Advisories » MGASA-2019-0095

Updated libexif packages fix security vulnerability

Publication date: 20 Feb 2019
Modification date: 20 Feb 2019
Type: security
Affected Mageia releases : 6
CVE: CVE-2018-20030

Description

It was found that specially crafted XIF_IFD_INTEROPERABILITY and
EXIF_IFD_EXIF tags could be used for a denial of service (CVE-2018-20030).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=24373
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/SVC5KUWUCW5SKSBJOLGYSLCWLZE54JC4/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20030

SRPMS

6/core

• libexif-0.6.21-9.3.mga6