Red Hat Product Errata RHSA-2026:26276 - Security Advisory Issued: 2026-06-16 Updated: 2026-06-16 RHSA-2026:26276 - Security Advisory Overview Updated Packages Synopsis Moderate: libexif security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libexif is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libexif packages provide a library for extracting extra information from image files. Security Fix(es): libexif: libexif: Information disclosure and crashes via integer overflow in Nikon MakerNote handling (CVE-2026-40385) libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding (CVE-2026-40386) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.2 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 s390x Fixes BZ - 2457687 - CVE-2026-40385 libexif: libexif: Information disclosure and crashes via integer overflow in Nikon MakerNote handling BZ - 2457689 - CVE-2026-40386 libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding CVEs CVE-2026-40385 CVE-2026-40386 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.2 SRPM libexif-0.6.22-6.el9_2.1.src.rpm SHA-256: 95a66b0b1c56fc17a08c94c413758c92f4ca162fea8048aa6ffca4439967e638 x86_64 libexif-0.6.22-6.el9_2.1.i686.rpm SHA-256: 1d345d14f53a696dd24bd206c6ed7805aab9fddfa7910e74029fabbd3fc8e7cb libexif-0.6.22-6.el9_2.1.x86_64.rpm SHA-256: e0b248306880230eaaddefae2807ca6c44bb18abc832358f429b845ed2e10302 libexif-debuginfo-0.6.22-6.el9_2.1.i686.rpm SHA-256: ad7f2c46e05e4cef8b8415482602adf333f80a864eb793068356830a7086e9bb libexif-debuginfo-0.6.22-6.el9_2.1.x86_64.rpm SHA-256: 6cb3ff94f7e20d0a39875f0a3aced6f7729a060bd3472fbd625e30b05d029400 libexif-debugsource-0.6.22-6.el9_2.1.i686.rpm SHA-256: 8f83a988710f79bc7e40ba1d714a4e0e9529109f9c859c75ac712355e99dd5ea libexif-debugsource-0.6.22-6.el9_2.1.x86_64.rpm SHA-256: 0e950fe100001982cf247c13cab3e967fe03cff80940b8bc4552a54c81f49611 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 SRPM libexif-0.6.22-6.el9_2.1.src.rpm SHA-256: 95a66b0b1c56fc17a08c94c413758c92f4ca162fea8048aa6ffca4439967e638 ppc64le libexif-0.6.22-6.el9_2.1.ppc64le.rpm SHA-256: 33d520702b1db922d04b8770ebdd838b2e7e3650667108386a0418cca121068e libexif-debuginfo-0.6.22-6.el9_2.1.ppc64le.rpm SHA-256: ba76a5ff2fed59ec5b919bd9655956792cf668d14c6b3e52ebd41773b42f0908 libexif-debugsource-0.6.22-6.el9_2.1.ppc64le.rpm SHA-256: 3cfe58a0e0e8e91f0bc88f04ad3cf2b3868b99727df6147f76e10ba1220d3063 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 SRPM libexif-0.6.22-6.el9_2.1.src.rpm SHA-256: 95a66b0b1c56fc17a08c94c413758c92f4ca162fea8048aa6ffca4439967e638 x86_64 libexif-0.6.22-6.el9_2.1.i686.rpm SHA-256: 1d345d14f53a696dd24bd206c6ed7805aab9fddfa7910e74029fabbd3fc8e7cb libexif-0.6.22-6.el9_2.1.x86_64.rpm SHA-256: e0b248306880230eaaddefae2807ca6c44bb18abc832358f429b845ed2e10302 libexif-debuginfo-0.6.22-6.el9_2.1.i686.rpm SHA-256: ad7f2c46e05e4cef8b8415482602adf333f80a864eb793068356830a7086e9bb libexif-debuginfo-0.6.22-6.el9_2.1.x86_64.rpm SHA-256: 6cb3ff94f7e20d0a39875f0a3aced6f7729a060bd3472fbd625e30b05d029400 libexif-debugsource-0.6.22-6.el9_2.1.i686.rpm SHA-256: 8f83a988710f79bc7e40ba1d714a4e0e9529109f9c859c75ac712355e99dd5ea libexif-debugsource-0.6.22-6.el9_2.1.x86_64.rpm SHA-256: 0e950fe100001982cf247c13cab3e967fe03cff80940b8bc4552a54c81f49611 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 SRPM libexif-0.6.22-6.el9_2.1.src.rpm SHA-256: 95a66b0b1c56fc17a08c94c413758c92f4ca162fea8048aa6ffca4439967e638 aarch64 libexif-0.6.22-6.el9_2.1.aarch64.rpm SHA-256: 0db2f5dcc5d945f9b20a69dbb0815f32af193f3fec5c01fe4052e2cd8ac53cfd libexif-debuginfo-0.6.22-6.el9_2.1.aarch64.rpm SHA-256: a6f785cb129a262da1244d88ca1ef3738a593457de94d4e309a395b7758004c3 libexif-debugsource-0.6.22-6.el9_2.1.aarch64.rpm SHA-256: 6c887a020fa4b0f3ee03a5cb11b8d9a6c8157e29cb7267cfeb1be0993c42715f Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 SRPM libexif-0.6.22-6.el9_2.1.src.rpm SHA-256: 95a66b0b1c56fc17a08c94c413758c92f4ca162fea8048aa6ffca4439967e638 s390x libexif-0.6.22-6.el9_2.1.s390x.rpm SHA-256: c671b8faa309d5293854519cbc9d5226ced5aa620dcba082abbae3aa0c8dde28 libexif-debuginfo-0.6.22-6.el9_2.1.s390x.rpm SHA-256: 1063296d793e902994066c0f9339b666da34de871b1341b626a8ca900bf2fcda libexif-debugsource-0.6.22-6.el9_2.1.s390x.rpm SHA-256: ead78981ba8ae62aca5d20ac4ece3461d450e102060a7b50f9fcd926efa5829f Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 SRPM libexif-0.6.22-6.el9_2.1.src.rpm SHA-256: 95a66b0b1c56fc17a08c94c413758c92f4ca162fea8048aa6ffca4439967e638 x86_64 libexif-0.6.22-6.el9_2.1.i686.rpm SHA-256: 1d345d14f53a696dd24bd206c6ed7805aab9fddfa7910e74029fabbd3fc8e7cb libexif-0.6.22-6.el9_2.1.x86_64.rpm SHA-256: e0b248306880230eaaddefae2807ca6c44bb18abc832358f429b845ed2e10302 libexif-debuginfo-0.6.22-6.el9_2.1.i686.rpm SHA-256: ad7f2c46e05e4cef8b8415482602adf333f80a864eb793068356830a7086e9bb libexif-debuginfo-0.6.22-6.el9_2.1.x86_64.rpm SHA-256: 6cb3ff94f7e20d0a39875f0a3aced6f7729a060bd3472fbd625e30b05d029400 libexif-debugsource-0.6.22-6.el9_2.1.i686.rpm SHA-256: 8f83a988710f79bc7e40ba1d714a4e0e9529109f9c859c75ac712355e99dd5ea libexif-debugsource-0.6.22-6.el9_2.1.x86_64.rpm SHA-256: 0e950fe100001982cf247c13cab3e967fe03cff80940b8bc4552a54c81f49611 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 SRPM libexif-0.6.22-6.el9_2.1.src.rpm SHA-256: 95a66b0b1c56fc17a08c94c413758c92f4ca162fea8048aa6ffca4439967e638 aarch64 libexif-0.6.22-6.el9_2.1.aarch64.rpm SHA-256: 0db2f5dcc5d945f9b20a69dbb0815f32af193f3fec5c01fe4052e2cd8ac53cfd libexif-debuginfo-0.6.22-6.el9_2.1.aarch64.rpm SHA-256: a6f785cb129a262da1244d88ca1ef3738a593457de94d4e309a395b7758004c3 libexif-debugsource-0.6.22-6.el9_2.1.aarch64.rpm SHA-256: 6c887a020fa4b0f3ee03a5cb11b8d9a6c8157e29cb7267cfeb1be0993c42715f Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 SRPM libexif-0.6.22-6.el9_2.1.src.rpm SHA-256: 95a66b0b1c56fc17a08c94c413758c92f4ca162fea8048aa6ffca4439967e638 ppc64le libexif-0.6.22-6.el9_2.1.ppc64le.rpm SHA-256: 33d520702b1db922d04b8770ebdd838b2e7e3650667108386a0418cca121068e libexif-debuginfo-0.6.22-6.el9_2.1.ppc64le.rpm SHA-256: ba76a5ff2fed59ec5b919bd9655956792cf668d14c6b3e52ebd41773b42f0908 libexif-debugsource-0.6.22-6.el9_2.1.ppc64le.rpm SHA-256: 3cfe58a0e0e8e91f0bc88f04ad3cf2b3868b99727df6147f76e10ba1220d3063 Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 SRPM libexif-0.6.22-6.el9_2.1.src.rpm SHA-256: 95a66b0b1c56fc17a08c94c413758c92f4ca162fea8048aa6ffca4439967e638 s390x libexif-0.6.22-6.el9_2.1.s390x.rpm SHA-256: c671b8faa309d5293854519cbc9d5226ced5aa620dcba082abbae3aa0c8dde28 libexif-debuginfo-0.6.22-6.el9_2.1.s390x.rpm SHA-256: 1063296d793e902994066c0f9339b666da34de871b1341b626a8ca900bf2fcda libexif-debugsource-0.6.22-6.el9_2.1.s390x.rpm SHA-256: ead78981ba8ae62aca5d20ac4ece3461d450e102060a7b50f9fcd926efa5829f The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .