File _patchinfo of Package patchinfo.14488

<patchinfo incident="14488">
  <issue tracker="cve" id="2019-13113"/>
  <issue tracker="cve" id="2018-17581"/>
  <issue tracker="cve" id="2017-9239"/>
  <issue tracker="cve" id="2019-17402"/>
  <issue tracker="cve" id="2019-13110"/>
  <issue tracker="cve" id="2019-20421"/>
  <issue tracker="bnc" id="1110282">VUL-1: CVE-2018-17581: exiv2: CiffDirectory:readDirectory() at crwimage_int.cpp has excessive stack consumption</issue>
  <issue tracker="bnc" id="1153577">VUL-1: CVE-2019-17402: exiv2:improper validation of the total size to the offset and size leads to a crash in  Exiv2::getULong in types.cpp</issue>
  <issue tracker="bnc" id="1161901">VUL-0: CVE-2019-20421: exiv2: an input file can result in an infinite loop, in Jp2Image:readMetadata(), and hang, with high CPU consumption</issue>
  <issue tracker="bnc" id="1142683">VUL-1: CVE-2019-13113: exiv2: invalid data location in CRW image file causing denial of service</issue>
  <issue tracker="bnc" id="1040973">VUL-1: CVE-2017-9239: exiv2: Segmentation fault in TiffImageEntry::doWriteImage function</issue>
  <issue tracker="bnc" id="1142678">VUL-1: CVE-2019-13110: exiv2: exiv2: integer-overflow and out-of-bounds read in CiffDirectory:readDirectory leads to denail of service</issue>
  <packager>dirkmueller</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for exiv2</summary>
  <description>This update for exiv2 fixes the following issues:

- CVE-2018-17581: Fixed an excessive stack consumption in CiffDirectory:readDirectory() 
  which might have led to denial of service (bsc#1110282).
- CVE-2019-13110: Fixed an integer overflow and an out of bounds read in 
  CiffDirectory:readDirectory which might have led to denial of service (bsc#1142678).
- CVE-2019-13113: Fixed a potential denial of service via an invalid data location 
  in a CRW image (bsc#1142683).
- CVE-2019-17402: Fixed an improper validation of the relationship of the total 
  size to the offset and size in Exiv2::getULong (bsc#1153577).
- CVE-2019-20421: Fixed an infinite loop triggered via an input file (bsc#1161901).
- CVE-2017-9239: Fixed a segmentation fault in TiffImageEntry::doWriteImage function (bsc#1040973).
</description>
</patchinfo>