Sync exiv2 0.24-4.1 (main) from Debian unstable (main)

Bug #1433806 reported by Artur Rona
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
exiv2 (Ubuntu)
Fix Released
Wishlist
Unassigned

Bug Description

Please sync exiv2 0.24-4.1 (main) from Debian unstable (main)

Explanation of the Ubuntu delta and why it can be dropped:
  * SECURITY UPDATE: denial of service via buffer overflow
    - debian/patches/CVE-2014-9449.patch: fix overflow in
      src/riffvideo.cpp.
    - CVE-2014-9449

CVE-2014-9449 is already fixed in Debian.

Changelog entries since current vivid version 0.24-4ubuntu1:

exiv2 (0.24-4.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Add CVE-2014-9449.patch patch.
    CVE-2014-9449: buffer overflow in RiffVideo::infoTagsHandler
    Thanks to Klaus Ethgen <email address hidden> (Closes: #773846)

 -- Salvatore Bonaccorso <email address hidden> Wed, 07 Jan 2015 20:25:48 +0100

CVE References

Artur Rona (ari-tczew)
Changed in exiv2 (Ubuntu):
importance: Undecided → Wishlist
Revision history for this message
Dmitry Shachnev (mitya57) wrote :

This bug was fixed in the package exiv2 - 0.24-4.1
Sponsored for Artur Rona (ari-tczew)

---------------
exiv2 (0.24-4.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Add CVE-2014-9449.patch patch.
    CVE-2014-9449: buffer overflow in RiffVideo::infoTagsHandler
    Thanks to Klaus Ethgen <email address hidden> (Closes: #773846)

 -- Salvatore Bonaccorso <email address hidden> Wed, 07 Jan 2015 20:25:48 +0100

Changed in exiv2 (Ubuntu):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.