Advisories » MGASA-2026-0394

Updated perl-Imager packages fix a security vulnerability

Publication date: 12 Sep 2026
Modification date: 12 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-19082

Description

Imager versions from 0.45_02 before 1.034 for Perl may expose adjacent
heap bytes via strlen() over-read from zero-count ASCII EXIF entries in
copy_string_tags
                

References

• https://bugs.mageia.org/show_bug.cgi?id=36133
• https://www.openwall.com/lists/oss-security/2026/08/07/6
• https://github.com/tonycoz/imager/security/advisories/GHSA-hx46-55wp-hv6m
• https://metacpan.org/release/TONYC/Imager-1.034/changes
• https://www.cve.org/CVERecord?id=CVE-2026-19082

SRPMS

10/core

• perl-Imager-1.34.0-1.1.mga10

9/core

• perl-Imager-1.34.0-1.1.mga9