Summary
[0.6.22-4]
- Add patch for CVE-2020-0181/CVE-2020-0198
- Resolves: #1847753
- Resolves: #1847761
[0.6.22-3]
- Also remove timezone from the .mo files
- Related: #1841320
[0.6.22-2]
- Remove timestamps from the .mo files to avoid multilib conflicts
- Related: #1841320
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | libexif | 0:0.6.22-4.el8 |
| Oracle Linux · 8 | libexif-devel | 0:0.6.22-4.el8 |
Vulnerabilities 8
-
Unscored —
In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of…
-
Unscored —
In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This…
-
Unscored —CVE-2020-0181 Public exploit
In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow. This…
-
Unscored —
In exif_entry_get_value of exif-entry.c, there is a possible out of bounds read due to a missing bounds check. This cou…
-
Unscored —CVE-2020-0198 Public exploit
In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could l…
-
Unscored —
exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.
-
Unscored —
An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to …
-
Unscored —
An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead…