(RHSA-2007:1165) Moderate: libexif security update

2007-12-1900:00:00

access.redhat.com

EPSS

0.022

Percentile

89.6%

JSON

The libexif packages contain the Exif library. Exif is an image file format
specification that enables metadata tags to be added to existing JPEG, TIFF
and RIFF files. The Exif library makes it possible to parse an Exif file
and read this metadata.

An infinite recursion flaw was found in the way libexif parses Exif image
tags. If a victim opens a carefully crafted Exif image file, it could cause
the application linked against libexif to crash. (CVE-2007-6351)

An integer overflow flaw was found in the way libexif parses Exif image
tags. If a victim opens a carefully crafted Exif image file, it could cause
the application linked against libexif to execute arbitrary code, or crash.
(CVE-2007-6352)

Users of libexif are advised to upgrade to these updated packages, which
contain backported patches to resolve these issues.

OSVersionArchitecturePackageVersionFilename
RedHat5i386libexif-devel< 0.6.13-4.0.2.el5_1.1libexif-devel-0.6.13-4.0.2.el5_1.1.i386.rpm
RedHat5srclibexif< 0.6.13-4.0.2.el5_1.1libexif-0.6.13-4.0.2.el5_1.1.src.rpm
RedHat5x86_64libexif-devel< 0.6.13-4.0.2.el5_1.1libexif-devel-0.6.13-4.0.2.el5_1.1.x86_64.rpm
RedHat5s390libexif-devel< 0.6.13-4.0.2.el5_1.1libexif-devel-0.6.13-4.0.2.el5_1.1.s390.rpm
RedHat5s390xlibexif< 0.6.13-4.0.2.el5_1.1libexif-0.6.13-4.0.2.el5_1.1.s390x.rpm
RedHat5ppclibexif-devel< 0.6.13-4.0.2.el5_1.1libexif-devel-0.6.13-4.0.2.el5_1.1.ppc.rpm
RedHat5ppc64libexif-devel< 0.6.13-4.0.2.el5_1.1libexif-devel-0.6.13-4.0.2.el5_1.1.ppc64.rpm
RedHat5ppc64libexif< 0.6.13-4.0.2.el5_1.1libexif-0.6.13-4.0.2.el5_1.1.ppc64.rpm
RedHat5i386libexif< 0.6.13-4.0.2.el5_1.1libexif-0.6.13-4.0.2.el5_1.1.i386.rpm
RedHat5ppclibexif< 0.6.13-4.0.2.el5_1.1libexif-0.6.13-4.0.2.el5_1.1.ppc.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	5	i386	libexif-devel	< 0.6.13-4.0.2.el5_1.1	libexif-devel-0.6.13-4.0.2.el5_1.1.i386.rpm
RedHat	5	src	libexif	< 0.6.13-4.0.2.el5_1.1	libexif-0.6.13-4.0.2.el5_1.1.src.rpm
RedHat	5	x86_64	libexif-devel	< 0.6.13-4.0.2.el5_1.1	libexif-devel-0.6.13-4.0.2.el5_1.1.x86_64.rpm
RedHat	5	s390	libexif-devel	< 0.6.13-4.0.2.el5_1.1	libexif-devel-0.6.13-4.0.2.el5_1.1.s390.rpm
RedHat	5	s390x	libexif	< 0.6.13-4.0.2.el5_1.1	libexif-0.6.13-4.0.2.el5_1.1.s390x.rpm
RedHat	5	ppc	libexif-devel	< 0.6.13-4.0.2.el5_1.1	libexif-devel-0.6.13-4.0.2.el5_1.1.ppc.rpm
RedHat	5	ppc64	libexif-devel	< 0.6.13-4.0.2.el5_1.1	libexif-devel-0.6.13-4.0.2.el5_1.1.ppc64.rpm
RedHat	5	ppc64	libexif	< 0.6.13-4.0.2.el5_1.1	libexif-0.6.13-4.0.2.el5_1.1.ppc64.rpm
RedHat	5	i386	libexif	< 0.6.13-4.0.2.el5_1.1	libexif-0.6.13-4.0.2.el5_1.1.i386.rpm
RedHat	5	ppc	libexif	< 0.6.13-4.0.2.el5_1.1	libexif-0.6.13-4.0.2.el5_1.1.ppc.rpm