exiv2 0.25-4ubuntu2 source package in Ubuntu

Changelog

exiv2 (0.25-4ubuntu2) eoan; urgency=medium

   * SECURITY UPDATE: Integer overflow
     - debian/patches/CVE-2018-19107-19108-*.patch: add port of enforce()
       in src/enforce.hpp, use safe:add for preventing overflows in
       PSD files and enforce length of image resource
       section < file size in src/psdimage.cpp.
     - CVE-2018-19107
     - CVE-2018-19108
   * SECURITY UPDATE: Denial of service
     - debian/patches/CVE-2018-19535-*.patch: fixes in
       PngChunk::readRawProfile in src/pngchunk.cpp.
     - CVE-2018-19535
   * SECURITY UPDATE: Denial of service
     - debian/patches/CVE-2019-13110.patch: avoid integer overflow
       in src/crwimage.cpp.
     - CVE-2019-13110
   * SECURITY UPDATE: Denial of service
     - debian/patches/CVE-2019-13112.patch: add bound check
       on allocation size in src/pngchunk.cpp.
     - CVE-2019-13112
   * SECURITY UPDATE: Denial of service
     - debian/patches/CVE-2019-13113.patch: throw an exception
       if the data location is invalid in src/crwimage.cpp,
       src/crwimage_int.hpp.
     - CVE-2019-13113
   * SECURITY UPDATE: Denial of service
     - debian/patches/CVE-2019-13114.patch: avoid null pointer
       exception due to NULL return from strchr in src/http.cpp.
     - CVE-2019-13114
   * Add error codes from src error in order to support CVE-2018-19535
     - debian/patches/0001-Added-error-codes-from-src-error.cpp-into-an-enumera.patch

 -- <email address hidden> (Leonidas S. Barbosa)  Mon, 15 Jul 2019 11:49:42 -0300

Upload details

Uploaded by:
Leonidas S. Barbosa
Sponsored by:
Marc Deslauriers
Uploaded to:
Eoan
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
graphics
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
exiv2_0.25.orig.tar.gz 5.2 MiB c80bfc778a15fdb06f71265db2c3d49d8493c382e516cb99b8c9f9cbde36efa4
exiv2_0.25-4ubuntu2.debian.tar.xz 33.8 KiB 5567d21723be3f9d4946376c07d11913f8694efff039e7996bd7e956d82829a3
exiv2_0.25-4ubuntu2.dsc 2.3 KiB 9d6dfbfc947050b74bf79e7f63ae5a9923093188227c1bebfe637ec2fffab457

Available diffs

View changes file

Binary packages built by this source

exiv2: No summary available for exiv2 in ubuntu eoan.

No description available for exiv2 in ubuntu eoan.

exiv2-dbgsym: debug symbols for exiv2
libexiv2-14: No summary available for libexiv2-14 in ubuntu focal.

No description available for libexiv2-14 in ubuntu focal.

libexiv2-14-dbgsym: No summary available for libexiv2-14-dbgsym in ubuntu eoan.

No description available for libexiv2-14-dbgsym in ubuntu eoan.

libexiv2-dev: No summary available for libexiv2-dev in ubuntu eoan.

No description available for libexiv2-dev in ubuntu eoan.

libexiv2-doc: No summary available for libexiv2-doc in ubuntu eoan.

No description available for libexiv2-doc in ubuntu eoan.