RHSA-2020:1577
Vulnerability from csaf_redhat - Published: 2020-04-28 15:31 - Updated: 2026-01-13 22:07Summary
Red Hat Security Advisory: exiv2 security, bug fix, and enhancement update
Severity
Moderate
Notes
Topic: An update for exiv2, gegl, gnome-color-manager, and libgexiv2 is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments.
The following packages have been upgraded to a later upstream version: exiv2 (0.27.2). (BZ#1651917)
Security Fix(es):
* exiv2: infinite loop and hang in Jp2Image::readMetadata() in jp2image.cpp could lead to DoS (CVE-2019-20421)
* exiv2: null pointer dereference in the Exiv2::DataValue::toLong function in value.cpp (CVE-2017-18005)
* exiv2: Excessive memory allocation in Exiv2::Jp2Image::readMetadata function in jp2image.cpp (CVE-2018-4868)
* exiv2: assertion failure in BigTiffImage::readData in bigtiffimage.cpp (CVE-2018-9303)
* exiv2: divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp (CVE-2018-9304)
* exiv2: out of bounds read in IptcData::printStructure in iptc.c (CVE-2018-9305)
* exiv2: OOB read in pngimage.cpp:tEXtToDataBuf() allows for crash via crafted file (CVE-2018-10772)
* exiv2: information leak via a crafted file (CVE-2018-11037)
* exiv2: buffer overflow in samples/geotag.cpp (CVE-2018-14338)
* exiv2: heap-based buffer overflow in Exiv2::d2Data in types.cpp (CVE-2018-17229)
* exiv2: heap-based buffer overflow in Exiv2::ul2Data in types.cpp (CVE-2018-17230)
* exiv2: NULL pointer dereference in Exiv2::DataValue::copy in value.cpp leading to application crash (CVE-2018-17282)
* exiv2: Stack overflow in CiffDirectory::readDirectory() at crwimage_int.cpp leading to denial of service (CVE-2018-17581)
* exiv2: infinite loop in Exiv2::Image::printIFDStructure function in image.cpp (CVE-2018-18915)
* exiv2: heap-based buffer over-read in Exiv2::IptcParser::decode in iptc.cpp (CVE-2018-19107)
* exiv2: infinite loop in Exiv2::PsdImage::readMetadata in psdimage.cpp (CVE-2018-19108)
* exiv2: heap-based buffer over-read in PngChunk::readRawProfile in pngchunk_int.cpp (CVE-2018-19535)
* exiv2: NULL pointer dereference in Exiv2::isoSpeed in easyaccess.cpp (CVE-2018-19607)
* exiv2: Heap-based buffer over-read in Exiv2::tEXtToDataBuf function resulting in a denial of service (CVE-2018-20096)
* exiv2: Segmentation fault in Exiv2::Internal::TiffParserWorker::findPrimaryGroups function (CVE-2018-20097)
* exiv2: Heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service (CVE-2018-20098)
* exiv2: Infinite loop in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service (CVE-2018-20099)
* exiv2: infinite recursion in Exiv2::Image::printTiffStructure in file image.cpp resulting in denial of service (CVE-2019-9143)
* exiv2: denial of service in PngImage::readMetadata (CVE-2019-13109)
* exiv2: integer overflow in WebPImage::decodeChunks leads to denial of service (CVE-2019-13111)
* exiv2: uncontrolled memory allocation in PngChunk::parseChunkContent causing denial of service (CVE-2019-13112)
* exiv2: invalid data location in CRW image file causing denial of service (CVE-2019-13113)
* exiv2: null-pointer dereference in http.c causing denial of service (CVE-2019-13114)
* exiv2: out of bounds read in IptcData::printStructure in iptc.c (CVE-2018-9306)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes linked from the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted metadata in a TIFF file.
5.3 (Medium)
Affected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0.26 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file.
5.3 (Medium)
Affected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
In Exiv2 0.26, an assertion failure in BigTiffImage::readData in bigtiffimage.cpp results in an abort.
CWE-617 - Reachable AssertionAffected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
In Exiv2 0.26, a divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp could result in denial of service.
CWE-369 - Divide By ZeroAffected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
An out-of-bounds read vulnerability has been discovered in IptcData::printStructure in iptc.cpp file of Exiv2 0.26. An attacker could cause a crash or an information leak by providing a crafted image.
4.4 (Medium)
Affected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
[REJECTED CVE] An integer underflow, leading to heap-based out-of-bound read, was found in the way Exiv2 library prints IPTC Photo Metadata embedded in an image. By persuading a victim to open a crafted image, a remote attacker could crash the application or possibly retrieve a portion of memory.
4.4 (Medium)
Affected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.
4.3 (Medium)
Affected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
In Exiv2 0.26, the Exiv2::PngImage::printStructure function in pngimage.cpp allows remote attackers to cause an information leak via a crafted file.
4.4 (Medium)
Affected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POSIX platforms (other than Apple platforms) where glibc is not used, possibly leading to a buffer overflow.
CWE-121 - Stack-based Buffer OverflowAffected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file.
CWE-122 - Heap-based Buffer OverflowAffected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file.
CWE-125 - Out-of-bounds ReadAffected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a NULL pointer dereference.
CWE-476 - NULL Pointer DereferenceAffected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service.
CWE-400 - Uncontrolled Resource ConsumptionAffected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack.
CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')Affected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD image reader) may suffer from a denial of service (heap-based buffer over-read) caused by an integer overflow via a crafted PSD image file.
CWE-125 - Out-of-bounds ReadAffected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer from a denial of service (infinite loop) caused by an integer overflow via a crafted PSD image file.
CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')Affected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a denial of service (application crash due to a heap-based buffer over-read) via a crafted PNG file.
CWE-125 - Out-of-bounds ReadAffected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.
CWE-476 - NULL Pointer DereferenceAffected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.
CWE-125 - Out-of-bounds ReadAffected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimage_int.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.
CWE-125 - Out-of-bounds ReadAffected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.
CWE-125 - Out-of-bounds ReadAffected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.
CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')Affected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
An issue was discovered in Exiv2 0.27. There is infinite recursion at Exiv2::Image::printTiffStructure in the file image.cpp. This can be triggered by a crafted file. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.
4.0 (Medium)
Affected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG image file, because PngImage::readMetadata mishandles a chunkLength - iccOffset subtraction.
CWE-400 - Uncontrolled Resource ConsumptionAffected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (large heap allocation followed by a very long running loop) via a crafted WEBP image file.
CWE-400 - Uncontrolled Resource ConsumptionAffected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to an std::bad_alloc exception) via a crafted PNG image file.
CWE-400 - Uncontrolled Resource ConsumptionAffected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to assertion failure) via an invalid data location in a CRW image file.
CWE-617 - Reachable AssertionAffected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by returning a crafted response that lacks a space character.
5.5 (Medium)
Affected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
A denial of service vulnerability was found in exiv2 in the way JPEG 2000 (JP2) metadata was read when processing an image file. A remote attacker could abuse this flaw to create a specially crafted image, causing exiv2 to enter into an infinite loop when processing an incoming malicious image.
7.5 (High)
Affected products
Fixed
127 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
153 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for exiv2, gegl, gnome-color-manager, and libgexiv2 is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments.\n\nThe following packages have been upgraded to a later upstream version: exiv2 (0.27.2). (BZ#1651917)\n\nSecurity Fix(es):\n\n* exiv2: infinite loop and hang in Jp2Image::readMetadata() in jp2image.cpp could lead to DoS (CVE-2019-20421)\n\n* exiv2: null pointer dereference in the Exiv2::DataValue::toLong function in value.cpp (CVE-2017-18005)\n\n* exiv2: Excessive memory allocation in Exiv2::Jp2Image::readMetadata function in jp2image.cpp (CVE-2018-4868)\n\n* exiv2: assertion failure in BigTiffImage::readData in bigtiffimage.cpp (CVE-2018-9303)\n\n* exiv2: divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp (CVE-2018-9304)\n\n* exiv2: out of bounds read in IptcData::printStructure in iptc.c (CVE-2018-9305)\n\n* exiv2: OOB read in pngimage.cpp:tEXtToDataBuf() allows for crash via crafted file (CVE-2018-10772)\n\n* exiv2: information leak via a crafted file (CVE-2018-11037)\n\n* exiv2: buffer overflow in samples/geotag.cpp (CVE-2018-14338)\n\n* exiv2: heap-based buffer overflow in Exiv2::d2Data in types.cpp (CVE-2018-17229)\n\n* exiv2: heap-based buffer overflow in Exiv2::ul2Data in types.cpp (CVE-2018-17230)\n\n* exiv2: NULL pointer dereference in Exiv2::DataValue::copy in value.cpp leading to application crash (CVE-2018-17282)\n\n* exiv2: Stack overflow in CiffDirectory::readDirectory() at crwimage_int.cpp leading to denial of service (CVE-2018-17581)\n\n* exiv2: infinite loop in Exiv2::Image::printIFDStructure function in image.cpp (CVE-2018-18915)\n\n* exiv2: heap-based buffer over-read in Exiv2::IptcParser::decode in iptc.cpp (CVE-2018-19107)\n\n* exiv2: infinite loop in Exiv2::PsdImage::readMetadata in psdimage.cpp (CVE-2018-19108)\n\n* exiv2: heap-based buffer over-read in PngChunk::readRawProfile in pngchunk_int.cpp (CVE-2018-19535)\n\n* exiv2: NULL pointer dereference in Exiv2::isoSpeed in easyaccess.cpp (CVE-2018-19607)\n\n* exiv2: Heap-based buffer over-read in Exiv2::tEXtToDataBuf function resulting in a denial of service (CVE-2018-20096)\n\n* exiv2: Segmentation fault in Exiv2::Internal::TiffParserWorker::findPrimaryGroups function (CVE-2018-20097)\n\n* exiv2: Heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service (CVE-2018-20098)\n\n* exiv2: Infinite loop in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service (CVE-2018-20099)\n\n* exiv2: infinite recursion in Exiv2::Image::printTiffStructure in file image.cpp resulting in denial of service (CVE-2019-9143)\n\n* exiv2: denial of service in PngImage::readMetadata (CVE-2019-13109)\n\n* exiv2: integer overflow in WebPImage::decodeChunks leads to denial of service (CVE-2019-13111)\n\n* exiv2: uncontrolled memory allocation in PngChunk::parseChunkContent causing denial of service (CVE-2019-13112)\n\n* exiv2: invalid data location in CRW image file causing denial of service (CVE-2019-13113)\n\n* exiv2: null-pointer dereference in http.c causing denial of service (CVE-2019-13114)\n\n* exiv2: out of bounds read in IptcData::printStructure in iptc.c (CVE-2018-9306)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes linked from the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2020:1577",
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index"
},
{
"category": "external",
"summary": "1531171",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1531171"
},
{
"category": "external",
"summary": "1531724",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1531724"
},
{
"category": "external",
"summary": "1566725",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1566725"
},
{
"category": "external",
"summary": "1566731",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1566731"
},
{
"category": "external",
"summary": "1566735",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1566735"
},
{
"category": "external",
"summary": "1566737",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1566737"
},
{
"category": "external",
"summary": "1579544",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1579544"
},
{
"category": "external",
"summary": "1594627",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1594627"
},
{
"category": "external",
"summary": "1609396",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1609396"
},
{
"category": "external",
"summary": "1632481",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1632481"
},
{
"category": "external",
"summary": "1632484",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1632484"
},
{
"category": "external",
"summary": "1632490",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1632490"
},
{
"category": "external",
"summary": "1635045",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1635045"
},
{
"category": "external",
"summary": "1646555",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1646555"
},
{
"category": "external",
"summary": "1649094",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1649094"
},
{
"category": "external",
"summary": "1649101",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1649101"
},
{
"category": "external",
"summary": "1651917",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1651917"
},
{
"category": "external",
"summary": "1656187",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1656187"
},
{
"category": "external",
"summary": "1656195",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1656195"
},
{
"category": "external",
"summary": "1660423",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1660423"
},
{
"category": "external",
"summary": "1660424",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1660424"
},
{
"category": "external",
"summary": "1660425",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1660425"
},
{
"category": "external",
"summary": "1660426",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1660426"
},
{
"category": "external",
"summary": "1684381",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1684381"
},
{
"category": "external",
"summary": "1728484",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728484"
},
{
"category": "external",
"summary": "1728488",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728488"
},
{
"category": "external",
"summary": "1728490",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728490"
},
{
"category": "external",
"summary": "1728492",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728492"
},
{
"category": "external",
"summary": "1728494",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728494"
},
{
"category": "external",
"summary": "1757444",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1757444"
},
{
"category": "external",
"summary": "1757445",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1757445"
},
{
"category": "external",
"summary": "1767748",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1767748"
},
{
"category": "external",
"summary": "1800472",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1800472"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1577.json"
}
],
"title": "Red Hat Security Advisory: exiv2 security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2026-01-13T22:07:28+00:00",
"generator": {
"date": "2026-01-13T22:07:28+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.15"
}
},
"id": "RHSA-2020:1577",
"initial_release_date": "2020-04-28T15:31:08+00:00",
"revision_history": [
{
"date": "2020-04-28T15:31:08+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-04-28T15:31:08+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-01-13T22:07:28+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat CodeReady Linux Builder (v. 8)",
"product": {
"name": "Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::crb"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"product": {
"name": "gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"product_id": "gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnome-color-manager@3.28.0-3.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"product": {
"name": "gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"product_id": "gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnome-color-manager-debugsource@3.28.0-3.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"product": {
"name": "gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"product_id": "gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnome-color-manager-debuginfo@3.28.0-3.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"product": {
"name": "libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"product_id": "libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libgexiv2-devel@0.10.8-4.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"product": {
"name": "libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"product_id": "libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libgexiv2-debugsource@0.10.8-4.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"product": {
"name": "libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"product_id": "libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libgexiv2-debuginfo@0.10.8-4.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libgexiv2-0:0.10.8-4.el8.ppc64le",
"product": {
"name": "libgexiv2-0:0.10.8-4.el8.ppc64le",
"product_id": "libgexiv2-0:0.10.8-4.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libgexiv2@0.10.8-4.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "gegl-0:0.2.0-39.el8.ppc64le",
"product": {
"name": "gegl-0:0.2.0-39.el8.ppc64le",
"product_id": "gegl-0:0.2.0-39.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gegl@0.2.0-39.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"product": {
"name": "gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"product_id": "gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gegl-debugsource@0.2.0-39.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"product": {
"name": "gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"product_id": "gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gegl-debuginfo@0.2.0-39.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "exiv2-devel-0:0.27.2-5.el8.ppc64le",
"product": {
"name": "exiv2-devel-0:0.27.2-5.el8.ppc64le",
"product_id": "exiv2-devel-0:0.27.2-5.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2-devel@0.27.2-5.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"product": {
"name": "exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"product_id": "exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2-debugsource@0.27.2-5.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"product": {
"name": "exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"product_id": "exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2-debuginfo@0.27.2-5.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"product": {
"name": "exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"product_id": "exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2-libs-debuginfo@0.27.2-5.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "exiv2-0:0.27.2-5.el8.ppc64le",
"product": {
"name": "exiv2-0:0.27.2-5.el8.ppc64le",
"product_id": "exiv2-0:0.27.2-5.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2@0.27.2-5.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "exiv2-libs-0:0.27.2-5.el8.ppc64le",
"product": {
"name": "exiv2-libs-0:0.27.2-5.el8.ppc64le",
"product_id": "exiv2-libs-0:0.27.2-5.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2-libs@0.27.2-5.el8?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "gnome-color-manager-0:3.28.0-3.el8.x86_64",
"product": {
"name": "gnome-color-manager-0:3.28.0-3.el8.x86_64",
"product_id": "gnome-color-manager-0:3.28.0-3.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnome-color-manager@3.28.0-3.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"product": {
"name": "gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"product_id": "gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnome-color-manager-debugsource@3.28.0-3.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"product": {
"name": "gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"product_id": "gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnome-color-manager-debuginfo@3.28.0-3.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"product": {
"name": "libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"product_id": "libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libgexiv2-devel@0.10.8-4.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"product": {
"name": "libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"product_id": "libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libgexiv2-debugsource@0.10.8-4.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"product": {
"name": "libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"product_id": "libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libgexiv2-debuginfo@0.10.8-4.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libgexiv2-0:0.10.8-4.el8.x86_64",
"product": {
"name": "libgexiv2-0:0.10.8-4.el8.x86_64",
"product_id": "libgexiv2-0:0.10.8-4.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libgexiv2@0.10.8-4.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gegl-0:0.2.0-39.el8.x86_64",
"product": {
"name": "gegl-0:0.2.0-39.el8.x86_64",
"product_id": "gegl-0:0.2.0-39.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gegl@0.2.0-39.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gegl-debugsource-0:0.2.0-39.el8.x86_64",
"product": {
"name": "gegl-debugsource-0:0.2.0-39.el8.x86_64",
"product_id": "gegl-debugsource-0:0.2.0-39.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gegl-debugsource@0.2.0-39.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"product": {
"name": "gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"product_id": "gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gegl-debuginfo@0.2.0-39.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "exiv2-devel-0:0.27.2-5.el8.x86_64",
"product": {
"name": "exiv2-devel-0:0.27.2-5.el8.x86_64",
"product_id": "exiv2-devel-0:0.27.2-5.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2-devel@0.27.2-5.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"product": {
"name": "exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"product_id": "exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2-debugsource@0.27.2-5.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"product": {
"name": "exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"product_id": "exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2-debuginfo@0.27.2-5.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"product": {
"name": "exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"product_id": "exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2-libs-debuginfo@0.27.2-5.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "exiv2-0:0.27.2-5.el8.x86_64",
"product": {
"name": "exiv2-0:0.27.2-5.el8.x86_64",
"product_id": "exiv2-0:0.27.2-5.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2@0.27.2-5.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "exiv2-libs-0:0.27.2-5.el8.x86_64",
"product": {
"name": "exiv2-libs-0:0.27.2-5.el8.x86_64",
"product_id": "exiv2-libs-0:0.27.2-5.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2-libs@0.27.2-5.el8?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "gnome-color-manager-0:3.28.0-3.el8.src",
"product": {
"name": "gnome-color-manager-0:3.28.0-3.el8.src",
"product_id": "gnome-color-manager-0:3.28.0-3.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gnome-color-manager@3.28.0-3.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "libgexiv2-0:0.10.8-4.el8.src",
"product": {
"name": "libgexiv2-0:0.10.8-4.el8.src",
"product_id": "libgexiv2-0:0.10.8-4.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libgexiv2@0.10.8-4.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "gegl-0:0.2.0-39.el8.src",
"product": {
"name": "gegl-0:0.2.0-39.el8.src",
"product_id": "gegl-0:0.2.0-39.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gegl@0.2.0-39.el8?arch=src"
}
}
},
{
"category": "product_version",
"name": "exiv2-0:0.27.2-5.el8.src",
"product": {
"name": "exiv2-0:0.27.2-5.el8.src",
"product_id": "exiv2-0:0.27.2-5.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2@0.27.2-5.el8?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "libgexiv2-0:0.10.8-4.el8.s390x",
"product": {
"name": "libgexiv2-0:0.10.8-4.el8.s390x",
"product_id": "libgexiv2-0:0.10.8-4.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libgexiv2@0.10.8-4.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libgexiv2-devel-0:0.10.8-4.el8.s390x",
"product": {
"name": "libgexiv2-devel-0:0.10.8-4.el8.s390x",
"product_id": "libgexiv2-devel-0:0.10.8-4.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libgexiv2-devel@0.10.8-4.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"product": {
"name": "libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"product_id": "libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libgexiv2-debugsource@0.10.8-4.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"product": {
"name": "libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"product_id": "libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libgexiv2-debuginfo@0.10.8-4.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gegl-0:0.2.0-39.el8.s390x",
"product": {
"name": "gegl-0:0.2.0-39.el8.s390x",
"product_id": "gegl-0:0.2.0-39.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gegl@0.2.0-39.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gegl-debugsource-0:0.2.0-39.el8.s390x",
"product": {
"name": "gegl-debugsource-0:0.2.0-39.el8.s390x",
"product_id": "gegl-debugsource-0:0.2.0-39.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gegl-debugsource@0.2.0-39.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "gegl-debuginfo-0:0.2.0-39.el8.s390x",
"product": {
"name": "gegl-debuginfo-0:0.2.0-39.el8.s390x",
"product_id": "gegl-debuginfo-0:0.2.0-39.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gegl-debuginfo@0.2.0-39.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "exiv2-0:0.27.2-5.el8.s390x",
"product": {
"name": "exiv2-0:0.27.2-5.el8.s390x",
"product_id": "exiv2-0:0.27.2-5.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2@0.27.2-5.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "exiv2-devel-0:0.27.2-5.el8.s390x",
"product": {
"name": "exiv2-devel-0:0.27.2-5.el8.s390x",
"product_id": "exiv2-devel-0:0.27.2-5.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2-devel@0.27.2-5.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "exiv2-libs-0:0.27.2-5.el8.s390x",
"product": {
"name": "exiv2-libs-0:0.27.2-5.el8.s390x",
"product_id": "exiv2-libs-0:0.27.2-5.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2-libs@0.27.2-5.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "exiv2-debugsource-0:0.27.2-5.el8.s390x",
"product": {
"name": "exiv2-debugsource-0:0.27.2-5.el8.s390x",
"product_id": "exiv2-debugsource-0:0.27.2-5.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2-debugsource@0.27.2-5.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"product": {
"name": "exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"product_id": "exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2-debuginfo@0.27.2-5.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"product": {
"name": "exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"product_id": "exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2-libs-debuginfo@0.27.2-5.el8?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libgexiv2-devel-0:0.10.8-4.el8.i686",
"product": {
"name": "libgexiv2-devel-0:0.10.8-4.el8.i686",
"product_id": "libgexiv2-devel-0:0.10.8-4.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libgexiv2-devel@0.10.8-4.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"product": {
"name": "libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"product_id": "libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libgexiv2-debugsource@0.10.8-4.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"product": {
"name": "libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"product_id": "libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libgexiv2-debuginfo@0.10.8-4.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libgexiv2-0:0.10.8-4.el8.i686",
"product": {
"name": "libgexiv2-0:0.10.8-4.el8.i686",
"product_id": "libgexiv2-0:0.10.8-4.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libgexiv2@0.10.8-4.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "gegl-0:0.2.0-39.el8.i686",
"product": {
"name": "gegl-0:0.2.0-39.el8.i686",
"product_id": "gegl-0:0.2.0-39.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gegl@0.2.0-39.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "gegl-debugsource-0:0.2.0-39.el8.i686",
"product": {
"name": "gegl-debugsource-0:0.2.0-39.el8.i686",
"product_id": "gegl-debugsource-0:0.2.0-39.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gegl-debugsource@0.2.0-39.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "gegl-debuginfo-0:0.2.0-39.el8.i686",
"product": {
"name": "gegl-debuginfo-0:0.2.0-39.el8.i686",
"product_id": "gegl-debuginfo-0:0.2.0-39.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gegl-debuginfo@0.2.0-39.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "exiv2-devel-0:0.27.2-5.el8.i686",
"product": {
"name": "exiv2-devel-0:0.27.2-5.el8.i686",
"product_id": "exiv2-devel-0:0.27.2-5.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2-devel@0.27.2-5.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "exiv2-debugsource-0:0.27.2-5.el8.i686",
"product": {
"name": "exiv2-debugsource-0:0.27.2-5.el8.i686",
"product_id": "exiv2-debugsource-0:0.27.2-5.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2-debugsource@0.27.2-5.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "exiv2-debuginfo-0:0.27.2-5.el8.i686",
"product": {
"name": "exiv2-debuginfo-0:0.27.2-5.el8.i686",
"product_id": "exiv2-debuginfo-0:0.27.2-5.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2-debuginfo@0.27.2-5.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"product": {
"name": "exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"product_id": "exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2-libs-debuginfo@0.27.2-5.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "exiv2-libs-0:0.27.2-5.el8.i686",
"product": {
"name": "exiv2-libs-0:0.27.2-5.el8.i686",
"product_id": "exiv2-libs-0:0.27.2-5.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2-libs@0.27.2-5.el8?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"product": {
"name": "libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"product_id": "libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libgexiv2-devel@0.10.8-4.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"product": {
"name": "libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"product_id": "libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libgexiv2-debugsource@0.10.8-4.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"product": {
"name": "libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"product_id": "libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libgexiv2-debuginfo@0.10.8-4.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libgexiv2-0:0.10.8-4.el8.aarch64",
"product": {
"name": "libgexiv2-0:0.10.8-4.el8.aarch64",
"product_id": "libgexiv2-0:0.10.8-4.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libgexiv2@0.10.8-4.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "gegl-0:0.2.0-39.el8.aarch64",
"product": {
"name": "gegl-0:0.2.0-39.el8.aarch64",
"product_id": "gegl-0:0.2.0-39.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gegl@0.2.0-39.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "gegl-debugsource-0:0.2.0-39.el8.aarch64",
"product": {
"name": "gegl-debugsource-0:0.2.0-39.el8.aarch64",
"product_id": "gegl-debugsource-0:0.2.0-39.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gegl-debugsource@0.2.0-39.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"product": {
"name": "gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"product_id": "gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gegl-debuginfo@0.2.0-39.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "exiv2-devel-0:0.27.2-5.el8.aarch64",
"product": {
"name": "exiv2-devel-0:0.27.2-5.el8.aarch64",
"product_id": "exiv2-devel-0:0.27.2-5.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2-devel@0.27.2-5.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"product": {
"name": "exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"product_id": "exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2-debugsource@0.27.2-5.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"product": {
"name": "exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"product_id": "exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2-debuginfo@0.27.2-5.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"product": {
"name": "exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"product_id": "exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2-libs-debuginfo@0.27.2-5.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "exiv2-0:0.27.2-5.el8.aarch64",
"product": {
"name": "exiv2-0:0.27.2-5.el8.aarch64",
"product_id": "exiv2-0:0.27.2-5.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2@0.27.2-5.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "exiv2-libs-0:0.27.2-5.el8.aarch64",
"product": {
"name": "exiv2-libs-0:0.27.2-5.el8.aarch64",
"product_id": "exiv2-libs-0:0.27.2-5.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2-libs@0.27.2-5.el8?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "exiv2-doc-0:0.27.2-5.el8.noarch",
"product": {
"name": "exiv2-doc-0:0.27.2-5.el8.noarch",
"product_id": "exiv2-doc-0:0.27.2-5.el8.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/exiv2-doc@0.27.2-5.el8?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-0:0.27.2-5.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64"
},
"product_reference": "exiv2-0:0.27.2-5.el8.aarch64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-0:0.27.2-5.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le"
},
"product_reference": "exiv2-0:0.27.2-5.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-0:0.27.2-5.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x"
},
"product_reference": "exiv2-0:0.27.2-5.el8.s390x",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-0:0.27.2-5.el8.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src"
},
"product_reference": "exiv2-0:0.27.2-5.el8.src",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-0:0.27.2-5.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64"
},
"product_reference": "exiv2-0:0.27.2-5.el8.x86_64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-debuginfo-0:0.27.2-5.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64"
},
"product_reference": "exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-debuginfo-0:0.27.2-5.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686"
},
"product_reference": "exiv2-debuginfo-0:0.27.2-5.el8.i686",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-debuginfo-0:0.27.2-5.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le"
},
"product_reference": "exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-debuginfo-0:0.27.2-5.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x"
},
"product_reference": "exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-debuginfo-0:0.27.2-5.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64"
},
"product_reference": "exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-debugsource-0:0.27.2-5.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64"
},
"product_reference": "exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-debugsource-0:0.27.2-5.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686"
},
"product_reference": "exiv2-debugsource-0:0.27.2-5.el8.i686",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-debugsource-0:0.27.2-5.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le"
},
"product_reference": "exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-debugsource-0:0.27.2-5.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x"
},
"product_reference": "exiv2-debugsource-0:0.27.2-5.el8.s390x",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-debugsource-0:0.27.2-5.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64"
},
"product_reference": "exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-devel-0:0.27.2-5.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64"
},
"product_reference": "exiv2-devel-0:0.27.2-5.el8.aarch64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-devel-0:0.27.2-5.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686"
},
"product_reference": "exiv2-devel-0:0.27.2-5.el8.i686",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-devel-0:0.27.2-5.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le"
},
"product_reference": "exiv2-devel-0:0.27.2-5.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-devel-0:0.27.2-5.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x"
},
"product_reference": "exiv2-devel-0:0.27.2-5.el8.s390x",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-devel-0:0.27.2-5.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64"
},
"product_reference": "exiv2-devel-0:0.27.2-5.el8.x86_64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-doc-0:0.27.2-5.el8.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch"
},
"product_reference": "exiv2-doc-0:0.27.2-5.el8.noarch",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-libs-0:0.27.2-5.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64"
},
"product_reference": "exiv2-libs-0:0.27.2-5.el8.aarch64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-libs-0:0.27.2-5.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686"
},
"product_reference": "exiv2-libs-0:0.27.2-5.el8.i686",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-libs-0:0.27.2-5.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le"
},
"product_reference": "exiv2-libs-0:0.27.2-5.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-libs-0:0.27.2-5.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x"
},
"product_reference": "exiv2-libs-0:0.27.2-5.el8.s390x",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-libs-0:0.27.2-5.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64"
},
"product_reference": "exiv2-libs-0:0.27.2-5.el8.x86_64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64"
},
"product_reference": "exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686"
},
"product_reference": "exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le"
},
"product_reference": "exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x"
},
"product_reference": "exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64"
},
"product_reference": "exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gegl-0:0.2.0-39.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64"
},
"product_reference": "gegl-0:0.2.0-39.el8.aarch64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gegl-0:0.2.0-39.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686"
},
"product_reference": "gegl-0:0.2.0-39.el8.i686",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gegl-0:0.2.0-39.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le"
},
"product_reference": "gegl-0:0.2.0-39.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gegl-0:0.2.0-39.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x"
},
"product_reference": "gegl-0:0.2.0-39.el8.s390x",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gegl-0:0.2.0-39.el8.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src"
},
"product_reference": "gegl-0:0.2.0-39.el8.src",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gegl-0:0.2.0-39.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64"
},
"product_reference": "gegl-0:0.2.0-39.el8.x86_64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gegl-debuginfo-0:0.2.0-39.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64"
},
"product_reference": "gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gegl-debuginfo-0:0.2.0-39.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686"
},
"product_reference": "gegl-debuginfo-0:0.2.0-39.el8.i686",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gegl-debuginfo-0:0.2.0-39.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le"
},
"product_reference": "gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gegl-debuginfo-0:0.2.0-39.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x"
},
"product_reference": "gegl-debuginfo-0:0.2.0-39.el8.s390x",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gegl-debuginfo-0:0.2.0-39.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64"
},
"product_reference": "gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gegl-debugsource-0:0.2.0-39.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64"
},
"product_reference": "gegl-debugsource-0:0.2.0-39.el8.aarch64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gegl-debugsource-0:0.2.0-39.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686"
},
"product_reference": "gegl-debugsource-0:0.2.0-39.el8.i686",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gegl-debugsource-0:0.2.0-39.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le"
},
"product_reference": "gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gegl-debugsource-0:0.2.0-39.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x"
},
"product_reference": "gegl-debugsource-0:0.2.0-39.el8.s390x",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gegl-debugsource-0:0.2.0-39.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64"
},
"product_reference": "gegl-debugsource-0:0.2.0-39.el8.x86_64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnome-color-manager-0:3.28.0-3.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le"
},
"product_reference": "gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnome-color-manager-0:3.28.0-3.el8.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src"
},
"product_reference": "gnome-color-manager-0:3.28.0-3.el8.src",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnome-color-manager-0:3.28.0-3.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64"
},
"product_reference": "gnome-color-manager-0:3.28.0-3.el8.x86_64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le"
},
"product_reference": "gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64"
},
"product_reference": "gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le"
},
"product_reference": "gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64"
},
"product_reference": "gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-0:0.10.8-4.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64"
},
"product_reference": "libgexiv2-0:0.10.8-4.el8.aarch64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-0:0.10.8-4.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686"
},
"product_reference": "libgexiv2-0:0.10.8-4.el8.i686",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-0:0.10.8-4.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le"
},
"product_reference": "libgexiv2-0:0.10.8-4.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-0:0.10.8-4.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x"
},
"product_reference": "libgexiv2-0:0.10.8-4.el8.s390x",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-0:0.10.8-4.el8.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src"
},
"product_reference": "libgexiv2-0:0.10.8-4.el8.src",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-0:0.10.8-4.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64"
},
"product_reference": "libgexiv2-0:0.10.8-4.el8.x86_64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64"
},
"product_reference": "libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-debuginfo-0:0.10.8-4.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686"
},
"product_reference": "libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le"
},
"product_reference": "libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-debuginfo-0:0.10.8-4.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x"
},
"product_reference": "libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64"
},
"product_reference": "libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64"
},
"product_reference": "libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-debugsource-0:0.10.8-4.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686"
},
"product_reference": "libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le"
},
"product_reference": "libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-debugsource-0:0.10.8-4.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x"
},
"product_reference": "libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64"
},
"product_reference": "libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-devel-0:0.10.8-4.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64"
},
"product_reference": "libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-devel-0:0.10.8-4.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686"
},
"product_reference": "libgexiv2-devel-0:0.10.8-4.el8.i686",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-devel-0:0.10.8-4.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le"
},
"product_reference": "libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-devel-0:0.10.8-4.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x"
},
"product_reference": "libgexiv2-devel-0:0.10.8-4.el8.s390x",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-devel-0:0.10.8-4.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
},
"product_reference": "libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"relates_to_product_reference": "AppStream-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-0:0.27.2-5.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64"
},
"product_reference": "exiv2-0:0.27.2-5.el8.aarch64",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-0:0.27.2-5.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le"
},
"product_reference": "exiv2-0:0.27.2-5.el8.ppc64le",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-0:0.27.2-5.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x"
},
"product_reference": "exiv2-0:0.27.2-5.el8.s390x",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-0:0.27.2-5.el8.src as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src"
},
"product_reference": "exiv2-0:0.27.2-5.el8.src",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-0:0.27.2-5.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64"
},
"product_reference": "exiv2-0:0.27.2-5.el8.x86_64",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-debuginfo-0:0.27.2-5.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64"
},
"product_reference": "exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-debuginfo-0:0.27.2-5.el8.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686"
},
"product_reference": "exiv2-debuginfo-0:0.27.2-5.el8.i686",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-debuginfo-0:0.27.2-5.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le"
},
"product_reference": "exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-debuginfo-0:0.27.2-5.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x"
},
"product_reference": "exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-debuginfo-0:0.27.2-5.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64"
},
"product_reference": "exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-debugsource-0:0.27.2-5.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64"
},
"product_reference": "exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-debugsource-0:0.27.2-5.el8.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686"
},
"product_reference": "exiv2-debugsource-0:0.27.2-5.el8.i686",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-debugsource-0:0.27.2-5.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le"
},
"product_reference": "exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-debugsource-0:0.27.2-5.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x"
},
"product_reference": "exiv2-debugsource-0:0.27.2-5.el8.s390x",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-debugsource-0:0.27.2-5.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64"
},
"product_reference": "exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-devel-0:0.27.2-5.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64"
},
"product_reference": "exiv2-devel-0:0.27.2-5.el8.aarch64",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-devel-0:0.27.2-5.el8.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686"
},
"product_reference": "exiv2-devel-0:0.27.2-5.el8.i686",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-devel-0:0.27.2-5.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le"
},
"product_reference": "exiv2-devel-0:0.27.2-5.el8.ppc64le",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-devel-0:0.27.2-5.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x"
},
"product_reference": "exiv2-devel-0:0.27.2-5.el8.s390x",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-devel-0:0.27.2-5.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64"
},
"product_reference": "exiv2-devel-0:0.27.2-5.el8.x86_64",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-doc-0:0.27.2-5.el8.noarch as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch"
},
"product_reference": "exiv2-doc-0:0.27.2-5.el8.noarch",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-libs-0:0.27.2-5.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64"
},
"product_reference": "exiv2-libs-0:0.27.2-5.el8.aarch64",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-libs-0:0.27.2-5.el8.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686"
},
"product_reference": "exiv2-libs-0:0.27.2-5.el8.i686",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-libs-0:0.27.2-5.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le"
},
"product_reference": "exiv2-libs-0:0.27.2-5.el8.ppc64le",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-libs-0:0.27.2-5.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x"
},
"product_reference": "exiv2-libs-0:0.27.2-5.el8.s390x",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-libs-0:0.27.2-5.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64"
},
"product_reference": "exiv2-libs-0:0.27.2-5.el8.x86_64",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64"
},
"product_reference": "exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-libs-debuginfo-0:0.27.2-5.el8.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686"
},
"product_reference": "exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le"
},
"product_reference": "exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x"
},
"product_reference": "exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64"
},
"product_reference": "exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-0:0.10.8-4.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64"
},
"product_reference": "libgexiv2-0:0.10.8-4.el8.aarch64",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-0:0.10.8-4.el8.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686"
},
"product_reference": "libgexiv2-0:0.10.8-4.el8.i686",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-0:0.10.8-4.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le"
},
"product_reference": "libgexiv2-0:0.10.8-4.el8.ppc64le",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-0:0.10.8-4.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x"
},
"product_reference": "libgexiv2-0:0.10.8-4.el8.s390x",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-0:0.10.8-4.el8.src as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src"
},
"product_reference": "libgexiv2-0:0.10.8-4.el8.src",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-0:0.10.8-4.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64"
},
"product_reference": "libgexiv2-0:0.10.8-4.el8.x86_64",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64"
},
"product_reference": "libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-debuginfo-0:0.10.8-4.el8.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686"
},
"product_reference": "libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le"
},
"product_reference": "libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-debuginfo-0:0.10.8-4.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x"
},
"product_reference": "libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64"
},
"product_reference": "libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-debugsource-0:0.10.8-4.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64"
},
"product_reference": "libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-debugsource-0:0.10.8-4.el8.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686"
},
"product_reference": "libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le"
},
"product_reference": "libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-debugsource-0:0.10.8-4.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x"
},
"product_reference": "libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-debugsource-0:0.10.8-4.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64"
},
"product_reference": "libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-devel-0:0.10.8-4.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64"
},
"product_reference": "libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-devel-0:0.10.8-4.el8.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686"
},
"product_reference": "libgexiv2-devel-0:0.10.8-4.el8.i686",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-devel-0:0.10.8-4.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le"
},
"product_reference": "libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-devel-0:0.10.8-4.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x"
},
"product_reference": "libgexiv2-devel-0:0.10.8-4.el8.s390x",
"relates_to_product_reference": "CRB-8.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libgexiv2-devel-0:0.10.8-4.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
"product_id": "CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
},
"product_reference": "libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"relates_to_product_reference": "CRB-8.2.0.GA"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2017-18005",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"discovery_date": "2018-01-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1531171"
}
],
"notes": [
{
"category": "description",
"text": "Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted metadata in a TIFF file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: null pointer dereference in the Exiv2::DataValue::toLong function in value.cpp",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-18005"
},
{
"category": "external",
"summary": "RHBZ#1531171",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1531171"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-18005",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-18005"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-18005",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-18005"
}
],
"release_date": "2017-11-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "exiv2: null pointer dereference in the Exiv2::DataValue::toLong function in value.cpp"
},
{
"cve": "CVE-2018-4868",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2018-01-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1531724"
}
],
"notes": [
{
"category": "description",
"text": "The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0.26 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: Excessive memory allocation in Exiv2::Jp2Image::readMetadata function in jp2image.cpp",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-4868"
},
{
"category": "external",
"summary": "RHBZ#1531724",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1531724"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-4868",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4868"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-4868",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-4868"
}
],
"release_date": "2018-02-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "exiv2: Excessive memory allocation in Exiv2::Jp2Image::readMetadata function in jp2image.cpp"
},
{
"cve": "CVE-2018-9303",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"discovery_date": "2018-04-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1566725"
}
],
"notes": [
{
"category": "description",
"text": "In Exiv2 0.26, an assertion failure in BigTiffImage::readData in bigtiffimage.cpp results in an abort.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: assertion failure in BigTiffImage::readData in bigtiffimage.cpp",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of Exiv2 as shipped with Red Hat Enterprise Linux 6 and 7 as they did not include support for BigTIFF images.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-9303"
},
{
"category": "external",
"summary": "RHBZ#1566725",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1566725"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-9303",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-9303"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-9303",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9303"
}
],
"release_date": "2018-04-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "exiv2: assertion failure in BigTiffImage::readData in bigtiffimage.cpp"
},
{
"cve": "CVE-2018-9304",
"cwe": {
"id": "CWE-369",
"name": "Divide By Zero"
},
"discovery_date": "2018-04-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1566731"
}
],
"notes": [
{
"category": "description",
"text": "In Exiv2 0.26, a divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp could result in denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of Exiv2 as shipped with Red Hat Enterprise Linux 6 and 7 as they did not include support for BigTIFF images.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-9304"
},
{
"category": "external",
"summary": "RHBZ#1566731",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1566731"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-9304",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-9304"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-9304",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9304"
}
],
"release_date": "2018-04-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "exiv2: divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp"
},
{
"cve": "CVE-2018-9305",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2018-04-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1566735"
}
],
"notes": [
{
"category": "description",
"text": "An out-of-bounds read vulnerability has been discovered in IptcData::printStructure in iptc.cpp file of Exiv2 0.26. An attacker could cause a crash or an information leak by providing a crafted image.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: out of bounds read in IptcData::printStructure in iptc.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of Exiv2 as shipped with Red Hat Enterprise Linux 6 and 7, up to 7.4, as they did not include support for printing IPTC Photo Metadata.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-9305"
},
{
"category": "external",
"summary": "RHBZ#1566735",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1566735"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-9305",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-9305"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-9305",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9305"
}
],
"release_date": "2018-04-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
"version": "3.0"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "exiv2: out of bounds read in IptcData::printStructure in iptc.c"
},
{
"cve": "CVE-2018-9306",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2018-04-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1566737"
}
],
"notes": [
{
"category": "description",
"text": "[REJECTED CVE] An integer underflow, leading to heap-based out-of-bound read, was found in the way Exiv2 library prints IPTC Photo Metadata embedded in an image. By persuading a victim to open a crafted image, a remote attacker could crash the application or possibly retrieve a portion of memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: out of bounds read in IptcData::printStructure in iptc.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw was found to be a duplicate of CVE-2017-17724. Please see https://access.redhat.com/security/cve/CVE-2017-17724 for information about affected products and security errata.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-9306"
},
{
"category": "external",
"summary": "RHBZ#1566737",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1566737"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-9306",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-9306"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-9306",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9306"
}
],
"release_date": "2018-04-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
"version": "3.0"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "exiv2: out of bounds read in IptcData::printStructure in iptc.c"
},
{
"cve": "CVE-2018-10772",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2018-06-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1594627"
}
],
"notes": [
{
"category": "description",
"text": "The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: OOB read in pngimage.cpp:tEXtToDataBuf() allows for crash via crafted file",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-10772"
},
{
"category": "external",
"summary": "RHBZ#1594627",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1594627"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-10772",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10772"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-10772",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10772"
}
],
"release_date": "2018-04-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "exiv2: OOB read in pngimage.cpp:tEXtToDataBuf() allows for crash via crafted file"
},
{
"cve": "CVE-2018-11037",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2018-05-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1579544"
}
],
"notes": [
{
"category": "description",
"text": "In Exiv2 0.26, the Exiv2::PngImage::printStructure function in pngimage.cpp allows remote attackers to cause an information leak via a crafted file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: information leak via a crafted file",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-11037"
},
{
"category": "external",
"summary": "RHBZ#1579544",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1579544"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-11037",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-11037"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-11037",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-11037"
}
],
"release_date": "2018-05-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
"version": "3.0"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "exiv2: information leak via a crafted file"
},
{
"cve": "CVE-2018-14338",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1609396"
}
],
"notes": [
{
"category": "description",
"text": "samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POSIX platforms (other than Apple platforms) where glibc is not used, possibly leading to a buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: buffer overflow in samples/geotag.cpp",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of exiv2 as shipped with Red Hat Enterprise Linux 6 and 7.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-14338"
},
{
"category": "external",
"summary": "RHBZ#1609396",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1609396"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-14338",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14338"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-14338",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-14338"
}
],
"release_date": "2018-07-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "exiv2: buffer overflow in samples/geotag.cpp"
},
{
"cve": "CVE-2018-17229",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2018-09-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1632481"
}
],
"notes": [
{
"category": "description",
"text": "Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: heap-based buffer overflow in Exiv2::d2Data in types.cpp",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of exiv2 as shipped with Red Hat Enterprise Linux 6 and 7 as they did not include the vulnerable code.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-17229"
},
{
"category": "external",
"summary": "RHBZ#1632481",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1632481"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-17229",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-17229"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-17229",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17229"
}
],
"release_date": "2018-09-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "exiv2: heap-based buffer overflow in Exiv2::d2Data in types.cpp"
},
{
"cve": "CVE-2018-17230",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2018-09-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1632484"
}
],
"notes": [
{
"category": "description",
"text": "Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: heap-based buffer overflow in Exiv2::ul2Data in types.cpp",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of exiv2 as shipped with Red Hat Enterprise Linux 6 and 7 as they did not include the vulnerable code.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-17230"
},
{
"category": "external",
"summary": "RHBZ#1632484",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1632484"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-17230",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-17230"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-17230",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17230"
}
],
"release_date": "2018-09-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "exiv2: heap-based buffer overflow in Exiv2::ul2Data in types.cpp"
},
{
"cve": "CVE-2018-17282",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2018-09-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1632490"
}
],
"notes": [
{
"category": "description",
"text": "An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a NULL pointer dereference.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: NULL pointer dereference in Exiv2::DataValue::copy in value.cpp leading to application crash",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of exiv2 as shipped with Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7 prior to 7.5 as they did not include the vulnerable code.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-17282"
},
{
"category": "external",
"summary": "RHBZ#1632490",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1632490"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-17282",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-17282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-17282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17282"
}
],
"release_date": "2018-09-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "exiv2: NULL pointer dereference in Exiv2::DataValue::copy in value.cpp leading to application crash"
},
{
"cve": "CVE-2018-17581",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2018-09-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1635045"
}
],
"notes": [
{
"category": "description",
"text": "CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: Stack overflow in CiffDirectory::readDirectory() at crwimage_int.cpp leading to denial of service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of exiv2 as shipped with Red Hat Enterprise Linux 6. Red Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This has been rated as having a security impact of Low, and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-17581"
},
{
"category": "external",
"summary": "RHBZ#1635045",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1635045"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-17581",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-17581"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-17581",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17581"
}
],
"release_date": "2018-09-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "exiv2: Stack overflow in CiffDirectory::readDirectory() at crwimage_int.cpp leading to denial of service"
},
{
"cve": "CVE-2018-18915",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2018-11-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1646555"
}
],
"notes": [
{
"category": "description",
"text": "There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: infinite loop in Exiv2::Image::printIFDStructure function in image.cpp",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of exiv2 as shipped with Red Hat Enterprise Linux 6 as they did not include the support for printing image ICC profile and recursive image structure where the vulnerability occured.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-18915"
},
{
"category": "external",
"summary": "RHBZ#1646555",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1646555"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-18915",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18915"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-18915",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18915"
}
],
"release_date": "2018-11-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "exiv2: infinite loop in Exiv2::Image::printIFDStructure function in image.cpp"
},
{
"cve": "CVE-2018-19107",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2018-11-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1649094"
}
],
"notes": [
{
"category": "description",
"text": "In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD image reader) may suffer from a denial of service (heap-based buffer over-read) caused by an integer overflow via a crafted PSD image file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: heap-based buffer over-read in Exiv2::IptcParser::decode in iptc.cpp",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of exiv2 as shipped with Red Hat Enterprise Linux 6. Red Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This has been rated as having a security impact of Low, and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-19107"
},
{
"category": "external",
"summary": "RHBZ#1649094",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1649094"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-19107",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-19107"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-19107",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-19107"
}
],
"release_date": "2018-09-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "exiv2: heap-based buffer over-read in Exiv2::IptcParser::decode in iptc.cpp"
},
{
"cve": "CVE-2018-19108",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2018-11-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1649101"
}
],
"notes": [
{
"category": "description",
"text": "In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer from a denial of service (infinite loop) caused by an integer overflow via a crafted PSD image file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: infinite loop in Exiv2::PsdImage::readMetadata in psdimage.cpp",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of exiv2 as shipped with Red Hat Enterprise Linux 6. Red Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This has been rated as having a security impact of Low, and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-19108"
},
{
"category": "external",
"summary": "RHBZ#1649101",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1649101"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-19108",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-19108"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-19108",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-19108"
}
],
"release_date": "2018-08-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "exiv2: infinite loop in Exiv2::PsdImage::readMetadata in psdimage.cpp"
},
{
"cve": "CVE-2018-19535",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2018-11-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1656187"
}
],
"notes": [
{
"category": "description",
"text": "In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a denial of service (application crash due to a heap-based buffer over-read) via a crafted PNG file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: heap-based buffer over-read in PngChunk::readRawProfile in pngchunk_int.cpp",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of exiv2 as shipped with Red Hat Enterprise Linux 6 and 7.\n\nRed Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This has been rated as having a security impact of Low, and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-19535"
},
{
"category": "external",
"summary": "RHBZ#1656187",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1656187"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-19535",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-19535"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-19535",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-19535"
}
],
"release_date": "2018-09-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "exiv2: heap-based buffer over-read in PngChunk::readRawProfile in pngchunk_int.cpp"
},
{
"cve": "CVE-2018-19607",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2018-11-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1656195"
}
],
"notes": [
{
"category": "description",
"text": "Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: NULL pointer dereference in Exiv2::isoSpeed in easyaccess.cpp",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of exiv2 as shipped with Red Hat Enterprise Linux 7.\n\nThis issue did not affect the versions of exiv2 as shipped with Red Hat Enterprise 6.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-19607"
},
{
"category": "external",
"summary": "RHBZ#1656195",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1656195"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-19607",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-19607"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-19607",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-19607"
}
],
"release_date": "2018-11-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "exiv2: NULL pointer dereference in Exiv2::isoSpeed in easyaccess.cpp"
},
{
"cve": "CVE-2018-20096",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2018-12-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1660423"
}
],
"notes": [
{
"category": "description",
"text": "There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: Heap-based buffer over-read in Exiv2::tEXtToDataBuf function resulting in a denial of service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of exiv2 as shipped with Red Hat Enterprise Linux 6. Red Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This has been rated as having a security impact of Low, and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.\n\nThis issue affects the versions of exiv2 as shipped with Red Hat Enterprise Linux 7. Red Hat Product Security has rated this issue as having a security impact of Low. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-20096"
},
{
"category": "external",
"summary": "RHBZ#1660423",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1660423"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-20096",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-20096"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-20096",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-20096"
}
],
"release_date": "2018-12-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "exiv2: Heap-based buffer over-read in Exiv2::tEXtToDataBuf function resulting in a denial of service"
},
{
"cve": "CVE-2018-20097",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2018-12-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1660424"
}
],
"notes": [
{
"category": "description",
"text": "There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimage_int.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: Segmentation fault in Exiv2::Internal::TiffParserWorker::findPrimaryGroups function",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of exiv2 as shipped with Red Hat Enterprise Linux 6. This issue affects the versions of exiv2 as shipped with Red Hat Enterprise Linux 7. Red Hat Product Security has rated this issue as having a security impact of Low. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-20097"
},
{
"category": "external",
"summary": "RHBZ#1660424",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1660424"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-20097",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-20097"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-20097",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-20097"
}
],
"release_date": "2018-12-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "exiv2: Segmentation fault in Exiv2::Internal::TiffParserWorker::findPrimaryGroups function"
},
{
"cve": "CVE-2018-20098",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2018-12-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1660425"
}
],
"notes": [
{
"category": "description",
"text": "There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: Heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of exiv2 as shipped with Red Hat Enterprise Linux 6. Red Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This has been rated as having a security impact of Low, and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.\n\nThis issue affects the versions of exiv2 as shipped with Red Hat Enterprise Linux 7. Red Hat Product Security has rated this issue as having a security impact of Low. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-20098"
},
{
"category": "external",
"summary": "RHBZ#1660425",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1660425"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-20098",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-20098"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-20098",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-20098"
}
],
"release_date": "2018-12-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "exiv2: Heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service"
},
{
"cve": "CVE-2018-20099",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2018-12-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1660426"
}
],
"notes": [
{
"category": "description",
"text": "There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: Infinite loop in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of exiv2 as shipped with Red Hat Enterprise Linux 6. This issue affects the versions of exiv2 as shipped with Red Hat Enterprise Linux 7. Red Hat Product Security has rated this issue as having a security impact of Low. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-20099"
},
{
"category": "external",
"summary": "RHBZ#1660426",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1660426"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-20099",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-20099"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-20099",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-20099"
}
],
"release_date": "2018-12-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "exiv2: Infinite loop in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service"
},
{
"cve": "CVE-2019-9143",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2019-02-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1684381"
}
],
"notes": [
{
"category": "description",
"text": "An issue was discovered in Exiv2 0.27. There is infinite recursion at Exiv2::Image::printTiffStructure in the file image.cpp. This can be triggered by a crafted file. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: infinite recursion in Exiv2::Image::printTiffStructure in file image.cpp resulting in denial of service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-9143"
},
{
"category": "external",
"summary": "RHBZ#1684381",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1684381"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-9143",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9143"
}
],
"release_date": "2019-02-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "exiv2: infinite recursion in Exiv2::Image::printTiffStructure in file image.cpp resulting in denial of service"
},
{
"cve": "CVE-2019-13109",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-07-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1728484"
}
],
"notes": [
{
"category": "description",
"text": "An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG image file, because PngImage::readMetadata mishandles a chunkLength - iccOffset subtraction.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: denial of service in PngImage::readMetadata",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-13109"
},
{
"category": "external",
"summary": "RHBZ#1728484",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728484"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-13109",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13109"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-13109",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13109"
}
],
"release_date": "2019-06-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "exiv2: denial of service in PngImage::readMetadata"
},
{
"cve": "CVE-2019-13111",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-07-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1728488"
}
],
"notes": [
{
"category": "description",
"text": "A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (large heap allocation followed by a very long running loop) via a crafted WEBP image file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: integer overflow in WebPImage::decodeChunks leads to denial of service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-13111"
},
{
"category": "external",
"summary": "RHBZ#1728488",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728488"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-13111",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13111"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-13111",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13111"
}
],
"release_date": "2019-06-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "exiv2: integer overflow in WebPImage::decodeChunks leads to denial of service"
},
{
"cve": "CVE-2019-13112",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2019-07-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1728490"
}
],
"notes": [
{
"category": "description",
"text": "A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to an std::bad_alloc exception) via a crafted PNG image file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: uncontrolled memory allocation in PngChunk::parseChunkContent causing denial of service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-13112"
},
{
"category": "external",
"summary": "RHBZ#1728490",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728490"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-13112",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13112"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-13112",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13112"
}
],
"release_date": "2019-06-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "exiv2: uncontrolled memory allocation in PngChunk::parseChunkContent causing denial of service"
},
{
"cve": "CVE-2019-13113",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"discovery_date": "2019-07-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1728492"
}
],
"notes": [
{
"category": "description",
"text": "Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to assertion failure) via an invalid data location in a CRW image file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: invalid data location in CRW image file causing denial of service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-13113"
},
{
"category": "external",
"summary": "RHBZ#1728492",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728492"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-13113",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13113"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-13113",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13113"
}
],
"release_date": "2019-06-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "exiv2: invalid data location in CRW image file causing denial of service"
},
{
"cve": "CVE-2019-13114",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2019-07-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1728494"
}
],
"notes": [
{
"category": "description",
"text": "http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by returning a crafted response that lacks a space character.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: null-pointer dereference in http.c causing denial of service",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-13114"
},
{
"category": "external",
"summary": "RHBZ#1728494",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728494"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-13114",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13114"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-13114",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-13114"
}
],
"release_date": "2019-06-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "exiv2: null-pointer dereference in http.c causing denial of service"
},
{
"cve": "CVE-2019-20421",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2020-02-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1800472"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability was found in exiv2 in the way JPEG 2000 (JP2) metadata was read when processing an image file. A remote attacker could abuse this flaw to create a specially crafted image, causing exiv2 to enter into an infinite loop when processing an incoming malicious image.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "exiv2: infinite loop and hang in Jp2Image::readMetadata() in jp2image.cpp could lead to DoS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw did not affect the versions of exiv2 as shipped with Red Hat Enterprise Linux 6, 7, and 8 as they did not include the vulnerable code, which was introduced in a later version of the library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-20421"
},
{
"category": "external",
"summary": "RHBZ#1800472",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1800472"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-20421",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20421"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20421",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20421"
}
],
"release_date": "2019-09-30T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-04-28T15:31:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:1577"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"AppStream-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"AppStream-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.src",
"AppStream-8.2.0.GA:gegl-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debuginfo-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.aarch64",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.i686",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.ppc64le",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.s390x",
"AppStream-8.2.0.GA:gegl-debugsource-0:0.2.0-39.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.src",
"AppStream-8.2.0.GA:gnome-color-manager-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debuginfo-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.ppc64le",
"AppStream-8.2.0.GA:gnome-color-manager-debugsource-0:3.28.0-3.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"AppStream-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"AppStream-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.src",
"CRB-8.2.0.GA:exiv2-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-debugsource-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-devel-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-doc-0:0.27.2-5.el8.noarch",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.aarch64",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.i686",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.ppc64le",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.s390x",
"CRB-8.2.0.GA:exiv2-libs-debuginfo-0:0.27.2-5.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.src",
"CRB-8.2.0.GA:libgexiv2-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debuginfo-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-debugsource-0:0.10.8-4.el8.x86_64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.aarch64",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.i686",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.ppc64le",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.s390x",
"CRB-8.2.0.GA:libgexiv2-devel-0:0.10.8-4.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "exiv2: infinite loop and hang in Jp2Image::readMetadata() in jp2image.cpp could lead to DoS"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…