Back Linuxsecurity

Fedora 44 perl-Imager Critical Fix for EXIF Handling CVE-2026

Linuxsecurity •LinuxSecurity Advisories • July 16, 2026

1.033 - CVE-2026-14454: Fix mishandling of large EXIF IFD entry count values — treated as negative numbers, could lead to allocation failure and program exit - JPEG: depend on Imager 1.033 for the EXIF fix - Fix thread context object reference count leak in bumpmap and bumpmap_complex filters - TIFF: fix a leak from processing the TIFF warnings buffer (introduced in Imager 1.021)

* Tue Jul 7 2026 Jitka Plesnikova - 1.033-1 - 1.033 bump (rhbz#2497664) - Fix CVE-2026-14454

[ 1 ] Bug #2497664 - perl-Imager-1.033 is available

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-5f5efe281d' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical EXIF Handling Vulnerability in Fedora Perl-Imager A critical vulnerability, CVE-2026-14454, was published on July 8, 2026, affecting the Perl-Imager library in Fedora systems. This vulnerability mishandles large EXIF IFD entry count values, treating them as negative numbers, which could lead to allocation failures and program crashes. The issue impacts users of Fedora 43 and Fedora 44, requiring immediate updates to mitigate potential exploitation. The vulnerability was introduced in Imager version 1.021 and has been fixed in version 1.033. Users are advised to upgrade using the 'dnf' package manager to ensure system security. The fix addresses memory leaks in the bumpmap filters and TIFF processing as well. The current status is that the patch is available and should be applied promptly. 2 sources 71

Extracted Entities

CVEs (1)

CVE-2026-14454

Platforms (1)

Fedora 44