Source: exiv2 Version: 0.26-1 Severity: grave Tags: security upstream Forwarded: https://github.com/Exiv2/exiv2/issues/511
Hi, The following vulnerability was published for exiv2, only affecting the experimental version. The severity as such is not warranted but is to make sure the 0.26 affecting issues do not enter an upcoming stable release. If you disagree on that approach I would not object to downgrade to important. CVE-2018-18915[0]: | There is an infinite loop in the Exiv2::Image::printIFDStructure | function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a | remote denial of service attack. If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2018-18915 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18915 [1] https://github.com/Exiv2/exiv2/issues/511 Regards, Salvatore
