Security update for exempi
This update for exempi fixes the following issues:
- CVE-2018-7728: Specially crafted TIFF images could have been used to cause a denial of service via a heap-based buffer
overflow (boo#1085297)
- CVE-2018-7730: Specially crafted Excel files could have been used cause a denial of service via a heap-based buffer
overflow (boo#1085295)
-
Submitted by
Karol Babioch (kbabioch)
Fixed bugs
bnc#1085295
VUL-1: CVE-2018-7730 exempi: Heap-based buffer overflow in XMPFiles/source/FormatSupport/PSIR_FileWriter.cpp:PSD_MetaHandler::CacheFileData() allows for denial of service via crafted xls file
bnc#1085297
VUL-1: CVE-2018-7728: exempi: Heap-based buffer overflow in third-party/zuid/interfaces/MD5.cpp:MD5Update() allows for denial of service via crafted TIFF image
