Red Hat Security AdvisoryRHSA-2020:5402
libexif security update
Released 2020-12-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libexif-0.6.22-2.el7_9
- Red Hat Enterprise Linux Client Optional (v. 7) libexif-devel-0.6.22-2.el7_9, libexif-doc-0.6.22-2.el7_9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libexif-0.6.22-2.el7_9, libexif-devel-0.6.22-2.el7_9, libexif-doc-0.6.22-2.el7_9
- Red Hat Enterprise Linux Server (v. 7) libexif-0.6.22-2.el7_9, libexif-0.6.22-2.el7_9.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) libexif-devel-0.6.22-2.el7_9, libexif-devel-0.6.22-2.el7_9.ppc, libexif-doc-0.6.22-2.el7_9
- Red Hat Enterprise Linux Workstation (v. 7) libexif-0.6.22-2.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) libexif-devel-0.6.22-2.el7_9, libexif-doc-0.6.22-2.el7_9
Fixes 1 record
Priority MEDIUM 48
In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03327 · Published 2020-11-10 · Partial fix CWE-190