Issued:
2007-12-19
Updated:
2007-12-19

RHSA-2007:1166 - Security Advisory

Synopsis

Moderate: libexif security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated libexif packages that fix a security issue are now available for
Red Hat Enterprise Linux 4.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description

The libexif packages contain the Exif library. Exif is an image file format
specification that enables metadata tags to be added to existing JPEG, TIFF
and RIFF files. The Exif library makes it possible to parse an Exif file
and read this metadata.

An integer overflow flaw was found in the way libexif parses Exif image
tags. If a victim opens a carefully crafted Exif image file, it could cause
the application linked against libexif to execute arbitrary code, or crash.
(CVE-2007-6352)

Users of libexif are advised to upgrade to these updated packages, which
contain a backported patch to resolve this issue.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.6 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.6 ia64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.6 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.6 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.6 s390
  • Red Hat Enterprise Linux for Power, big endian 4 ppc
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.6 ppc

Fixes

Red Hat Enterprise Linux Server 4

SRPM
libexif-0.5.12-5.1.0.2.el4_6.1.src.rpm SHA-256: 9ae70dd0affe713f7c8d9e990a62739c3710581a134cc60031fc13a984afb2ca
x86_64
libexif-0.5.12-5.1.0.2.el4_6.1.i386.rpm SHA-256: 6fecc157037331052c94819191de576cfeb28ddd2c58001f80b31d39a819f43f
libexif-0.5.12-5.1.0.2.el4_6.1.i386.rpm SHA-256: 6fecc157037331052c94819191de576cfeb28ddd2c58001f80b31d39a819f43f
libexif-0.5.12-5.1.0.2.el4_6.1.x86_64.rpm SHA-256: fe6562a8c04e0d040497c06a59f37dd501d7916c85559624b8dbbe0ba989de58
libexif-0.5.12-5.1.0.2.el4_6.1.x86_64.rpm SHA-256: fe6562a8c04e0d040497c06a59f37dd501d7916c85559624b8dbbe0ba989de58
libexif-devel-0.5.12-5.1.0.2.el4_6.1.x86_64.rpm SHA-256: 291699ee8e4e27ea6af21ff75635dc3fb8b88e4cc88fd9e81805403553ec156f
libexif-devel-0.5.12-5.1.0.2.el4_6.1.x86_64.rpm SHA-256: 291699ee8e4e27ea6af21ff75635dc3fb8b88e4cc88fd9e81805403553ec156f
ia64
libexif-0.5.12-5.1.0.2.el4_6.1.i386.rpm SHA-256: 6fecc157037331052c94819191de576cfeb28ddd2c58001f80b31d39a819f43f
libexif-0.5.12-5.1.0.2.el4_6.1.i386.rpm SHA-256: 6fecc157037331052c94819191de576cfeb28ddd2c58001f80b31d39a819f43f
libexif-0.5.12-5.1.0.2.el4_6.1.ia64.rpm SHA-256: 3ff3ef8fb1104f7276f444b9f556343a0216b1bee015730f6d1fd4f354941e19
libexif-0.5.12-5.1.0.2.el4_6.1.ia64.rpm SHA-256: 3ff3ef8fb1104f7276f444b9f556343a0216b1bee015730f6d1fd4f354941e19
libexif-devel-0.5.12-5.1.0.2.el4_6.1.ia64.rpm SHA-256: 5e4aaf4c274e8073ba390a70131d85dbe86eb62c125d223803de773f6cc39c36
libexif-devel-0.5.12-5.1.0.2.el4_6.1.ia64.rpm SHA-256: 5e4aaf4c274e8073ba390a70131d85dbe86eb62c125d223803de773f6cc39c36
i386
libexif-0.5.12-5.1.0.2.el4_6.1.i386.rpm SHA-256: 6fecc157037331052c94819191de576cfeb28ddd2c58001f80b31d39a819f43f
libexif-0.5.12-5.1.0.2.el4_6.1.i386.rpm SHA-256: 6fecc157037331052c94819191de576cfeb28ddd2c58001f80b31d39a819f43f
libexif-devel-0.5.12-5.1.0.2.el4_6.1.i386.rpm SHA-256: de35918c6725f0b21e9e0ba33ba0d0a5f0f2d22e94283d01d26f2f2d97f41edf
libexif-devel-0.5.12-5.1.0.2.el4_6.1.i386.rpm SHA-256: de35918c6725f0b21e9e0ba33ba0d0a5f0f2d22e94283d01d26f2f2d97f41edf

Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.6

SRPM
libexif-0.5.12-5.1.0.2.el4_6.1.src.rpm SHA-256: 9ae70dd0affe713f7c8d9e990a62739c3710581a134cc60031fc13a984afb2ca
x86_64
libexif-0.5.12-5.1.0.2.el4_6.1.i386.rpm SHA-256: 6fecc157037331052c94819191de576cfeb28ddd2c58001f80b31d39a819f43f
libexif-0.5.12-5.1.0.2.el4_6.1.i386.rpm SHA-256: 6fecc157037331052c94819191de576cfeb28ddd2c58001f80b31d39a819f43f
libexif-0.5.12-5.1.0.2.el4_6.1.x86_64.rpm SHA-256: fe6562a8c04e0d040497c06a59f37dd501d7916c85559624b8dbbe0ba989de58
libexif-0.5.12-5.1.0.2.el4_6.1.x86_64.rpm SHA-256: fe6562a8c04e0d040497c06a59f37dd501d7916c85559624b8dbbe0ba989de58
libexif-devel-0.5.12-5.1.0.2.el4_6.1.x86_64.rpm SHA-256: 291699ee8e4e27ea6af21ff75635dc3fb8b88e4cc88fd9e81805403553ec156f
libexif-devel-0.5.12-5.1.0.2.el4_6.1.x86_64.rpm SHA-256: 291699ee8e4e27ea6af21ff75635dc3fb8b88e4cc88fd9e81805403553ec156f
ia64
libexif-0.5.12-5.1.0.2.el4_6.1.i386.rpm SHA-256: 6fecc157037331052c94819191de576cfeb28ddd2c58001f80b31d39a819f43f
libexif-0.5.12-5.1.0.2.el4_6.1.i386.rpm SHA-256: 6fecc157037331052c94819191de576cfeb28ddd2c58001f80b31d39a819f43f
libexif-0.5.12-5.1.0.2.el4_6.1.ia64.rpm SHA-256: 3ff3ef8fb1104f7276f444b9f556343a0216b1bee015730f6d1fd4f354941e19
libexif-0.5.12-5.1.0.2.el4_6.1.ia64.rpm SHA-256: 3ff3ef8fb1104f7276f444b9f556343a0216b1bee015730f6d1fd4f354941e19
libexif-devel-0.5.12-5.1.0.2.el4_6.1.ia64.rpm SHA-256: 5e4aaf4c274e8073ba390a70131d85dbe86eb62c125d223803de773f6cc39c36
libexif-devel-0.5.12-5.1.0.2.el4_6.1.ia64.rpm SHA-256: 5e4aaf4c274e8073ba390a70131d85dbe86eb62c125d223803de773f6cc39c36
i386
libexif-0.5.12-5.1.0.2.el4_6.1.i386.rpm SHA-256: 6fecc157037331052c94819191de576cfeb28ddd2c58001f80b31d39a819f43f
libexif-0.5.12-5.1.0.2.el4_6.1.i386.rpm SHA-256: 6fecc157037331052c94819191de576cfeb28ddd2c58001f80b31d39a819f43f
libexif-devel-0.5.12-5.1.0.2.el4_6.1.i386.rpm SHA-256: de35918c6725f0b21e9e0ba33ba0d0a5f0f2d22e94283d01d26f2f2d97f41edf
libexif-devel-0.5.12-5.1.0.2.el4_6.1.i386.rpm SHA-256: de35918c6725f0b21e9e0ba33ba0d0a5f0f2d22e94283d01d26f2f2d97f41edf

Red Hat Enterprise Linux Workstation 4

SRPM
libexif-0.5.12-5.1.0.2.el4_6.1.src.rpm SHA-256: 9ae70dd0affe713f7c8d9e990a62739c3710581a134cc60031fc13a984afb2ca
x86_64
libexif-0.5.12-5.1.0.2.el4_6.1.i386.rpm SHA-256: 6fecc157037331052c94819191de576cfeb28ddd2c58001f80b31d39a819f43f
libexif-0.5.12-5.1.0.2.el4_6.1.x86_64.rpm SHA-256: fe6562a8c04e0d040497c06a59f37dd501d7916c85559624b8dbbe0ba989de58
libexif-devel-0.5.12-5.1.0.2.el4_6.1.x86_64.rpm SHA-256: 291699ee8e4e27ea6af21ff75635dc3fb8b88e4cc88fd9e81805403553ec156f
ia64
libexif-0.5.12-5.1.0.2.el4_6.1.i386.rpm SHA-256: 6fecc157037331052c94819191de576cfeb28ddd2c58001f80b31d39a819f43f
libexif-0.5.12-5.1.0.2.el4_6.1.ia64.rpm SHA-256: 3ff3ef8fb1104f7276f444b9f556343a0216b1bee015730f6d1fd4f354941e19
libexif-devel-0.5.12-5.1.0.2.el4_6.1.ia64.rpm SHA-256: 5e4aaf4c274e8073ba390a70131d85dbe86eb62c125d223803de773f6cc39c36
i386
libexif-0.5.12-5.1.0.2.el4_6.1.i386.rpm SHA-256: 6fecc157037331052c94819191de576cfeb28ddd2c58001f80b31d39a819f43f
libexif-devel-0.5.12-5.1.0.2.el4_6.1.i386.rpm SHA-256: de35918c6725f0b21e9e0ba33ba0d0a5f0f2d22e94283d01d26f2f2d97f41edf

Red Hat Enterprise Linux Desktop 4

SRPM
libexif-0.5.12-5.1.0.2.el4_6.1.src.rpm SHA-256: 9ae70dd0affe713f7c8d9e990a62739c3710581a134cc60031fc13a984afb2ca
x86_64
libexif-0.5.12-5.1.0.2.el4_6.1.i386.rpm SHA-256: 6fecc157037331052c94819191de576cfeb28ddd2c58001f80b31d39a819f43f
libexif-0.5.12-5.1.0.2.el4_6.1.x86_64.rpm SHA-256: fe6562a8c04e0d040497c06a59f37dd501d7916c85559624b8dbbe0ba989de58
libexif-devel-0.5.12-5.1.0.2.el4_6.1.x86_64.rpm SHA-256: 291699ee8e4e27ea6af21ff75635dc3fb8b88e4cc88fd9e81805403553ec156f
i386
libexif-0.5.12-5.1.0.2.el4_6.1.i386.rpm SHA-256: 6fecc157037331052c94819191de576cfeb28ddd2c58001f80b31d39a819f43f
libexif-devel-0.5.12-5.1.0.2.el4_6.1.i386.rpm SHA-256: de35918c6725f0b21e9e0ba33ba0d0a5f0f2d22e94283d01d26f2f2d97f41edf

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
libexif-0.5.12-5.1.0.2.el4_6.1.src.rpm SHA-256: 9ae70dd0affe713f7c8d9e990a62739c3710581a134cc60031fc13a984afb2ca
s390x
libexif-0.5.12-5.1.0.2.el4_6.1.s390.rpm SHA-256: a1af557933e8b83968074d4dda347a7ba5120b913697143bdd93e8be1df626ce
libexif-0.5.12-5.1.0.2.el4_6.1.s390x.rpm SHA-256: 170b84851667176663f3147767bca160c9823530880f9ae923f06b652acb66e8
libexif-devel-0.5.12-5.1.0.2.el4_6.1.s390x.rpm SHA-256: 1817f86e43ff7628a600d8eb353ff482e4a114ad70dfdfc4808e662e6a376f39
s390
libexif-0.5.12-5.1.0.2.el4_6.1.s390.rpm SHA-256: a1af557933e8b83968074d4dda347a7ba5120b913697143bdd93e8be1df626ce
libexif-devel-0.5.12-5.1.0.2.el4_6.1.s390.rpm SHA-256: 28a9c49fa41524da4ff70ace42ae45cd8507762d2b8703c018103c7f62edf760

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.6

SRPM
libexif-0.5.12-5.1.0.2.el4_6.1.src.rpm SHA-256: 9ae70dd0affe713f7c8d9e990a62739c3710581a134cc60031fc13a984afb2ca
s390x
libexif-0.5.12-5.1.0.2.el4_6.1.s390.rpm SHA-256: a1af557933e8b83968074d4dda347a7ba5120b913697143bdd93e8be1df626ce
libexif-0.5.12-5.1.0.2.el4_6.1.s390x.rpm SHA-256: 170b84851667176663f3147767bca160c9823530880f9ae923f06b652acb66e8
libexif-devel-0.5.12-5.1.0.2.el4_6.1.s390x.rpm SHA-256: 1817f86e43ff7628a600d8eb353ff482e4a114ad70dfdfc4808e662e6a376f39
s390
libexif-0.5.12-5.1.0.2.el4_6.1.s390.rpm SHA-256: a1af557933e8b83968074d4dda347a7ba5120b913697143bdd93e8be1df626ce
libexif-devel-0.5.12-5.1.0.2.el4_6.1.s390.rpm SHA-256: 28a9c49fa41524da4ff70ace42ae45cd8507762d2b8703c018103c7f62edf760

Red Hat Enterprise Linux for Power, big endian 4

SRPM
libexif-0.5.12-5.1.0.2.el4_6.1.src.rpm SHA-256: 9ae70dd0affe713f7c8d9e990a62739c3710581a134cc60031fc13a984afb2ca
ppc
libexif-0.5.12-5.1.0.2.el4_6.1.ppc.rpm SHA-256: cc46ecda5bb2e1f828eda1fab56e25fa87dcc9259f3ff36912e1f4b06d102252
libexif-0.5.12-5.1.0.2.el4_6.1.ppc64.rpm SHA-256: 69899b9e444146cb6094415cd56acec9597656fa34f234fca0989736b60a7582
libexif-devel-0.5.12-5.1.0.2.el4_6.1.ppc.rpm SHA-256: aca13e3162a85c7f68bdee737f5afc9e8f46d6dd10eada904652eba067978b04

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.6

SRPM
libexif-0.5.12-5.1.0.2.el4_6.1.src.rpm SHA-256: 9ae70dd0affe713f7c8d9e990a62739c3710581a134cc60031fc13a984afb2ca
ppc
libexif-0.5.12-5.1.0.2.el4_6.1.ppc.rpm SHA-256: cc46ecda5bb2e1f828eda1fab56e25fa87dcc9259f3ff36912e1f4b06d102252
libexif-0.5.12-5.1.0.2.el4_6.1.ppc64.rpm SHA-256: 69899b9e444146cb6094415cd56acec9597656fa34f234fca0989736b60a7582
libexif-devel-0.5.12-5.1.0.2.el4_6.1.ppc.rpm SHA-256: aca13e3162a85c7f68bdee737f5afc9e8f46d6dd10eada904652eba067978b04

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.