Skip to content

Commit 86b3c9e

Browse files
Flatcar Buildbotdongsupark
authored andcommitted
portage-stable/metadata: Monthly GLSA metadata updates
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
1 parent c692710 commit 86b3c9e

File tree

5 files changed

+67
-18
lines changed

5 files changed

+67
-18
lines changed
Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -1,24 +1,24 @@
11
-----BEGIN PGP SIGNED MESSAGE-----
22
Hash: SHA512
33

4-
MANIFEST Manifest.files.gz 606828 BLAKE2B a1b451cbd8b97fba48dcbcc329e204f935247276d40c90ac4cbfb608d79ab2e992895b94ff858963121d1134b508c59270174e7bcdaf0344859da3443b02f1b8 SHA512 7cf2f0457c87986d719605bc843f16fb1b58e94af8217c0a3cfc1d3b7a854459cdf2ac652b4f9271da08b81922bfb4c73aa18e4836c21288bc5adf2c59450d36
5-
TIMESTAMP 2026-03-01T06:12:18Z
4+
MANIFEST Manifest.files.gz 606986 BLAKE2B a1a7c8f65fa2d227109ddc598ecd792925cbf4dd59fd721d0e3d30d2ca2d680abe6f48efd8c7f747286a8b9b83dd77ab08effbd12fd5cff7aea22ff05b4b3249 SHA512 1d46d342b6898d53ef6e234a4ca25659b7a64373067f8d911b4a7efe73a227178e519cb54901fc15172d8a4113aeafaf14390ce5e552d1e17e50d3297a8f0701
5+
TIMESTAMP 2026-04-01T07:08:01Z
66
-----BEGIN PGP SIGNATURE-----
77

8-
iQKvBAEBCgCZFiEE4dartjv8+0ugL98c7FkO6skYklAFAmmj2MIbFIAAAAAABAAO
8+
iQKvBAEBCgCZFiEE4dartjv8+0ugL98c7FkO6skYklAFAmnMxFEbFIAAAAAABAAO
99
bWFudTIsMi41KzEuMTEsMiwyXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25z
1010
Lm9wZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRFMUQ2QUJCNjNCRkNGQjRCQTAyRkRG
11-
MUNFQzU5MEVFQUM5MTg5MjUwAAoJEOxZDurJGJJQDrkQAJVOtRLLR09Bs6ZPpXx+
12-
qjIgr/8v/Ny7QEXtnOfloVvsWyD0BrEMfS70lY5AD5Y8UKJWbRyqmiQaz7bIwqVR
13-
qZiG1I3IJeDLTgS8Rj0EHBtGhIzlZCUuKRzozzet7shom2V5auOzKlFO5wHw/zVK
14-
9QCbLOzsNk4yKIDEmt6ze5VFsB0HItwSk1IRBdmEE+f7swqe/iqwetdX1+aoCZQA
15-
RASTPpnw2wwAcWVaWoghBrGQB+1YUExW1Rnbvhb/jH2B512SRxKYo7QYt0y3PWZt
16-
UloEMAfITAXOvpMde3cl7c59Pt6euRPUpddwF7SQ1R1Brmuq+hiI4qi9+3kgN3G8
17-
mZnmcyclX5HkW9O7kIpCgBkgNmI1TSbJc8gpy8H8aZD/jqKaNTdnCIk82URFpVuA
18-
o68q2MfT2Fy0vQ4aE/FUb2cxXU77/GFHOZlhL3c7COSAYHLlMeXauoF3k3Pdwxgr
19-
zKK7/pMBczspKh+/4zGpAkJ0Lq9OPxQyo5H4alP74McR2jadRzCpx6wR/b3TEOiq
20-
wiFQ1IiABOkYniItRp2m6idx3TmYe609/838W0+TdlCeMznTir6QvEJvqfAcB8I6
21-
ngElyGqGmmxYujZWXdLK3Yx/g41hdOSTx16Gm43jSfKbkb5iFCnSGXHyUMkBRXry
22-
q1+EzlCr3AUo+YRkA4/QVUdr
23-
=WD7f
11+
MUNFQzU5MEVFQUM5MTg5MjUwAAoJEOxZDurJGJJQCCMQAJqLP7jt/MtqrWUu66/N
12+
g4C4QYQY65p5tHkq6lFs/X24MeAtuRUgKbaOQm02KZJNb61bvZBdgtNE8P14qWJX
13+
LtJ8hqYOJiDT3hDhnL5Z+UbjIxDdn6m2udztvXvdkgRiQEUnhaTv8BpeOwvdGnZ4
14+
nswP+jJ5hMK4tYuMFy96jO39jKAbKo4HNYQCW8CJe4/HRSboXe20Z+N74xqq5M2e
15+
aajm7K7adRALxIYM2Ih3V64LfVsPn31TzMfXaFk0y4p3f82uZ/hTophDZIdePR0M
16+
a1hkcQRPdHOmbVftt3llye5XoSmq0d+Pie7axQUJVwlFd+gORzNqvK3U+9PeeKjB
17+
FU6wU1vmR2mlIE90prbdDKPkoNhOnn9CVLHRHYl0M8WLh4TATrDl0HcUbEOrE/CC
18+
vay9V4s+lABWZh2D/BToIrWUs0UMpWtt/5e5ZANrECj7T5ExWngHY7zCCDn1dySw
19+
Poabc3KIQlBzmstxNBqTUIvxdaxhvF+Hh7Fj4Grzzmsgio76mBhQLUF2ML8vquVe
20+
ipeNd0fnGIWUN6eGdC6BZ73wVC66r53bSjHPMa+N6KyCgmHbGP/HCE0GuUvnKtBc
21+
joBONGhatuZEM3zLIMLLxHg4cMYVEF2vA19Mh89OhYQDlIbEf5Bc/LpPYOtN3LdD
22+
vHcXTmn2vbBiAIieKmqm6Elk
23+
=iTBC
2424
-----END PGP SIGNATURE-----
Binary file not shown.
Lines changed: 49 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,49 @@
1+
<?xml version="1.0" encoding="UTF-8"?>
2+
<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">
3+
<glsa id="202603-01">
4+
<title>Exiv2: Multiple Vulnerabilities</title>
5+
<synopsis>Multiple vulnerabilities have been found in Exiv2, the worst of which can lead to a crash via Denial of Service.</synopsis>
6+
<product type="ebuild">exiv2</product>
7+
<announced>2026-03-09</announced>
8+
<revised count="1">2026-03-09</revised>
9+
<bug>942164</bug>
10+
<bug>970828</bug>
11+
<access>remote</access>
12+
<affected>
13+
<package name="media-gfx/exiv2" auto="yes" arch="*">
14+
<unaffected range="ge">0.28.8</unaffected>
15+
<vulnerable range="lt">0.28.8</vulnerable>
16+
</package>
17+
</affected>
18+
<background>
19+
<p>Exiv2 is a C++ library and set of tools for parsing, editing and saving Exif and IPTC metadata from images.</p>
20+
</background>
21+
<description>
22+
<p>The following vulnerabilities have been discovered in Exiv2: 2 out of bounds reads, an integer overflow, and an uncaught exception. The worst of which can lead to a Denial of Service via a crash of the program. Please review the CVE identifiers referenced below for details.</p>
23+
</description>
24+
<impact type="low">
25+
<p>The following is a possible outcome: data leakage via an out-of-bounds read or a Denial of Service via a crash of the program.</p>
26+
</impact>
27+
<workaround>
28+
<p>Avoid using the CLI tool, exiv2, with untrusted files.</p>
29+
</workaround>
30+
<resolution>
31+
<p>All Exiv2 users should upgrade to the latest version:</p>
32+
33+
<code>
34+
# emerge --sync
35+
# emerge --ask --oneshot --verbose ">=media-gfx/exiv2-0.28.8"
36+
</code>
37+
</resolution>
38+
<references>
39+
<uri link="https://nvd.nist.gov/vuln/detail/CVE-2024-39695">CVE-2024-39695</uri>
40+
<uri link="https://nvd.nist.gov/vuln/detail/CVE-2026-25884">CVE-2026-25884</uri>
41+
<uri link="https://nvd.nist.gov/vuln/detail/CVE-2026-27596">CVE-2026-27596</uri>
42+
<uri link="https://nvd.nist.gov/vuln/detail/CVE-2026-27631">CVE-2026-27631</uri>
43+
<uri>GHSA-3wgv-fg4w-75x7</uri>
44+
<uri>GHSA-9mxq-4j5g-5wrp</uri>
45+
<uri>GHSA-p2pw-7935-c73j</uri>
46+
</references>
47+
<metadata tag="requester" timestamp="2026-03-09T04:10:31.620785Z">csfore</metadata>
48+
<metadata tag="submitter" timestamp="2026-03-09T04:10:31.624902Z">csfore</metadata>
49+
</glsa>
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
Sun, 01 Mar 2026 06:12:15 +0000
1+
Wed, 01 Apr 2026 07:08:00 +0000
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
371ee63aaee87b60a1f5a63de7d230d6598a20c8 1769423604 2026-01-26T10:33:24Z
1+
d2078931cc4cb1c6d04130dacbed885a7d2bf71c 1773030064 2026-03-09T04:21:04Z

0 commit comments

Comments
 (0)