exiv2-0.27.5-2.el8

エラータID: AXSA:2022-3533:01

Release date: 
Wednesday, July 13, 2022 - 05:11
Subject: 
exiv2-0.27.5-2.el8
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extract and delete methods for Exif thumbnails, classes to access Ifd, and support for various image formats.

The following packages have been upgraded to a later upstream version: exiv2 (0.27.5).

Security Fix(es):

* exiv2: stack exhaustion issue in the printIFDStructure function may lead to DoS (CVE-2020-18898)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

CVE-2020-18898
A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause a denial of service (DOS) via a crafted file.

Solution: 

Update packages.

CVEs: 
CVE-2020-18898
A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause a denial of service (DOS) via a crafted file.
Additional Info: 

N/A

Download: 

SRPMS
  1. exiv2-0.27.5-2.el8.src.rpm
    MD5: 6886d8d08e8bccf4b0d330696d3b30c4
    SHA-256: 8e877368fb74232c9113f583dafca01fc8aa545abfa2d6d0fb2b7634d949de27
    Size: 31.21 MB

Asianux Server 8 for x86_64
  1. exiv2-0.27.5-2.el8.x86_64.rpm
    MD5: a1a342ca2b1c67232001e7547d5e407a
    SHA-256: 1ac6b544d2c720ebf3240f2db25a70ca68bc9e39c433f5d87205bfdac246362c
    Size: 1.01 MB
  2. exiv2-devel-0.27.5-2.el8.x86_64.rpm
    MD5: cdf48b93ba9e57b8a0290e083cafe9b0
    SHA-256: 487f6fdb954e1f4a78d2d61dac0c4b400e45c8b0ab409bd1a4d668cc0d469cd0
    Size: 285.07 kB
  3. exiv2-doc-0.27.5-2.el8.noarch.rpm
    MD5: fb77e469414384d98b1a13a8e92b8de1
    SHA-256: aba4758fbb1ca09a6a3185cf653b3b4781b8c5560d0148d2ecb768378b51c2e5
    Size: 3.06 MB
  4. exiv2-libs-0.27.5-2.el8.x86_64.rpm
    MD5: b7595963cfe651cbb95ef8ed16c4f4db
    SHA-256: 725832a21dafcff6c2f9af005f10fb6a09d2bf305c3b12d408779b634f6aec00
    Size: 870.49 kB
  5. exiv2-devel-0.27.5-2.el8.i686.rpm
    MD5: db5ce506796011b01415d4a08e86a816
    SHA-256: 8d428a1cbba827d14bec757ad7237ac96eb5fcf84a00a235017a9859ef598dff
    Size: 299.48 kB
  6. exiv2-libs-0.27.5-2.el8.i686.rpm
    MD5: 28f39ac44f5afe7c88a7fefb61bde647
    SHA-256: 8a097ed6c1f50332a2a1b4b039db6f2212498ec37dc92c4014e5d96fe6c32a46
    Size: 903.47 kB