RedHat: RHSA-2020-4766:01 Moderate: libexif security, bug fix,
Summary
The libexif packages provide a library for extracting extra information
from image files.
The following packages have been upgraded to a later upstream version:
libexif (0.6.22). (BZ#1841320)
Security Fix(es):
* libexif: out of bounds write in exif-data.c (CVE-2019-9278)
* libexif: out of bounds read due to a missing bounds check in
exif_data_save_data_entry function in exif-data.c (CVE-2020-0093)
* libexif: integer overflow in exif_data_load_data_thumbnail function in
exif-data.c (CVE-2020-0181)
* libexif: integer overflow in exif_data_load_data_content function in
exif-data.c (CVE-2020-0198)
* libexif: use of uninitialized memory in EXIF Makernote handling can lead
to crashes and use-after-free (CVE-2020-13113)
* libexif: unrestricted size in handling Canon EXIF MakerNote data can lead
to consumption of large amounts of compute time (CVE-2020-13114)
* libexif: out of bounds read due to a missing bounds check in
exif_entry_get_value function in exif-entry.c (CVE-2020-0182)
* libexif: divide-by-zero in exif_entry_get_value function in exif-entry.c
(CVE-2020-12767)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat
Enterprise Linux 8.3 Release Notes linked from the References section.
Summary
Solution
For details on how to apply this update, which includes the changes
described in this advisory, refer to:
https://access.redhat.com/articles/11258
References
https://access.redhat.com/security/cve/CVE-2019-9278 https://access.redhat.com/security/cve/CVE-2020-0093 https://access.redhat.com/security/cve/CVE-2020-0181 https://access.redhat.com/security/cve/CVE-2020-0182 https://access.redhat.com/security/cve/CVE-2020-0198 https://access.redhat.com/security/cve/CVE-2020-12767 https://access.redhat.com/security/cve/CVE-2020-13113 https://access.redhat.com/security/cve/CVE-2020-13114 https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/
Package List
Red Hat Enterprise Linux AppStream (v. 8):
Source:
libexif-0.6.22-4.el8.src.rpm
aarch64:
libexif-0.6.22-4.el8.aarch64.rpm
libexif-debuginfo-0.6.22-4.el8.aarch64.rpm
libexif-debugsource-0.6.22-4.el8.aarch64.rpm
ppc64le:
libexif-0.6.22-4.el8.ppc64le.rpm
libexif-debuginfo-0.6.22-4.el8.ppc64le.rpm
libexif-debugsource-0.6.22-4.el8.ppc64le.rpm
s390x:
libexif-0.6.22-4.el8.s390x.rpm
libexif-debuginfo-0.6.22-4.el8.s390x.rpm
libexif-debugsource-0.6.22-4.el8.s390x.rpm
x86_64:
libexif-0.6.22-4.el8.i686.rpm
libexif-0.6.22-4.el8.x86_64.rpm
libexif-debuginfo-0.6.22-4.el8.i686.rpm
libexif-debuginfo-0.6.22-4.el8.x86_64.rpm
libexif-debugsource-0.6.22-4.el8.i686.rpm
libexif-debugsource-0.6.22-4.el8.x86_64.rpm
Red Hat CodeReady Linux Builder (v. 8):
aarch64:
libexif-debuginfo-0.6.22-4.el8.aarch64.rpm
libexif-debugsource-0.6.22-4.el8.aarch64.rpm
libexif-devel-0.6.22-4.el8.aarch64.rpm
ppc64le:
libexif-debuginfo-0.6.22-4.el8.ppc64le.rpm
libexif-debugsource-0.6.22-4.el8.ppc64le.rpm
libexif-devel-0.6.22-4.el8.ppc64le.rpm
s390x:
libexif-debuginfo-0.6.22-4.el8.s390x.rpm
libexif-debugsource-0.6.22-4.el8.s390x.rpm
libexif-devel-0.6.22-4.el8.s390x.rpm
x86_64:
libexif-debuginfo-0.6.22-4.el8.i686.rpm
libexif-debuginfo-0.6.22-4.el8.x86_64.rpm
libexif-debugsource-0.6.22-4.el8.i686.rpm
libexif-debugsource-0.6.22-4.el8.x86_64.rpm
libexif-devel-0.6.22-4.el8.i686.rpm
libexif-devel-0.6.22-4.el8.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/
Topic
An update for libexif is now available for Red Hat Enterprise Linux 8.Red Hat Product Security has rated this update as having a security impactof Moderate. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.
Topic
Relevant Releases Architectures
Red Hat CodeReady Linux Builder (v. 8) - aarch64, ppc64le, s390x, x86_64
Red Hat Enterprise Linux AppStream (v. 8) - aarch64, ppc64le, s390x, x86_64
Bugs Fixed
1789031 - CVE-2019-9278 libexif: out of bounds write in exif-data.c
1834950 - CVE-2020-12767 libexif: divide-by-zero in exif_entry_get_value function in exif-entry.c
1840347 - CVE-2020-13113 libexif: use of uninitialized memory in EXIF Makernote handling can lead to crashes and use-after-free
1840350 - CVE-2020-13114 libexif: unrestricted size in handling Canon EXIF MakerNote data can lead to consumption of large amounts of compute time
1841320 - Rebase to libexif 0.6.22
1847131 - CVE-2020-0181 libexif: integer overflow in exif_data_load_data_thumbnail function in exif-data.c
1847133 - CVE-2020-0198 libexif: integer overflow in exif_data_load_data_content function in exif-data.c
1852487 - CVE-2020-0093 libexif: out of bounds read due to a missing bounds check in exif_data_save_data_entry function in exif-data.c
1852490 - CVE-2020-0182 libexif: out of bounds read due to a missing bounds check in exif_entry_get_value function in exif-entry.c
