccb5f39887e7abe2fa6076bd3bf5d6db14adebcf4b77f5 libexif-doc-0.6.24-9.el10_0.1.ppc64le.rpm SHA-256: 5cc2ede01a78e01e2b06e3c886700fe646c493a7d689b53c25efa80e376c9367 Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 SRPM s390x libexif-debuginfo-0.6.24-9.el10_0.1.s390x.rpm SHA-256: fe567fc12b692fba701af31aab048657d9b5ef93cddb09f6972319ed87d1a629 libexif-debugsource-0.6.24-9.el10_0.1.s390x.rpm SHA-256: 87aa884aef25b7989d1a6518746954efa15d8725b8e357cc86edf5efeaaf015f libexif-devel-0.6.24-9.el10_0.1.s390x.rpm SHA-256: 7b1628fecd9efe7a33dfa83b67afa303c3f569e3ca03f07ad2ded65c2d3bd07e libexif-doc-0.6.24-9.el10_0.1.s390x.rpm SHA-256: 806f1769074a38d2953b196f0afc55dac333370ed3784dcde187ef4922aed48f Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 SRPM aarch64 libexif-debuginfo-0.6.24-9.el10_0.1.aarch64.rpm SHA-256: 567dcb09ea827aa58d77c201b94268db3fbf3c5a8db8f5557a5a2747a293b9e0 libexif-debugsource-0.6.24-9.el10_0.1.aarch64.rpm SHA-256: 10319451c591cd10a551ac02c9f1f180f2fae95ac643df91d78ad83e37cf6cb8 libexif-devel-0.6.24-9.el10_0.1.aarch64.rpm SHA-256: c82dd5c709aae7fed487c2e39407084fce5243891afc94c6f8f09368b871ae6e libexif-doc-0.6.24-9.el10_0.1.aarch64.rpm SHA-256: ba36a9c8c18cc846986213e5d0cd16b5db83ff287e0992486d45c89c4080a7df Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 SRPM libexif-0.6.24-9.el10_0.1.src.rpm SHA-256: e9d6add85acc4d01154a24adb3da04067da37c00b123dbd6a4bd74c31b81f0b4 aarch64 libexif-0.6.24-9.el10_0.1.aarch64.rpm SHA-256: 94ec8de9d7a60223bd61fd404b83b65ef4e198cf7b61fb6adab5d2137877c49e libexif-debuginfo-0.6.24-9.el10_0.1.aarch64.rpm SHA-256: 567dcb09ea827aa58d77c201b94268db3fbf3c5a8db8f5557a5a2747a293b9e0 libexif-debugsource-0.6.24-9.el10_0.1.aarch64.rpm SHA-256: 10319451c591cd10a551ac02c9f1f180f2fae95ac643df91d78ad83e37cf6cb8 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 SRPM libexif-0.6.24-9.el10_0.1.src.rpm SHA-256: e9d6add85acc4d01154a24adb3da04067da37c00b123dbd6a4bd74c31b81f0b4 s390x libexif-0.6.24-9.el10_0.1.s390x.rpm SHA-256: f31c17c4dccf63593a5ea75576430bec3acee67319a7b4da3f18c87fe195d6c1 libexif-debuginfo-0.6.24-9.el10_0.1.s390x.rpm SHA-256: fe567fc12b692fba701af31aab048657d9b5ef93cddb09f6972319ed87d1a629 libexif-debugsource-0.6.24-9.el10_0.1.s390x.rpm SHA-256: 87aa884aef25b7989d1a6518746954efa15d8725b8e357cc86edf5efeaaf015f Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 SRPM libexif-0.6.24-9.el10_0.1.src.rpm SHA-256: e9d6add85acc4d01154a24adb3da04067da37c00b123dbd6a4bd74c31b81f0b4 ppc64le libexif-0.6.24-9.el10_0.1.ppc64le.rpm SHA-256: 5bc3facdfd082e37d0719c1a12348cb14d6d118b5ceb72900d715e347489dbf5 libexif-debuginfo-0.6.24-9.el10_0.1.ppc64le.rpm SHA-256: 93875169fff5f77fd0423de071083d455ce5bef52f76ed7c513e502ba19a06da libexif-debugsource-0.6.24-9.el10_0.1.ppc64le.rpm SHA-256: a2ad80b92eb5fe6dc8c09c2a18e4ac6ab4ffa918f641faedc94bcb15c0d4efbf Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 SRPM libexif-0.6.24-9.el10_0.1.src.rpm SHA-256: e9d6add85acc4d01154a24adb3da04067da37c00b123dbd6a4bd74c31b81f0b4 x86_64 libexif-0.6.24-9.el10_0.1.x86_64.rpm SHA-256: 861828aafbce207c4c99fe5e796807c6a3ca6a9e1bbc4f491adf28a47611b6a1 libexif-debuginfo-0.6.24-9.el10_0.1.x86_64.rpm SHA-256: 2e1dbd8c53ffdaf532ef5bb6934684de6ae12b563b0654e2cd12f0c17ca677a2 libexif-debugsource-0.6.24-9.el10_0.1.x86_64.rpm SHA-256: 3a9796e0b8b3babe2bce2d5af0bdbc9592863b26dc978f61bab6b1896534e889 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .