Skip to content
OpenAdvisories
Medium ELSA-2022-1842 1 CVE

Moderate: exiv2 security, bug fix, and enhancement update (Oracle Linux 8)

Published May 17, 2022 · Updated May 17, 2022

Ecosystem: Oracle Linux

Summary

[0.27.5-2]
- Remove RPATH
Resolves: bz#2018422

[0.27.5-1]
- Exiv2 0.27.5
Resolves: bz#2018422

Fix stack exhaustion issue in the printIFDStructure function leading to DoS
Resolves: bz#2003673

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 8 exiv2 0:0.27.5-2.el8
Oracle Linux · 8 exiv2-devel 0:0.27.5-2.el8
Oracle Linux · 8 exiv2-doc 0:0.27.5-2.el8
Oracle Linux · 8 exiv2-libs 0:0.27.5-2.el8

Vulnerabilities 1

  • Unscored —
    CVE-2020-18898

    A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause a denial of s…

    exiv2 Debian