摘要:
libexif security update
安全等级: Critical
公告ID: KylinSec-SA-2024-1061
发布日期: 2024年10月31日
关联CVE: CVE-2020-0452
Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows you to parse an EXIF file and read the data from those tags.
Security Fix(es):
In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-159625731(CVE-2020-0452)
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|---|---|---|
| CVE-2020-0452 | KY3.4-4A | libexif | Fixed |
| CVE-2020-0452 | KY3.4-5A | libexif | Fixed |
| CVE-2020-0452 | KY3.5.1 | libexif | Fixed |
| CVE-2020-0452 | KY3.5.2 | libexif | Fixed |
| 软件名称 | 架构 | 版本号 |
|---|---|---|
| libexif-help | noarch | 0.6.22-5.kb2.ky3_5 |
| libexif-devel | x86_64 | 0.6.22-5.kb2.ky3_5 |
| libexif | x86_64 | 0.6.22-5.kb2.ky3_5 |
| libexif-devel | aarch64 | 0.6.22-5.kb2.ky3_5 |
| libexif | aarch64 | 0.6.22-5.kb2.ky3_5 |
| 软件名称 | 架构 | 版本号 |
|---|---|---|
| libexif-help | noarch | 0.6.21-26.kb1.ky3_4 |
| libexif-devel | x86_64 | 0.6.21-26.kb1.ky3_4 |
| libexif | x86_64 | 0.6.21-26.kb1.ky3_4 |
| libexif-devel | aarch64 | 0.6.21-26.kb1.ky3_4 |
| libexif | aarch64 | 0.6.21-26.kb1.ky3_4 |
| 软件名称 | 架构 | 版本号 |
|---|---|---|
| libexif-help | noarch | 0.6.21-26.kb1.ky3_4 |
| libexif-devel | x86_64 | 0.6.21-26.kb1.ky3_4 |
| libexif | x86_64 | 0.6.21-26.kb1.ky3_4 |
| libexif-devel | aarch64 | 0.6.21-26.kb1.ky3_4 |
| libexif | aarch64 | 0.6.21-26.kb1.ky3_4 |
| 软件名称 | 架构 | 版本号 |
|---|---|---|
| libexif-help | noarch | 0.6.22-5.ky3_5 |
| libexif | x86_64 | 0.6.22-5.ky3_5 |
| libexif-devel | x86_64 | 0.6.22-5.ky3_5 |
| libexif | aarch64 | 0.6.22-5.ky3_5 |
| libexif-devel | aarch64 | 0.6.22-5.ky3_5 |
方法一：下载安装包进行升级安装
1、通过下载链接下载需要升级的升级包保存，如 xxx.rpm
2、通过rpm命令升级，如 rpm -Uvh xxx.rpm
方法二：通过软件源进行升级安装
1、保持能够连接上互联网
2、通过yum命令升级指定的包，如 yum install 包名
