exiv2 0.25-4ubuntu0.2 source package in Ubuntu

Changelog

exiv2 (0.25-4ubuntu0.2) cosmic-security; urgency=medium

   * SECURITY UPDATE: Integer overflow
     - debian/patches/CVE-2018-19107-19108-*.patch: add port of enforce()
       in src/enforce.hpp, use safe:add for preventing overflows in
       PSD files and enforce length of image resource
       section < file size in src/psdimage.cpp.
     - CVE-2018-19107
     - CVE-2018-19108
   * SECURITY UPDATE: Denial of service
     - debian/patches/CVE-2018-19535-*.patch: fixes in
       PngChunk::readRawProfile in src/pngchunk.cpp.
     - CVE-2018-19535
   * SECURITY UPDATE: Denial of service
     - debian/patches/CVE-2019-13110.patch: avoid integer overflow
       in src/crwimage.cpp.
     - CVE-2019-13110
   * SECURITY UPDATE: Denial of service
     - debian/patches/CVE-2019-13112.patch: add bound check
       on allocation size in src/pngchunk.cpp.
     - CVE-2019-13112
   * SECURITY UPDATE: Denial of service
     - debian/patches/CVE-2019-13113.patch: throw an exception
       if the data location is invalid in src/crwimage.cpp,
       src/crwimage_int.hpp.
     - CVE-2019-13113
   * SECURITY UPDATE: Denial of service
     - debian/patches/CVE-2019-13114.patch: avoid null pointer
       exception due to NULL return from strchr in src/http.cpp.
     - CVE-2019-13114
   * Add error codes from src error in order to support CVE-2018-19535
     - debian/patches/0001-Added-error-codes-from-src-error.cpp-into-an-enumera.patch

 -- <email address hidden> (Leonidas S. Barbosa)  Wed, 10 Jul 2019 14:26:59 -0300

Upload details

Uploaded by:
Leonidas S. Barbosa
Uploaded to:
Cosmic
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
graphics
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
exiv2_0.25.orig.tar.gz 5.2 MiB c80bfc778a15fdb06f71265db2c3d49d8493c382e516cb99b8c9f9cbde36efa4
exiv2_0.25-4ubuntu0.2.debian.tar.xz 33.9 KiB c34a0b3fcab60988595eae19c1f60bc237efd010beb046b527c4342b1aaafa21
exiv2_0.25-4ubuntu0.2.dsc 2.3 KiB 9ebb951802f6709c2d8ac179168cff1173ae19691aedad443a4a0e7a98f4cf9b

View changes file

Binary packages built by this source

exiv2: No summary available for exiv2 in ubuntu cosmic.

No description available for exiv2 in ubuntu cosmic.

exiv2-dbgsym: No summary available for exiv2-dbgsym in ubuntu cosmic.

No description available for exiv2-dbgsym in ubuntu cosmic.

libexiv2-14: No summary available for libexiv2-14 in ubuntu cosmic.

No description available for libexiv2-14 in ubuntu cosmic.

libexiv2-14-dbgsym: No summary available for libexiv2-14-dbgsym in ubuntu cosmic.

No description available for libexiv2-14-dbgsym in ubuntu cosmic.

libexiv2-dev: No summary available for libexiv2-dev in ubuntu cosmic.

No description available for libexiv2-dev in ubuntu cosmic.

libexiv2-doc: No summary available for libexiv2-doc in ubuntu cosmic.

No description available for libexiv2-doc in ubuntu cosmic.