-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2020-e99ef3282f 2020-11-14 01:11:09.444580 --------------------------------------------------------------------------------
Name : libexif Product : Fedora 33 Version : 0.6.22 Release : 3.fc33 URL : https://libexif.github.io/ Summary : Library for extracting extra information from image files Description : Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows you to parse an EXIF file and read the data from those tags.
-------------------------------------------------------------------------------- Update Information:
CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452 -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 9 2020 Michael Catanzaro mcatanzaro@redhat.com - 0.6.22-3 - Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1847132 - CVE-2020-0181 libexif: integer overflow in exif_data_load_data_thumbnail function in exif-data.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1847132 [ 2 ] Bug #1847134 - CVE-2020-0198 libexif: integer overflow in exif_data_load_data_content function in exif-data.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1847134 --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-e99ef3282f' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------