{"id":"SUSE-SU-2020:1534-1","summary":"Security update for libexif","details":"This update for libexif fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2016-6328: Fixed an integer overflow in parsing MNOTE entry data of the input file (bsc#1055857).\n- CVE-2017-7544: Fixed an out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c (bsc#1059893).\n- CVE-2018-20030: Fixed a denial of service by endless recursion (bsc#1120943).\n- CVE-2019-9278: Fixed an integer overflow (bsc#1160770).\n- CVE-2020-0093: Fixed an out-of-bounds read in exif_data_save_data_entry (bsc#1171847).\n- CVE-2020-12767: Fixed a divide-by-zero error in exif_entry_get_value (bsc#1171475).\n- CVE-2020-13112: Fixed a time consumption DoS when parsing canon array markers (bsc#1172121).\n- CVE-2020-13113: Fixed a potential use of uninitialized memory (bsc#1172105).\n- CVE-2020-13114: Fixed various buffer overread fixes due to integer overflows in maker notes (bsc#1172116).\n\nNon-security issues fixed:\n\n- libexif was updated to version 0.6.22:\n  * New translations: ms\n  * Updated translations for most languages\n  * Some useful EXIF 2.3 tag added:\n    * EXIF_TAG_GAMMA\n    * EXIF_TAG_COMPOSITE_IMAGE\n    * EXIF_TAG_SOURCE_IMAGE_NUMBER_OF_COMPOSITE_IMAGE\n    * EXIF_TAG_SOURCE_EXPOSURE_TIMES_OF_COMPOSITE_IMAGE\n    * EXIF_TAG_GPS_H_POSITIONING_ERROR\n    * EXIF_TAG_CAMERA_OWNER_NAME\n    * EXIF_TAG_BODY_SERIAL_NUMBER\n    * EXIF_TAG_LENS_SPECIFICATION\n    * EXIF_TAG_LENS_MAKE\n    * EXIF_TAG_LENS_MODEL\n    * EXIF_TAG_LENS_SERIAL_NUMBER\n","modified":"2026-03-11T07:12:46.705703Z","published":"2020-06-04T08:35:43Z","related":["CVE-2016-6328","CVE-2017-7544","CVE-2018-20030","CVE-2019-9278","CVE-2020-0093","CVE-2020-12767","CVE-2020-13112","CVE-2020-13113","CVE-2020-13114"],"upstream":["CVE-2016-6328","CVE-2017-7544","CVE-2018-20030","CVE-2019-9278","CVE-2020-0093","CVE-2020-12767","CVE-2020-13112","CVE-2020-13113","CVE-2020-13114"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201534-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1055857"},{"type":"REPORT","url":"https://bugzilla.suse.com/1059893"},{"type":"REPORT","url":"https://bugzilla.suse.com/1120943"},{"type":"REPORT","url":"https://bugzilla.suse.com/1160770"},{"type":"REPORT","url":"https://bugzilla.suse.com/1171475"},{"type":"REPORT","url":"https://bugzilla.suse.com/1171847"},{"type":"REPORT","url":"https://bugzilla.suse.com/1172105"},{"type":"REPORT","url":"https://bugzilla.suse.com/1172116"},{"type":"REPORT","url":"https://bugzilla.suse.com/1172121"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-6328"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-7544"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-20030"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-9278"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-0093"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-12767"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-13112"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-13113"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-13114"}],"affected":[{"package":{"name":"libexif","ecosystem":"SUSE:HPE Helion OpenStack 8","purl":"pkg:rpm/suse/libexif&distro=HPE%20Helion%20OpenStack%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-8.9.1"}]}],"ecosystem_specific":{"binaries":[{"libexif12-32bit":"0.6.22-8.9.1","libexif12":"0.6.22-8.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:1534-1.json"}},{"package":{"name":"libexif","ecosystem":"SUSE:OpenStack Cloud 7","purl":"pkg:rpm/suse/libexif&distro=SUSE%20OpenStack%20Cloud%207"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-8.9.1"}]}],"ecosystem_specific":{"binaries":[{"libexif12-32bit":"0.6.22-8.9.1","libexif12":"0.6.22-8.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:1534-1.json"}},{"package":{"name":"libexif","ecosystem":"SUSE:OpenStack Cloud 8","purl":"pkg:rpm/suse/libexif&distro=SUSE%20OpenStack%20Cloud%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-8.9.1"}]}],"ecosystem_specific":{"binaries":[{"libexif12-32bit":"0.6.22-8.9.1","libexif12":"0.6.22-8.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:1534-1.json"}},{"package":{"name":"libexif","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","purl":"pkg:rpm/suse/libexif&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-8.9.1"}]}],"ecosystem_specific":{"binaries":[{"libexif12-32bit":"0.6.22-8.9.1","libexif12":"0.6.22-8.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:1534-1.json"}},{"package":{"name":"libexif","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","purl":"pkg:rpm/suse/libexif&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-8.9.1"}]}],"ecosystem_specific":{"binaries":[{"libexif12-32bit":"0.6.22-8.9.1","libexif12":"0.6.22-8.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:1534-1.json"}},{"package":{"name":"libexif","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","purl":"pkg:rpm/suse/libexif&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-8.9.1"}]}],"ecosystem_specific":{"binaries":[{"libexif12-32bit":"0.6.22-8.9.1","libexif12":"0.6.22-8.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:1534-1.json"}},{"package":{"name":"libexif","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","purl":"pkg:rpm/suse/libexif&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-8.9.1"}]}],"ecosystem_specific":{"binaries":[{"libexif12":"0.6.22-8.9.1","libexif12-32bit":"0.6.22-8.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:1534-1.json"}},{"package":{"name":"libexif","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","purl":"pkg:rpm/suse/libexif&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-8.9.1"}]}],"ecosystem_specific":{"binaries":[{"libexif-devel":"0.6.22-8.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:1534-1.json"}},{"package":{"name":"libexif","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","purl":"pkg:rpm/suse/libexif&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-8.9.1"}]}],"ecosystem_specific":{"binaries":[{"libexif-devel":"0.6.22-8.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:1534-1.json"}},{"package":{"name":"libexif","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","purl":"pkg:rpm/suse/libexif&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-8.9.1"}]}],"ecosystem_specific":{"binaries":[{"libexif12-32bit":"0.6.22-8.9.1","libexif12":"0.6.22-8.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:1534-1.json"}},{"package":{"name":"libexif","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","purl":"pkg:rpm/suse/libexif&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-8.9.1"}]}],"ecosystem_specific":{"binaries":[{"libexif12-32bit":"0.6.22-8.9.1","libexif12":"0.6.22-8.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:1534-1.json"}},{"package":{"name":"libexif","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","purl":"pkg:rpm/suse/libexif&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-8.9.1"}]}],"ecosystem_specific":{"binaries":[{"libexif12-32bit":"0.6.22-8.9.1","libexif12":"0.6.22-8.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:1534-1.json"}},{"package":{"name":"libexif","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","purl":"pkg:rpm/suse/libexif&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-8.9.1"}]}],"ecosystem_specific":{"binaries":[{"libexif12":"0.6.22-8.9.1","libexif12-32bit":"0.6.22-8.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:1534-1.json"}},{"package":{"name":"libexif","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","purl":"pkg:rpm/suse/libexif&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-8.9.1"}]}],"ecosystem_specific":{"binaries":[{"libexif12-32bit":"0.6.22-8.9.1","libexif12":"0.6.22-8.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:1534-1.json"}},{"package":{"name":"libexif","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","purl":"pkg:rpm/suse/libexif&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-8.9.1"}]}],"ecosystem_specific":{"binaries":[{"libexif12-32bit":"0.6.22-8.9.1","libexif12":"0.6.22-8.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:1534-1.json"}},{"package":{"name":"libexif","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","purl":"pkg:rpm/suse/libexif&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-8.9.1"}]}],"ecosystem_specific":{"binaries":[{"libexif12-32bit":"0.6.22-8.9.1","libexif12":"0.6.22-8.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:1534-1.json"}},{"package":{"name":"libexif","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","purl":"pkg:rpm/suse/libexif&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-8.9.1"}]}],"ecosystem_specific":{"binaries":[{"libexif12-32bit":"0.6.22-8.9.1","libexif12":"0.6.22-8.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:1534-1.json"}},{"package":{"name":"libexif","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","purl":"pkg:rpm/suse/libexif&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-8.9.1"}]}],"ecosystem_specific":{"binaries":[{"libexif12-32bit":"0.6.22-8.9.1","libexif12":"0.6.22-8.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:1534-1.json"}},{"package":{"name":"libexif","ecosystem":"SUSE:Enterprise Storage 5","purl":"pkg:rpm/suse/libexif&distro=SUSE%20Enterprise%20Storage%205"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-8.9.1"}]}],"ecosystem_specific":{"binaries":[{"libexif12-32bit":"0.6.22-8.9.1","libexif12":"0.6.22-8.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:1534-1.json"}}],"schema_version":"1.7.5"}