Lucene search

K
mageiaGentoo FoundationMGASA-2020-0196
HistoryMay 05, 2020 - 3:20 p.m.

Updated exiv2 packages fix security vulnerability

2020-05-0515:20:37
Gentoo Foundation
advisories.mageia.org
10

0.001 Low

EPSS

Percentile

46.3%

The updated packages fix a security vulnerability: A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (large heap allocation followed by a very long running loop) via a crafted WEBP image file. (CVE-2019-13111)

OSVersionArchitecturePackageVersionFilename
Mageia7noarchexiv2< 0.27.1-3.4exiv2-0.27.1-3.4.mga7