Lucene search

K
osvGoogleOSV:ALSA-2021:1758
HistoryMay 18, 2021 - 6:01 a.m.

Low: exiv2 security, bug fix, and enhancement update

2021-05-1806:01:36
Google
osv.dev
11
exiv2
security fix
software enhancement
image metadata
cve-2019-17402
almalinux

AI Score

6.7

Confidence

High

EPSS

0.002

Percentile

61.4%

The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments.

The following packages have been upgraded to a later upstream version: exiv2 (0.27.3). (BZ#1880984)

Security Fix(es):

  • exiv2: out-of-bounds read in CiffDirectory::readDirectory due to lack of size check (CVE-2019-17402)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.