Nixpkgs security tracker
NIXPKGS-2026-0493
GitHub issue
published 3 months, 3 weeks ago
by @LeSuisse Activity log
- Created suggestion
-
@LeSuisse
ignored
10 packages
- gexiv2
- libsForQt5.libkexiv2
- kdePackages.libkexiv2
- python312Packages.exiv2
- python313Packages.exiv2
- python314Packages.exiv2
- plasma5Packages.libkexiv2
- python312Packages.py3exiv2
- python313Packages.py3exiv2
- python314Packages.py3exiv2
- @LeSuisse accepted
- @LeSuisse published on GitHub
Exiv2: Out-of-bounds read in CrwMap::decode0x0805
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an out-of-bounds read was found. The vulnerability is in the CRW image parser. This issue has been patched in version 0.28.8.
References
-
https://github.com/Exiv2/exiv2/security/advisories/GHSA-9mxq-4j5g-5wrp x_refsource_CONFIRM
-
https://github.com/Exiv2/exiv2/pull/3462 x_refsource_MISC
Affected products
exiv2
- ==< 0.28.8
Matching in nixpkgs
Ignored packages (10)
pkgs.gexiv2
GObject wrapper around the Exiv2 photo metadata library
pkgs.libsForQt5.libkexiv2
None
pkgs.kdePackages.libkexiv2
Wrapper around Exiv2 library to manipulate picture metadata as EXIF and XMP
pkgs.python312Packages.exiv2
None
pkgs.python313Packages.exiv2
Low level Python interface to the Exiv2 C++ library
-
nixos-unstable exiv2-0.18.0
- nixpkgs-unstable exiv2-0.18.0
- nixos-unstable-small exiv2-0.18.0
pkgs.python314Packages.exiv2
Low level Python interface to the Exiv2 C++ library
-
nixos-unstable exiv2-0.18.0
- nixpkgs-unstable exiv2-0.18.0
- nixos-unstable-small exiv2-0.18.0
pkgs.plasma5Packages.libkexiv2
None
pkgs.python312Packages.py3exiv2
None
pkgs.python313Packages.py3exiv2
Python binding to the library exiv2
-
nixos-unstable py3exiv2-0.12.0
- nixpkgs-unstable py3exiv2-0.12.0
- nixos-unstable-small py3exiv2-0.12.0
pkgs.python314Packages.py3exiv2
Python binding to the library exiv2
-
nixos-unstable py3exiv2-0.12.0
- nixpkgs-unstable py3exiv2-0.12.0
- nixos-unstable-small py3exiv2-0.12.0
Package maintainers
-
@wegank Weijia Wang <contact@weijia.wang>