Red Hat Security AdvisoryRHSA-2020:4030
exiv2 security update
Released 2020-09-29 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) exiv2-0.27.0-3.el7_8, exiv2-libs-0.27.0-3.el7_8
- Red Hat Enterprise Linux Client Optional (v. 7) exiv2-devel-0.27.0-3.el7_8, exiv2-doc-0.27.0-3.el7_8
- Red Hat Enterprise Linux ComputeNode (v. 7) exiv2-0.27.0-3.el7_8, exiv2-libs-0.27.0-3.el7_8
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) exiv2-devel-0.27.0-3.el7_8, exiv2-doc-0.27.0-3.el7_8
- Red Hat Enterprise Linux Server (v. 7) exiv2-0.27.0-3.el7_8, exiv2-libs-0.27.0-3.el7_8, exiv2-libs-0.27.0-3.el7_8.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) exiv2-devel-0.27.0-3.el7_8, exiv2-devel-0.27.0-3.el7_8.ppc, exiv2-doc-0.27.0-3.el7_8
- Red Hat Enterprise Linux Workstation (v. 7) exiv2-0.27.0-3.el7_8, exiv2-libs-0.27.0-3.el7_8
- Red Hat Enterprise Linux Workstation Optional (v. 7) exiv2-devel-0.27.0-3.el7_8, exiv2-doc-0.27.0-3.el7_8
Fixes 1 record
Priority LOW 33
Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimage_int.cpp, because there is no validation of the relationship of t…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01851 · Published 2019-10-09 · Partial fix CWE-120
