shield Security update for libexif

SUSE-SLE-SERVER-12-SP2-2018-136

This update for libexif fixes several issues. These security issues were fixed: - CVE-2016-6328: Fixed integer overflow in parsing MNOTE entry data of the input file (bsc#1055857) - CVE-2017-7544: Fixed out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or possibly information disclosure (bsc#1059893)

• Release Date
  Jan 24 2018
• References
  Bugzilla: 1059893, 1055857
  CVEs: CVE-2017-7544, CVE-2016-6328
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.2 aarch64

• Packages
  libexif
  An EXIF Tag Parsing Library for Digital Cameras

  0.6.21-8.3.1 lock src

  libexif12
  An EXIF Tag Parsing Library for Digital Cameras

  0.6.21-8.3.1 lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le

• Packages
  libexif
  An EXIF Tag Parsing Library for Digital Cameras

  0.6.21-8.3.1 lock src

  libexif12
  An EXIF Tag Parsing Library for Digital Cameras

  0.6.21-8.3.1 lock rpm

SUSE Linux Enterprise Server 12.2 s390x

• Packages
  libexif
  An EXIF Tag Parsing Library for Digital Cameras

  0.6.21-8.3.1 lock src

  libexif12
  An EXIF Tag Parsing Library for Digital Cameras

  0.6.21-8.3.1 lock rpm

  libexif12-32bit
  An EXIF Tag Parsing Library for Digital Cameras

  0.6.21-8.3.1 lock rpm

SUSE Linux Enterprise Server 12.2 x86_64

• Packages
  libexif
  An EXIF Tag Parsing Library for Digital Cameras

  0.6.21-8.3.1 lock src

  libexif12
  An EXIF Tag Parsing Library for Digital Cameras

  0.6.21-8.3.1 lock rpm

  libexif12-32bit
  An EXIF Tag Parsing Library for Digital Cameras

  0.6.21-8.3.1 lock rpm