Issued:
2005-03-21
Updated:
2005-03-21

RHSA-2005:300 - Security Advisory

Synopsis

libexif security update

Type/Severity

Security Advisory: Low

Topic

Updated libexif packages that fix a buffer overflow issue are now available.

This update has been rated as having low security impact by the Red Hat
Security Response Team.

Description

The libexif package contains the EXIF library. Applications use this
library to parse EXIF image files.

A bug was found in the way libexif parses EXIF tags. An attacker could
create a carefully crafted EXIF image file which could cause image viewers
linked against libexif to crash. The Common Vulnerabilities and Exposures
project (cve.mitre.org) has assigned the name CAN-2005-0664 to this issue.

Users of libexif should upgrade to these updated packages, which contain a
backported patch and are not vulnerable to this issue.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red Hat
Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:

http://www.redhat.com/docs/manuals/enterprise/

Affected Products

  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

  • BZ - 150503 - CAN-2005-0664 buffer overflow in libexif

CVEs

References

(none)

Red Hat Enterprise Linux Server 4

SRPM
libexif-0.5.12-5.1.src.rpm SHA-256: 9144ddf5b4e5e69ca1d0e0cbfb6ad79b832a7322b8e05f22268e78f70b378425
x86_64
libexif-0.5.12-5.1.i386.rpm SHA-256: 44bd2a4d9622d9fcd1973fff867b3eed0f667277e05a12a0e50fcc7e03241bf2
libexif-0.5.12-5.1.i386.rpm SHA-256: 44bd2a4d9622d9fcd1973fff867b3eed0f667277e05a12a0e50fcc7e03241bf2
libexif-0.5.12-5.1.x86_64.rpm SHA-256: 65de4811ad1689fcdd869855eed42677e8626bc31ab8c6307edd8f68ae385c88
libexif-0.5.12-5.1.x86_64.rpm SHA-256: 65de4811ad1689fcdd869855eed42677e8626bc31ab8c6307edd8f68ae385c88
libexif-devel-0.5.12-5.1.x86_64.rpm SHA-256: aca8deb033de863028438f478f03f1e784aa77aac189ebf6340c4f0c54fd9697
libexif-devel-0.5.12-5.1.x86_64.rpm SHA-256: aca8deb033de863028438f478f03f1e784aa77aac189ebf6340c4f0c54fd9697
ia64
libexif-0.5.12-5.1.i386.rpm SHA-256: 44bd2a4d9622d9fcd1973fff867b3eed0f667277e05a12a0e50fcc7e03241bf2
libexif-0.5.12-5.1.i386.rpm SHA-256: 44bd2a4d9622d9fcd1973fff867b3eed0f667277e05a12a0e50fcc7e03241bf2
libexif-0.5.12-5.1.ia64.rpm SHA-256: fbb4af8675dd6be60b368a32f6d96f03d9db5e6ea89d0319643180d451cf71a9
libexif-0.5.12-5.1.ia64.rpm SHA-256: fbb4af8675dd6be60b368a32f6d96f03d9db5e6ea89d0319643180d451cf71a9
libexif-devel-0.5.12-5.1.ia64.rpm SHA-256: 3d032f8fd418d370aae3d9484c21e9566bb113a4f61f225c135734aeee5a85a6
libexif-devel-0.5.12-5.1.ia64.rpm SHA-256: 3d032f8fd418d370aae3d9484c21e9566bb113a4f61f225c135734aeee5a85a6
i386
libexif-0.5.12-5.1.i386.rpm SHA-256: 44bd2a4d9622d9fcd1973fff867b3eed0f667277e05a12a0e50fcc7e03241bf2
libexif-0.5.12-5.1.i386.rpm SHA-256: 44bd2a4d9622d9fcd1973fff867b3eed0f667277e05a12a0e50fcc7e03241bf2
libexif-devel-0.5.12-5.1.i386.rpm SHA-256: 982e7269d2d2aee27d706bebc59fb71082571892d810bec52a2a4d7101cd3fdc
libexif-devel-0.5.12-5.1.i386.rpm SHA-256: 982e7269d2d2aee27d706bebc59fb71082571892d810bec52a2a4d7101cd3fdc

Red Hat Enterprise Linux Workstation 4

SRPM
libexif-0.5.12-5.1.src.rpm SHA-256: 9144ddf5b4e5e69ca1d0e0cbfb6ad79b832a7322b8e05f22268e78f70b378425
x86_64
libexif-0.5.12-5.1.i386.rpm SHA-256: 44bd2a4d9622d9fcd1973fff867b3eed0f667277e05a12a0e50fcc7e03241bf2
libexif-0.5.12-5.1.x86_64.rpm SHA-256: 65de4811ad1689fcdd869855eed42677e8626bc31ab8c6307edd8f68ae385c88
libexif-devel-0.5.12-5.1.x86_64.rpm SHA-256: aca8deb033de863028438f478f03f1e784aa77aac189ebf6340c4f0c54fd9697
ia64
libexif-0.5.12-5.1.i386.rpm SHA-256: 44bd2a4d9622d9fcd1973fff867b3eed0f667277e05a12a0e50fcc7e03241bf2
libexif-0.5.12-5.1.ia64.rpm SHA-256: fbb4af8675dd6be60b368a32f6d96f03d9db5e6ea89d0319643180d451cf71a9
libexif-devel-0.5.12-5.1.ia64.rpm SHA-256: 3d032f8fd418d370aae3d9484c21e9566bb113a4f61f225c135734aeee5a85a6
i386
libexif-0.5.12-5.1.i386.rpm SHA-256: 44bd2a4d9622d9fcd1973fff867b3eed0f667277e05a12a0e50fcc7e03241bf2
libexif-devel-0.5.12-5.1.i386.rpm SHA-256: 982e7269d2d2aee27d706bebc59fb71082571892d810bec52a2a4d7101cd3fdc

Red Hat Enterprise Linux Desktop 4

SRPM
libexif-0.5.12-5.1.src.rpm SHA-256: 9144ddf5b4e5e69ca1d0e0cbfb6ad79b832a7322b8e05f22268e78f70b378425
x86_64
libexif-0.5.12-5.1.i386.rpm SHA-256: 44bd2a4d9622d9fcd1973fff867b3eed0f667277e05a12a0e50fcc7e03241bf2
libexif-0.5.12-5.1.x86_64.rpm SHA-256: 65de4811ad1689fcdd869855eed42677e8626bc31ab8c6307edd8f68ae385c88
libexif-devel-0.5.12-5.1.x86_64.rpm SHA-256: aca8deb033de863028438f478f03f1e784aa77aac189ebf6340c4f0c54fd9697
i386
libexif-0.5.12-5.1.i386.rpm SHA-256: 44bd2a4d9622d9fcd1973fff867b3eed0f667277e05a12a0e50fcc7e03241bf2
libexif-devel-0.5.12-5.1.i386.rpm SHA-256: 982e7269d2d2aee27d706bebc59fb71082571892d810bec52a2a4d7101cd3fdc

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
libexif-0.5.12-5.1.src.rpm SHA-256: 9144ddf5b4e5e69ca1d0e0cbfb6ad79b832a7322b8e05f22268e78f70b378425
s390x
libexif-0.5.12-5.1.s390.rpm SHA-256: 0cb683bfaef7dfce433f441b62b04e18230543853463b5c05cdb5aaa4851f1ec
libexif-0.5.12-5.1.s390x.rpm SHA-256: bb0e79d09079f1ac827d94fa4d1b3f38f2f5bba410f92544751063441f1d7dc8
libexif-devel-0.5.12-5.1.s390x.rpm SHA-256: 40cc5bd197b281609da77b68d0d76c5262e9a8477130755cfc39ad196cfe3395
s390
libexif-0.5.12-5.1.s390.rpm SHA-256: 0cb683bfaef7dfce433f441b62b04e18230543853463b5c05cdb5aaa4851f1ec
libexif-devel-0.5.12-5.1.s390.rpm SHA-256: adaf91688d7d309789894de3c45ac337f4bdacf51577896ba0fda587220f2da0

Red Hat Enterprise Linux for Power, big endian 4

SRPM
libexif-0.5.12-5.1.src.rpm SHA-256: 9144ddf5b4e5e69ca1d0e0cbfb6ad79b832a7322b8e05f22268e78f70b378425
ppc
libexif-0.5.12-5.1.ppc.rpm SHA-256: a809de0e5de6eb603b972789d69caeeb3ee0b11b50852d297dcd1408c6ebee52
libexif-0.5.12-5.1.ppc64.rpm SHA-256: 99303f0773989493904a29823ef55a079cb12fd06edf55b2c5ac032b8de423ac
libexif-devel-0.5.12-5.1.ppc.rpm SHA-256: 21bdb338e311a800486d80281cfcb6448d28b65c97a37e7b7b641a21d731f6d3

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.