ELSA-2020-4766

ELSA-2020-4766 - libexif security, bug fix, and enhancement update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2020-11-10

Description

[0.6.22-4]
- Add patch for CVE-2020-0181/CVE-2020-0198
- Resolves: #1847753
- Resolves: #1847761

[0.6.22-3]
- Also remove timezone from the .mo files
- Related: #1841320

[0.6.22-2]
- Remove timestamps from the .mo files to avoid multilib conflicts
- Related: #1841320

Related CVEs

CVE-2020-12767

CVE-2020-0182

CVE-2020-0198

CVE-2019-9278

CVE-2020-0181

CVE-2020-13113

CVE-2020-13114

CVE-2020-0093

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	libexif-0.6.22-4.el8.src.rpm	57f18b8d6b34bacc25a380c3ca37753e169d8228e64844f18a7ff576e66c42f0	-	ol8_aarch64_appstream
	libexif-0.6.22-4.el8.src.rpm	57f18b8d6b34bacc25a380c3ca37753e169d8228e64844f18a7ff576e66c42f0	-	ol8_aarch64_codeready_builder
	libexif-0.6.22-4.el8.aarch64.rpm	9b4d202d118c3c428a9858f1c794f1e64c400036ffa3524700a28fc47adf644a	-	ol8_aarch64_appstream
	libexif-devel-0.6.22-4.el8.aarch64.rpm	8b08b6f3481db1b97378616c880886b3fe6e72ecec0a285ad32465800bc00d74	-	ol8_aarch64_codeready_builder
Oracle Linux 8 (x86_64)	libexif-0.6.22-4.el8.src.rpm	57f18b8d6b34bacc25a380c3ca37753e169d8228e64844f18a7ff576e66c42f0	-	ol8_x86_64_appstream
	libexif-0.6.22-4.el8.src.rpm	57f18b8d6b34bacc25a380c3ca37753e169d8228e64844f18a7ff576e66c42f0	-	ol8_x86_64_codeready_builder
	libexif-0.6.22-4.el8.i686.rpm	f30b2e03a51d346f671c94b081687278fea0a68c47d709b5b6c6dc0e384938ba	-	ol8_x86_64_appstream
	libexif-0.6.22-4.el8.x86_64.rpm	35604ea0441b81e0ed8c6923d4fa56eab545b0b5814dbe691311b183ec942570	-	ol8_x86_64_appstream
	libexif-devel-0.6.22-4.el8.i686.rpm	086321b10ccc95752f6fbd5ec9e681fc9f7f7e3053357c17e39bfb9a44dc757f	-	ol8_x86_64_codeready_builder
	libexif-devel-0.6.22-4.el8.x86_64.rpm	56e8bf7a0912a70129905049d80e4254d480104c3fb80615e8f80664ad2258ef	-	ol8_x86_64_codeready_builder

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team