Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-13112: An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This is different from CVE-2020-0093. 1840344: CVE-2020-13112 libexif: several buffer over-reads in EXIF MakerNote handling can lead to information disclosure and DoS
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | libexif | 0:0.6.21-7.amzn2 |
| Amazon Linux · 2 | libexif-debuginfo | 0:0.6.21-7.amzn2 |
| Amazon Linux · 2 | libexif-devel | 0:0.6.21-7.amzn2 |
| Amazon Linux · 2 | libexif-doc | 0:0.6.21-7.amzn2 |
Vulnerabilities 1
-
Unscored —
An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to in…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2020-13112.html