Summary
[0.6.22-2.0.1]
- Backport fix for CVE-2026-40386 [Orabug: 39574457]
- Backport fix for CVE-2026-40385 [Orabug: 39574457]
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | libexif | 0:0.6.22-2.0.1.el7_9 |
| Oracle Linux · 7 | libexif-devel | 0:0.6.22-2.0.1.el7_9 |
| Oracle Linux · 7 | libexif-doc | 0:0.6.22-2.0.1.el7_9 |
Vulnerabilities 2
-
Medium 4.0
In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attack…
-
Medium 4.0
In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used …