FEDORA-2018-54c29139b3 — security update for exiv2

stable

exiv2-0.26-10.fc28

FEDORA-2018-54c29139b3 created by rdieter 5 years ago for Fedora 28

Security update for CVE-2017-17723, CVE-2017-17725, CVE-2018-5772

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-54c29139b3

This update has been submitted for testing by rdieter.

5 years ago

This update has been pushed to testing.

5 years ago

besser82 commented & provided feedback 5 years ago

karma

Works great! LGTM! =)

cserpentis commented & provided feedback 5 years ago

karma

works for me

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

5 years ago

evillagr commented & provided feedback 5 years ago

karma

no regretion

sassam commented & provided feedback 5 years ago

karma

Works for me.

pwalter commented & provided feedback 5 years ago

karma

Works

This update has been submitted for batched by rdieter.

5 years ago

This update has been submitted for stable by bodhi.

5 years ago

This update has been pushed to stable.

5 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

exiv2-0.26-10.fc28

Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

5 years ago

in testing

5 years ago

in stable

5 years ago

BZ#1536904 CVE-2018-5772 exiv2: Uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() can allow a remote attacker to cause a denial of service via a crafted tif file

BZ#1536905 CVE-2018-5772 exiv2: Uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() can allow a remote attacker to cause a denial of service via a crafted tif file [fedora-all]

BZ#1545232 CVE-2017-17725 exiv2: heap-based buffer over-read in Exiv2::getULong function in types.cpp

BZ#1545233 CVE-2017-17725 exiv2: heap-based buffer over-read in Exiv2::getULong function in types.cpp [fedora-all]

BZ#1545249 CVE-2017-17723 exiv2: heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp

BZ#1545250 CVE-2017-17723 exiv2: heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp [fedora-all]

exiv2-0.26-10.fc28

Automated Test Results

ignored