Synopsis

libexif bug fix update

Type/Severity

Bug Fix Advisory

Topic

An updated libexif package that fixes one bug is now available for Red Hat
Enterprise Linux 5.

Description

The libexif package provides a library for reading and extracting image metadata
from Exif image files.

This updated fixes the following bug:

• When opening an invalid or corrupt Exif file, libexif allocated huge amounts
  of memory. This could cause a memory exhaustion situation and the system then
  became unresponsive, which eventually resulted in a crash of the running
  graphics application, such as Gimp. The libexif code has been modified to check
  validity of the Exif file before it allocates the memory. Memory is now
  allocated properly and graphic programs no longer crash under these
  circumstances. (BZ#689614)
  

All users of libexif are advised to upgrade to this updated package, which fixes
this bug.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

(none)

CVEs

(none)

References

(none)

Red Hat Enterprise Linux Server 5

SRPM
x86_64
libexif-devel-0.6.20-1.el5_7.1.i386.rpm	SHA-256: 6d1525e3ef0b0539cd6034a74dc2317fb682b4e0651357c7512809dea9bad2a8
libexif-devel-0.6.20-1.el5_7.1.x86_64.rpm	SHA-256: 553b9421dc6102e8dfd2e5b03d5c3099f5b56136b03ee70ea470f74c53e0d2dc
i386
libexif-devel-0.6.20-1.el5_7.1.i386.rpm	SHA-256: 6d1525e3ef0b0539cd6034a74dc2317fb682b4e0651357c7512809dea9bad2a8

Red Hat Enterprise Linux Workstation 5

SRPM
x86_64
libexif-devel-0.6.20-1.el5_7.1.i386.rpm	SHA-256: 6d1525e3ef0b0539cd6034a74dc2317fb682b4e0651357c7512809dea9bad2a8
libexif-devel-0.6.20-1.el5_7.1.x86_64.rpm	SHA-256: 553b9421dc6102e8dfd2e5b03d5c3099f5b56136b03ee70ea470f74c53e0d2dc
i386
libexif-devel-0.6.20-1.el5_7.1.i386.rpm	SHA-256: 6d1525e3ef0b0539cd6034a74dc2317fb682b4e0651357c7512809dea9bad2a8

Red Hat Enterprise Linux Server from RHUI 5

SRPM
x86_64
libexif-devel-0.6.20-1.el5_7.1.i386.rpm	SHA-256: 6d1525e3ef0b0539cd6034a74dc2317fb682b4e0651357c7512809dea9bad2a8
libexif-devel-0.6.20-1.el5_7.1.x86_64.rpm	SHA-256: 553b9421dc6102e8dfd2e5b03d5c3099f5b56136b03ee70ea470f74c53e0d2dc
i386
libexif-devel-0.6.20-1.el5_7.1.i386.rpm	SHA-256: 6d1525e3ef0b0539cd6034a74dc2317fb682b4e0651357c7512809dea9bad2a8