[Git][security-tracker-team/security-tracker][master] Add CVE-2021-3482/exiv2

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
aa07d711 by Salvatore Bonaccorso at 2021-04-06T08:43:40+02:00
Add CVE-2021-3482/exiv2

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -373,6 +373,9 @@ CVE-2021-30002 (An issue was discovered in the Linux kernel before 5.11.3 when a
 	- linux 5.10.24-1
 	[buster] - linux 4.19.181-1
 	NOTE: https://git.kernel.org/linus/fb18802a338b36f675a388fc03d2aa504a0d0899
+CVE-2021-3482 [heap-based buffer overflow in Jp2Image::readMetadata() in jp2image.cpp]
+	- exiv2 <unfixed>
+	NOTE: https://github.com/Exiv2/exiv2/issues/1522
 CVE-2021-3481 [Out of bounds read in function QRadialFetchSimd from crafted svg file]
 	RESERVED
 	- qtsvg-opensource-src <unfixed>



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/aa07d7114d53cdf5de7ef73776c6c353fc227bf4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/aa07d7114d53cdf5de7ef73776c6c353fc227bf4
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210406/5a1ce2ca/attachment.htm>