[Announce] [Security Advisory] ALSA-2022:1797: An update for compat-exiv2-026 is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. (Moderate)

[AlmaLinux Errata Notifications]

Hi,

You are receiving an AlmaLinux Security update email because you subscribed to 
receive errata notifications from AlmaLinux.

AlmaLinux: 8
Type: Security
Severity: Moderate
Release date: 2023-03-13

Summary:

Exiv2 is a C++ library to access image metadata, supporting read and write 
access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extract and 
delete methods for Exif thumbnails, classes to access Ifd, and support for 
various image formats.

Security Fix(es):

* exiv2: stack exhaustion issue in the printIFDStructure function may lead to 
DoS (CVE-2020-18898)

For more details about the security issue(s), including the impact, a CVSS 
score, acknowledgments, and other related information, refer to the CVE page(s) 
listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release 
Notes linked from the References section.

Full details, updated packages, references, and other related information: 
https://errata.almalinux.org/8/ALSA-2022-1797.html

This message is automatically generated, please don’t reply. For further 
questions, please, contact us via the AlmaLinux community chat: 
https://chat.almalinux.org/.
Want to change your notification settings? Sign in and manage mailing lists on 
https://lists.almalinux.org.

Kind regards,
AlmaLinux Team