Summary: | <media-gfx/exiv2-0.26_p20180811: heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp (CVE-2017-17723) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | GLSAMaker/CVETool Bot <glsamaker> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | minor | CC: | graphics+disabled |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | https://github.com/Exiv2/exiv2/issues/229 | ||
Whiteboard: | B3 [glsa++ cve] | ||
Package list: |
media-gfx/exiv2-0.26_p20180811
|
Runtime testing required: | --- |
Bug Depends on: | 658236 | ||
Bug Blocks: |
Description
GLSAMaker/CVETool Bot
2018-02-16 01:01:09 UTC
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f33aacc28aa4a62c2123dbbecfbdb911dd4ba470 commit f33aacc28aa4a62c2123dbbecfbdb911dd4ba470 Author: Andreas Sturmlechner <asturm@gentoo.org> AuthorDate: 2018-09-18 20:45:33 +0000 Commit: Andreas Sturmlechner <asturm@gentoo.org> CommitDate: 2018-09-18 20:53:50 +0000 media-gfx/exiv2: Add 0.26_p20180811 snapshot Custom packed tarball based on upstream 0.26 branch as of 2018-08-11, fixing CVE-2018-12264, CVE-2018-12265, with downstream updated config.{guess,sub} and fixed CVE-2017-17723. Bug: https://bugs.gentoo.org/647812 Bug: https://bugs.gentoo.org/658236 Closes: https://bugs.gentoo.org/663870 Package-Manager: Portage-2.3.49, Repoman-2.3.10 media-gfx/exiv2/Manifest | 1 + media-gfx/exiv2/exiv2-0.26_p20180811.ebuild | 123 ++++++++++++++++++++++++++++ 2 files changed, 124 insertions(+) Cleanup/KDE done here. Arches and Maintainer(s), Thank you for your work. New GLSA Request filed. This issue was resolved and addressed in GLSA 201811-14 at https://security.gentoo.org/glsa/201811-14 by GLSA coordinator Aaron Bauman (b-man). This issue was resolved and addressed in GLSA 201811-14 at https://security.gentoo.org/glsa/201811-14 by GLSA coordinator Aaron Bauman (b-man). |