CVE-2024-39695 affecting package exiv2 for versions less than 0.28.3-1

CVE-2024-39695 affecting package exiv2 for versions less than 0.28.3-1. An upgraded version of the package is available that resolves this issue...

libexiv2 0.28.x < 0.28.3 (GHSA-38rv-8x93-pvrh)

The version of libexiv2 installed on the remote host is prior to 0.28.3. It is, therefore, affected by a vulnerability as referenced in the GHSA-38rv-8x93-pvrh advisory. - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An...

AZL-43237 CVE-2024-39695 affecting package exiv2 0.28.0-1

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 version v0.28.2. The vulnerability is in the parser for the ASF video format, which was a new feature in v0.28.0. The out-of-bounds...