Skip to content
OpenAdvisories
High ELSA-2021-3158 1 CVE

Important: exiv2 security update (Oracle Linux 7)

Published Aug 17, 2021 · Updated Aug 17, 2021

Ecosystem: Oracle Linux

Summary

[0.27.0-4]
- Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
Resolves: bz#1990352

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 7 exiv2 0:0.27.0-4.el7_8
Oracle Linux · 7 exiv2-devel 0:0.27.0-4.el7_8
Oracle Linux · 7 exiv2-doc 0:0.27.0-4.el7_8
Oracle Linux · 7 exiv2-libs 0:0.27.0-4.el7_8

Vulnerabilities 1

  • Unscored —
    CVE-2021-31291 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29457. Reason: This candidate is a duplicate of CVE-2021-29457. …

    exiv2 exiv2 Ubuntu Alpine