Back Linuxsecurity

Fedora 44 perl-Imager Important EXIF Decoding Fix CVE-2026

Linuxsecurity •LinuxSecurity Advisories • August 19, 2026

Share: View original

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

Imager is a module for creating and altering images. It can read and

write various image formats, draw primitive shapes like lines,and

polygons, blend multiple images together in various ways, scale, crop,

render text and more.

Upstream changes (1.034): - Security fix: EXIF: fix decoding of ASCII fields with zero size (CVE-2026-19082, GHSA-hx46-55wp-hv6m) - JPEG: depend on Imager 1.034 for the EXIF decoding fix - Include bundled module Changes files in the main distribution - TIFF: fix potential seek error ignore in sizeproc

* Mon Aug 10 2026 Jitka Plesnikova - 1.034-1 - 1.034 bump (rhbz#2512510) - Fix CVE-2026-19082

[ 1 ] Bug #2512510 - perl-Imager-1.034 is available

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-8a61adae6f' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical EXIF Decoding Vulnerability in Fedora's perl-Imager Module A significant vulnerability (CVE-2026-19082) affecting the perl-Imager module has been identified, allowing improper decoding of ASCII fields with zero size. This flaw could potentially lead to denial of service or other exploits in systems using Fedora 43 and Fedora 44. The vulnerability was published on August 7, 2026, and affects users who rely on the module for image processing tasks. The issue has been addressed in version 1.034 of the module, which is available for update. Users are advised to upgrade their systems to mitigate potential risks. The flaw is particularly concerning for environments that handle sensitive image data. Immediate action is recommended to prevent exploitation. 2 sources 58

Extracted Entities

CVEs (1)

CVE-2026-19082

Vulnerabilities (1)

GHSA-hx46-55wp-hv6m