Lucene search
SuseSUSE-SU-2022:3892-1HistoryNov 07, 2022 - 12:00 a.m.
Security update for exiv2 (moderate)
2022-11-0700:00:00
lists.opensuse.org
24
exiv2
update
vulnerabilities
integer overflow
webpimage
out-of-bounds read
dos
loop counter bug
suse
opensuse leap 15.3
suse linux enterprise module
EPSS
0.002
Percentile
54.3%
An update that fixes three vulnerabilities is now available.
Description:
This update for exiv2 fixes the following issues:
- CVE-2019-13111: Fixed nteger overflow in WebPImage:decodeChunks
(bsc#1142679).
- CVE-2021-29463: Fixed out-of-bounds read (bsc#1185913).
- CVE-2021-34334: Fixed a DoS due to integer overflow in loop counter
bug (bsc#1189338).
Patch Instructions:
To install this SUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.
Alternatively you can run the command listed for your product:
-
openSUSE Leap 15.3:
zypper in -t patch openSUSE-SLE-15.3-2022-3892=1
-
SUSE Linux Enterprise Module for Desktop Applications 15-SP3:
zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-3892=1
Related
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:3892-1)
2022-11-08 00:00:00
Mageia: Security Advisory (MGASA-2020-0196)
2022-01-28 00:00:00
Fedora: Security Advisory for mingw-exiv2 (FEDORA-2021-0b27f220bd)
2021-08-02 00:00:00
nessus
nessus
SUSE SLED15 / SLES15 Security Update : exiv2 (SUSE-SU-2022:3892-1)
2022-11-08 00:00:00
Amazon Linux 2 : exiv2 (ALAS-2023-2215)
2023-08-23 00:00:00
osv
osv
CVE-2021-29463
2021-04-30 19:15:07
CVE-2021-34334
2021-08-09 18:15:07
exiv2-0.27.5-6.1 on GA media
2024-06-15 00:00:00
alpinelinux
alpinelinux
prion
prion
Out-of-bounds
2021-04-30 19:15:00
Integer overflow
2019-06-30 23:15:00
Code injection
2021-08-09 18:15:00
veracode
veracode
Denial Of Service (DoS)
2020-04-29 02:39:18
Denial Of Service (DoS)
2021-06-01 09:08:36
debiancve
debiancve
redhatcve
redhatcve
ubuntucve
ubuntucve
cve
cve
mageia
mageia
Updated exiv2 packages fix security vulnerability
2020-05-05 15:20:37
Updated exiv2 packages fix security vulnerabilities
2021-06-08 19:46:03
Updated exiv2 packages fix security vulnerabilities
2021-09-04 20:01:38
nvd
nvd
cvelist
cvelist
CVE-2019-13111
2019-06-30 22:20:54
CVE-2021-34334 Denial of service due to integer overflow in loop counter
2021-08-09 00:00:00
CVE-2021-29463 Out-of-bounds read in Exiv2::WebPImage::doWriteMetadata
2021-04-30 00:00:00
cnvd
cnvd
Exiv2 Infinite Loop Vulnerability (CNVD-2021-61437)
2021-08-10 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-34334 affecting package exiv2 for versions less than 0.27.5-1
2022-06-25 20:53:09
CVE-2021-29463 affecting package exiv2 for versions less than 0.27.5-1
2022-06-25 20:53:09
fedora
fedora
[SECURITY] Fedora 34 Update: mingw-exiv2-0.27.4-2.fc34
2021-08-02 01:05:30
[SECURITY] Fedora 33 Update: mingw-exiv2-0.27.4-2.fc33
2021-08-02 01:07:08
[SECURITY] Fedora 30 Update: exiv2-0.27.2-1.fc30
2019-08-09 01:03:49
amazon
amazon
Medium: exiv2
2023-08-17 11:58:00
suse
suse
Security update for exiv2 (important)
2022-11-07 00:00:00
ubuntu
ubuntu
Exiv2 vulnerabilities
2021-05-25 00:00:00
Exiv2 vulnerabilities
2021-08-17 00:00:00
archlinux
archlinux
[ASA-202106-54] exiv2: multiple issues
2021-06-22 00:00:00
freebsd
freebsd
Exiv2 -- Multiple vulnerabilities
2021-04-25 00:00:00
gentoo
gentoo
Exiv2: Multiple Vulnerabilities
2023-12-22 00:00:00
almalinux
almalinux
Moderate: exiv2 security, bug fix, and enhancement update
2021-11-09 08:31:22
Moderate: exiv2 security, bug fix, and enhancement update
2020-04-28 08:52:31
rocky
rocky
exiv2 security, bug fix, and enhancement update
2021-11-09 08:31:22
exiv2 security, bug fix, and enhancement update
2020-04-28 08:52:31
redhat
redhat
(RHSA-2021:4173) Moderate: exiv2 security, bug fix, and enhancement update
2021-11-09 08:31:22
(RHSA-2020:1577) Moderate: exiv2 security, bug fix, and enhancement update
2020-04-28 08:52:31
debian
debian
[SECURITY] [DLA 3265-1] exiv2 security update
2023-01-10 17:02:40
oraclelinux
oraclelinux
exiv2 security, bug fix, and enhancement update
2020-05-05 00:00:00