gpp_maybe Security update for exiv2

SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-4276

This update for exiv2 fixes the following issues: - CVE-2019-13110: Fixed an integer-overflow and out-of-bounds read in CiffDirectory:readDirectory leads to denail of service (bsc#1142678). - CVE-2019-13109: Fixed a denial of service in PngImage:readMetadata (bsc#1142677). - CVE-2018-17581: Fixed an excessive stack consumption CiffDirectory:readDirectory() at crwimage_int.cpp (bsc#1110282). - CVE-2017-11591: Fixed a floating point exception in Exiv2::ValueType (bsc#1050257). - CVE-2019-17402: Fixed an improper validation of the total size to the offset and size leads to a crash in Exiv2::getULong in types.cpp (bsc#1153577). - CVE-2021-32815: Fixed a deny-of-service due to assertion failure in crwimage_int.cpp (bsc#1189337). - CVE-2018-20097: Fixed SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroupsu (bsc#1119562). - CVE-2021-29473: Fixed out-of-bounds read in Exiv2::Jp2Image:doWriteMetadata (bsc#1186231). - CVE-2018-20098: Fixed a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header (bsc#1119560). - CVE-2018-11531: Fixed a heap-based buffer overflow in getData in preview.cpp (bsc#1095070). - CVE-2018-20099: exiv2: infinite loop in Exiv2::Jp2Image::encodeJp2Header (bsc#1119559).

• Release Date
  Nov 29 2022
• References
  Bugzilla: 1189337, 1142678, 1119560, 1186231, 1153577, 1095070, 1119559, 1050257, 1110282, 1142677, 1119562
  CVEs: CVE-2021-32815, CVE-2018-20098, CVE-2018-20097, CVE-2019-13110, CVE-2021-29473, CVE-2019-13109, CVE-2018-17581, CVE-2019-17402, CVE-2018-20099, CVE-2018-11531, CVE-2017-11591
• Type
  security
• Severity
  important

cloud_download Downloads

Desktop Applications Module 15.3 aarch64

• Packages
  exiv2
  Tool to access image Exif metadata

  0.26-150000.6.26.1 lock src

  libexiv2-26
  Library to access image metadata

  0.26-150000.6.26.1 lock rpm

  libexiv2-devel
  Development Headers for Exiv2

  0.26-150000.6.26.1 lock rpm

Desktop Applications Module 15.3 ppc64le

• Packages
  exiv2
  Tool to access image Exif metadata

  0.26-150000.6.26.1 lock src

  libexiv2-26
  Library to access image metadata

  0.26-150000.6.26.1 lock rpm

  libexiv2-devel
  Development Headers for Exiv2

  0.26-150000.6.26.1 lock rpm

Desktop Applications Module 15.3 s390x

• Packages
  exiv2
  Tool to access image Exif metadata

  0.26-150000.6.26.1 lock src

  libexiv2-26
  Library to access image metadata

  0.26-150000.6.26.1 lock rpm

  libexiv2-devel
  Development Headers for Exiv2

  0.26-150000.6.26.1 lock rpm

Desktop Applications Module 15.3 x86_64

• Packages
  exiv2
  Tool to access image Exif metadata

  0.26-150000.6.26.1 lock src

  libexiv2-26
  Library to access image metadata

  0.26-150000.6.26.1 lock rpm

  libexiv2-devel
  Development Headers for Exiv2

  0.26-150000.6.26.1 lock rpm