[ GLSA 201811-14 ] Exiv2

[GLSA]

Gentoo Linux Security Advisory

Title: Exiv2: Multiple vulnerabilities (GLSA 201811-14)
Severity: normal
Exploitable: remote
Date: 2018-11-24
Bug(s): #647810, #647812, #647816, #652822, #655842, #655958, #658236
ID: 201811-14

Synopsis

Multiple vulnerabilities have been found in Exiv2, the worst of
which could result in a Denial of Service condition.


Background

Exiv2 is a C++ library and a command line utility to manage image
metadata.


Affected Packages

Package: media-gfx/exiv2
Vulnerable: < 0.26_p20180811-r3
Unaffected: >= 0.26_p20180811-r3
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Exiv2. Please review
the CVE identifiers referenced below for details.


Impact

A remote attacker could cause a Denial of Service condition or obtain
sensitive information via a specially crafted file.


Workaround

There is no known workaround at this time.

Resolution

All Exiv2 users should upgrade to the latest version: