Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 32: FEDORA-2021-477809f45f Critical: exif DoS Issue

fedora
Calendar Grey May 18, 2021
Dist Fedora Esm H88
Essential advisory for Fedora 32 resolving denial of service vulnerability in exif tool, incorporating fix for CVE-2021-27815.
0.6.22, patch for CVE-2021-27815.

Summary

Small command-line utility to show EXIF information hidden

in JPEG files.

0.6.22, patch for CVE-2021-27815.

* Mon May 10 2021 Gwyn Ciesla - 0.6.22-1

- 0.6.22, patch for CVE-2021-27815.

* Tue Jan 26 2021 Fedora Release Engineering - 0.6.21-20

- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

* Mon Jul 27 2020 Fedora Release Engineering - 0.6.21-19

- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

* Mon Jul 13 2020 Tom Stellard - 0.6.21-18

- Use make macros

- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro

[ 1 ] Bug #1958808 - CVE-2021-27815 exif: libexif: NULL Pointer Deference may lead to DoS by uploading a malicious JPEG file [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1958808

su -c 'dnf upgrade --advisory FEDORA-2021-477809f45f' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 32
Version: 0.6.22
Release: 1.fc32
Summary: Utility to show EXIF information hidden in JPEG files

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here