Red Hat Product Errata RHBA-2011:1472 - Bug Fix Advisory
Issued:
2011-11-22
Updated:
2011-11-22

RHBA-2011:1472 - Bug Fix Advisory

Synopsis

libexif bug fix update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An updated libexif package that fixes one bug is now available for Red Hat
Enterprise Linux 5.

Description

The libexif package provides a library for reading and extracting image metadata
from Exif image files.

This updated fixes the following bug:

  • When opening an invalid or corrupt Exif file, libexif allocated huge amounts

of memory. This could cause a memory exhaustion situation and the system then
became unresponsive, which eventually resulted in a crash of the running
graphics application, such as Gimp. The libexif code has been modified to check
validity of the Exif file before it allocates the memory. Memory is now
allocated properly and graphic programs no longer crash under these
circumstances. (BZ#689614)

All users of libexif are advised to upgrade to this updated package, which fixes
this bug.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

  • Red Hat Enterprise Linux Server 5 x86_64
  • Red Hat Enterprise Linux Server 5 ia64
  • Red Hat Enterprise Linux Server 5 i386
  • Red Hat Enterprise Linux Workstation 5 x86_64
  • Red Hat Enterprise Linux Workstation 5 i386
  • Red Hat Enterprise Linux Desktop 5 x86_64
  • Red Hat Enterprise Linux Desktop 5 i386
  • Red Hat Enterprise Linux for IBM z Systems 5 s390x
  • Red Hat Enterprise Linux for Power, big endian 5 ppc
  • Red Hat Enterprise Linux Server from RHUI 5 x86_64
  • Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

(none)

CVEs

(none)

References

(none)

Red Hat Enterprise Linux Server 5

SRPM
libexif-0.6.20-1.el5_7.1.src.rpm SHA-256: 9adf36b8954cc0ad39fa5f320c0a4b83719f1b309863841504dc65cdf4004d89
x86_64
libexif-0.6.20-1.el5_7.1.i386.rpm SHA-256: 2be7dfa32182c9f605f45341528a043bfc3638d0398e9a805740473e413e6594
libexif-0.6.20-1.el5_7.1.x86_64.rpm SHA-256: 03b9dfdf00af6142059c9b5cf4831b5210cfecac2df7acec8fd73c07da51f291
libexif-devel-0.6.20-1.el5_7.1.i386.rpm SHA-256: 6d1525e3ef0b0539cd6034a74dc2317fb682b4e0651357c7512809dea9bad2a8
libexif-devel-0.6.20-1.el5_7.1.x86_64.rpm SHA-256: 553b9421dc6102e8dfd2e5b03d5c3099f5b56136b03ee70ea470f74c53e0d2dc
ia64
libexif-0.6.20-1.el5_7.1.ia64.rpm SHA-256: 5864f1b8b0ac775274cd7db018ccbbdc31110201bde95266163726367f9653c1
libexif-devel-0.6.20-1.el5_7.1.ia64.rpm SHA-256: bfee3a6d8ae77f5267491e29f50e3579dffd45c75d7c316288a2a4ca9d9f6840
i386
libexif-0.6.20-1.el5_7.1.i386.rpm SHA-256: 2be7dfa32182c9f605f45341528a043bfc3638d0398e9a805740473e413e6594
libexif-devel-0.6.20-1.el5_7.1.i386.rpm SHA-256: 6d1525e3ef0b0539cd6034a74dc2317fb682b4e0651357c7512809dea9bad2a8

Red Hat Enterprise Linux Workstation 5

SRPM
libexif-0.6.20-1.el5_7.1.src.rpm SHA-256: 9adf36b8954cc0ad39fa5f320c0a4b83719f1b309863841504dc65cdf4004d89
x86_64
libexif-0.6.20-1.el5_7.1.i386.rpm SHA-256: 2be7dfa32182c9f605f45341528a043bfc3638d0398e9a805740473e413e6594
libexif-0.6.20-1.el5_7.1.x86_64.rpm SHA-256: 03b9dfdf00af6142059c9b5cf4831b5210cfecac2df7acec8fd73c07da51f291
libexif-devel-0.6.20-1.el5_7.1.i386.rpm SHA-256: 6d1525e3ef0b0539cd6034a74dc2317fb682b4e0651357c7512809dea9bad2a8
libexif-devel-0.6.20-1.el5_7.1.x86_64.rpm SHA-256: 553b9421dc6102e8dfd2e5b03d5c3099f5b56136b03ee70ea470f74c53e0d2dc
i386
libexif-0.6.20-1.el5_7.1.i386.rpm SHA-256: 2be7dfa32182c9f605f45341528a043bfc3638d0398e9a805740473e413e6594
libexif-devel-0.6.20-1.el5_7.1.i386.rpm SHA-256: 6d1525e3ef0b0539cd6034a74dc2317fb682b4e0651357c7512809dea9bad2a8

Red Hat Enterprise Linux Desktop 5

SRPM
libexif-0.6.20-1.el5_7.1.src.rpm SHA-256: 9adf36b8954cc0ad39fa5f320c0a4b83719f1b309863841504dc65cdf4004d89
x86_64
libexif-0.6.20-1.el5_7.1.i386.rpm SHA-256: 2be7dfa32182c9f605f45341528a043bfc3638d0398e9a805740473e413e6594
libexif-0.6.20-1.el5_7.1.x86_64.rpm SHA-256: 03b9dfdf00af6142059c9b5cf4831b5210cfecac2df7acec8fd73c07da51f291
i386
libexif-0.6.20-1.el5_7.1.i386.rpm SHA-256: 2be7dfa32182c9f605f45341528a043bfc3638d0398e9a805740473e413e6594

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
libexif-0.6.20-1.el5_7.1.src.rpm SHA-256: 9adf36b8954cc0ad39fa5f320c0a4b83719f1b309863841504dc65cdf4004d89
s390x
libexif-0.6.20-1.el5_7.1.s390.rpm SHA-256: 654f6c169849a1d7207aec46b418091fca9221ca46e47b6f95ca09aca2e62a40
libexif-0.6.20-1.el5_7.1.s390x.rpm SHA-256: 4f6a01384f5dd521790f24a39be33aa108062cafdc5f8a8b5c84eddf5cba88f6
libexif-devel-0.6.20-1.el5_7.1.s390.rpm SHA-256: a25e0b3597060e3d1dbf93b4a8ac0e82526654cc451cf4b936f510089f3b7e0d
libexif-devel-0.6.20-1.el5_7.1.s390x.rpm SHA-256: 58892dda7924c7f7036d69e789d1a17ac71c17e9e2f7a53508df39a42490da52

Red Hat Enterprise Linux for Power, big endian 5

SRPM
libexif-0.6.20-1.el5_7.1.src.rpm SHA-256: 9adf36b8954cc0ad39fa5f320c0a4b83719f1b309863841504dc65cdf4004d89
ppc
libexif-0.6.20-1.el5_7.1.ppc.rpm SHA-256: 6938f1bab7f50808e69ab12a0c1efae2744e91233817b7ee7485aeac64b40383
libexif-0.6.20-1.el5_7.1.ppc64.rpm SHA-256: 5b043571affe51a14065071546a5de8ca099d6291f5a6e0375dc1169dffa2b98
libexif-devel-0.6.20-1.el5_7.1.ppc.rpm SHA-256: b244921098332cff7a206990591a8fd46f1de8a2c55aeef8d0102926167c2559
libexif-devel-0.6.20-1.el5_7.1.ppc64.rpm SHA-256: d9f5d6b2a106a80a985f661598e7f723964e1634e17440993de8aa94994a87f2

Red Hat Enterprise Linux Server from RHUI 5

SRPM
libexif-0.6.20-1.el5_7.1.src.rpm SHA-256: 9adf36b8954cc0ad39fa5f320c0a4b83719f1b309863841504dc65cdf4004d89
x86_64
libexif-0.6.20-1.el5_7.1.i386.rpm SHA-256: 2be7dfa32182c9f605f45341528a043bfc3638d0398e9a805740473e413e6594
libexif-0.6.20-1.el5_7.1.x86_64.rpm SHA-256: 03b9dfdf00af6142059c9b5cf4831b5210cfecac2df7acec8fd73c07da51f291
libexif-devel-0.6.20-1.el5_7.1.i386.rpm SHA-256: 6d1525e3ef0b0539cd6034a74dc2317fb682b4e0651357c7512809dea9bad2a8
libexif-devel-0.6.20-1.el5_7.1.x86_64.rpm SHA-256: 553b9421dc6102e8dfd2e5b03d5c3099f5b56136b03ee70ea470f74c53e0d2dc
i386
libexif-0.6.20-1.el5_7.1.i386.rpm SHA-256: 2be7dfa32182c9f605f45341528a043bfc3638d0398e9a805740473e413e6594
libexif-devel-0.6.20-1.el5_7.1.i386.rpm SHA-256: 6d1525e3ef0b0539cd6034a74dc2317fb682b4e0651357c7512809dea9bad2a8

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.