Lucene search
GoogleOSV:RLSA-2021:1758HistoryMay 18, 2021 - 6:01 a.m.
Low: exiv2 security, bug fix, and enhancement update
2021-05-1806:01:36
Google
osv.dev
14
exiv2
security fix
upgrade
image metadata
The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments.
The following packages have been upgraded to a later upstream version: exiv2 (0.27.3). (BZ#1880984)
Security Fix(es):
- exiv2: out-of-bounds read in CiffDirectory::readDirectory due to lack of size check (CVE-2019-17402)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.4 Release Notes linked from the References section.
Related
openvas
openvas
Huawei EulerOS: Security Advisory for exiv2 (EulerOS-SA-2021-1470)
2021-03-05 00:00:00
Ubuntu: Security Advisory (USN-4159-1)
2019-10-22 00:00:00
Debian: Security Advisory (DLA-2019-1)
2019-12-03 00:00:00
redhatcve
redhatcve
CVE-2019-17402
2019-11-18 18:07:24
cbl_mariner
cbl_mariner
CVE-2019-17402 affecting package exiv2 for versions less than 0.27.5-1
2022-06-25 20:53:09
redhat
redhat
(RHSA-2021:1758) Low: exiv2 security, bug fix, and enhancement update
2021-05-18 06:01:36
(RHSA-2020:4030) Low: exiv2 security update
2020-09-29 07:52:54
rocky
rocky
exiv2 security, bug fix, and enhancement update
2021-05-18 06:01:36
cve
cve
CVE-2019-17402
2019-10-09 19:15:14
nessus
nessus
Rocky Linux 8 : exiv2 (RLSA-2021:1758)
2023-11-06 00:00:00
AlmaLinux 8 : exiv2 (ALSA-2021:1758)
2022-02-09 00:00:00
EulerOS 2.0 SP5 : exiv2 (EulerOS-SA-2021-1674)
2021-03-24 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-11-28 02:48:07
ubuntu
ubuntu
Exiv2 vulnerability
2019-10-21 00:00:00
almalinux
almalinux
Low: exiv2 security, bug fix, and enhancement update
2021-05-18 06:01:36
debiancve
debiancve
CVE-2019-17402
2019-10-09 19:15:14
centos
centos
exiv2 security update
2020-10-20 17:57:49
osv
osv
CVE-2019-17402
2019-10-09 19:15:14
exiv2 - security update
2019-12-02 00:00:00
Low: exiv2 security, bug fix, and enhancement update
2021-05-18 06:01:36
alpinelinux
alpinelinux
CVE-2019-17402
2019-10-09 19:15:14
ubuntucve
ubuntucve
CVE-2019-17402
2019-10-09 00:00:00
nvd
nvd
CVE-2019-17402
2019-10-09 19:15:14
oraclelinux
oraclelinux
exiv2 security update
2020-10-06 00:00:00
exiv2 security, bug fix, and enhancement update
2021-05-25 00:00:00
prion
prion
Input validation
2019-10-09 19:15:00
cvelist
cvelist
CVE-2019-17402
2019-10-09 00:00:00
debian
debian
[SECURITY] [DLA 2019-1] exiv2 security update
2019-12-02 23:05:00
[SECURITY] [DLA 3265-1] exiv2 security update
2023-01-10 17:02:40
amazon
amazon
Low: exiv2
2020-10-22 17:31:00
mageia
mageia
Updated exiv2 packages fix security vulnerabilities
2019-12-31 19:51:17