gpp_maybe Security update for exiv2

SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-3598

This update for exiv2 fixes the following issues: - CVE-2021-37621: Fixed denial of service due to infinite loop in Image:printIFDStructure (bsc#1189333). - CVE-2021-37620: Fixed out-of-bounds read in XmpTextValue:read() (bsc#1189332). - CVE-2021-37619: Fixed out-of-bounds read in Exiv2:Jp2Image:encodeJp2Header (bsc#1189331). - CVE-2021-37618: Fixed out-of-bounds read in Exiv2:Jp2Image:printStructure (bsc#1189330). - CVE-2021-32617: Fixed denial of service inside inefficient algorithm (quadratic complexity) (bsc#1186192). - CVE-2021-31292: Fixed integer overflow in CrwMap:encode0x1810 (bsc#1188756). - CVE-2021-31291: Fixed heap-based buffer overflow vulnerability in jp2image.cpp may lead to a denial of service (bsc#1188733). - CVE-2021-29470: Fixed out-of-bounds read in Exiv2:Jp2Image:encodeJp2Header (bsc#1185447). - CVE-2020-18899: Fixed uncontrolled memory allocation (bsc#1189636). - CVE-2020-18898: Fixed remote denial of service in printIFDStructure function (bsc#1189780). - CVE-2018-8977: Fixed remote denial of service in Exiv2::Internal::printCsLensFFFF function in canonmn_int.cpp (bsc#1086798). - CVE-2018-8976: Fixed remote denial of service in image.cpp Exiv2::Internal::stringFormat via out-of-bounds read (bsc#1086810). - CVE-2018-5772: Fixed segmentation fault caused by uncontrolled recursion inthe Exiv2::Image::printIFDStructure (bsc#1076579). - CVE-2018-18915: Fixed an infinite loop in the Exiv2:Image:printIFDStructure function (bsc#1114690). - CVE-2018-10772: Fixed segmentation fault when the function Exiv2::tEXtToDataBuf() is finished (bsc#1092096).

• Release Date
  Oct 17 2022
• References
  Bugzilla: 1189333, 1186192, 1185447, 1189332, 1189331, 1189780, 1086798, 1076579, 1188756, 1114690, 1188733, 1086810, 1189330, 1189636, 1092096
  CVEs: CVE-2018-10772, CVE-2018-18915, CVE-2018-5772, CVE-2018-8976, CVE-2018-8977, CVE-2020-18898, CVE-2020-18899, CVE-2021-29470, CVE-2021-31291, CVE-2021-31292, CVE-2021-32617, CVE-2021-37618, CVE-2021-37619, CVE-2021-37620, CVE-2021-37621
• Type
  security
• Severity
  important

cloud_download Downloads

Desktop Applications Module 15.4 aarch64

• Packages
  exiv2
  Tool to access image Exif metadata

  0.26-150000.6.16.1 lock src

  libexiv2-26
  Library to access image metadata

  0.26-150000.6.16.1 lock rpm

  libexiv2-devel
  Development Headers for Exiv2

  0.26-150000.6.16.1 lock rpm

Desktop Applications Module 15.4 s390x

• Packages
  exiv2
  Tool to access image Exif metadata

  0.26-150000.6.16.1 lock src

  libexiv2-26
  Library to access image metadata

  0.26-150000.6.16.1 lock rpm

  libexiv2-devel
  Development Headers for Exiv2

  0.26-150000.6.16.1 lock rpm

Desktop Applications Module 15.4 ppc64le

• Packages
  exiv2
  Tool to access image Exif metadata

  0.26-150000.6.16.1 lock src

  libexiv2-26
  Library to access image metadata

  0.26-150000.6.16.1 lock rpm

  libexiv2-devel
  Development Headers for Exiv2

  0.26-150000.6.16.1 lock rpm

Desktop Applications Module 15.4 x86_64

• Packages
  exiv2
  Tool to access image Exif metadata

  0.26-150000.6.16.1 lock src

  libexiv2-26
  Library to access image metadata

  0.26-150000.6.16.1 lock rpm

  libexiv2-devel
  Development Headers for Exiv2

  0.26-150000.6.16.1 lock rpm