OESA-2021-1352

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1352
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2021-1352.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2021-1352
Upstream
Published
2021-09-30T11:03:12Z
Modified
2025-08-12T05:05:06.468989Z
Summary
libexif security update
Details

Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows you to parse an EXIF file and read the data from those tags.

Security Fix(es):

An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This is different from CVE-2020-0093.(CVE-2020-13112)

Database specific 
{
    "severity": "Critical"
}
References

Affected packages

openEuler:20.03-LTS-SP1 / libexif

Package

Name
libexif
Purl
pkg:rpm/openEuler/libexif&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.6.21-23.oe1

Ecosystem specific 

{
    "x86_64": [
        "libexif-debugsource-0.6.21-23.oe1.x86_64.rpm",
        "libexif-devel-0.6.21-23.oe1.x86_64.rpm",
        "libexif-debuginfo-0.6.21-23.oe1.x86_64.rpm",
        "libexif-0.6.21-23.oe1.x86_64.rpm"
    ],
    "src": [
        "libexif-0.6.21-23.oe1.src.rpm"
    ],
    "aarch64": [
        "libexif-debugsource-0.6.21-23.oe1.aarch64.rpm",
        "libexif-0.6.21-23.oe1.aarch64.rpm",
        "libexif-debuginfo-0.6.21-23.oe1.aarch64.rpm",
        "libexif-devel-0.6.21-23.oe1.aarch64.rpm"
    ],
    "noarch": [
        "libexif-help-0.6.21-23.oe1.noarch.rpm"
    ]
}

openEuler:20.03-LTS-SP2 / libexif

Package

Name
libexif
Purl
pkg:rpm/openEuler/libexif&distro=openEuler-20.03-LTS-SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.6.21-23.oe1

Ecosystem specific 

{
    "x86_64": [
        "libexif-debugsource-0.6.21-23.oe1.x86_64.rpm",
        "libexif-debuginfo-0.6.21-23.oe1.x86_64.rpm",
        "libexif-0.6.21-23.oe1.x86_64.rpm",
        "libexif-devel-0.6.21-23.oe1.x86_64.rpm"
    ],
    "src": [
        "libexif-0.6.21-23.oe1.src.rpm"
    ],
    "aarch64": [
        "libexif-debuginfo-0.6.21-23.oe1.aarch64.rpm",
        "libexif-debugsource-0.6.21-23.oe1.aarch64.rpm",
        "libexif-0.6.21-23.oe1.aarch64.rpm",
        "libexif-devel-0.6.21-23.oe1.aarch64.rpm"
    ],
    "noarch": [
        "libexif-help-0.6.21-23.oe1.noarch.rpm"
    ]
}