MGASA-2021-0259
- Source
- https://advisories.mageia.org/MGASA-2021-0259.html
- Import Source
- https://advisories.mageia.org/MGASA-2021-0259.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2021-0259
- Related
- Published
- 2021-06-16T20:22:25Z
- Modified
- 2021-06-16T19:08:53Z
- Summary
- Updated perl-Image-ExifTool package fixes a security vulnerability
- Details
-
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image (CVE-2021-22204).
- References
-
- https://advisories.mageia.org/MGASA-2021-0259.html
- https://bugs.mageia.org/show_bug.cgi?id=28927
- https://www.openwall.com/lists/oss-security/2021/05/09/1
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DDKDLJLBTBBR66OOPXSXCG2PQRM5KCZL/
- https://www.debian.org/security/2021/dsa-4910
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SLQ4XG6SNL6OL7SHPBZLVWYCAEZGZW5X/
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:7 / perl-Image-ExifTool
Package
- Name
- perl-Image-ExifTool
- Purl
- pkg:rpm/mageia/perl-Image-ExifTool?distro=mageia-7
Mageia:8 / perl-Image-ExifTool
Package
- Name
- perl-Image-ExifTool
- Purl
- pkg:rpm/mageia/perl-Image-ExifTool?distro=mageia-8