gpp_maybe Security update for exiv2

SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-3889

This update for exiv2 fixes the following issues: Updated to version 0.27.5 (jsc#PED-1393): - CVE-2017-1000128: Fixed stack out of bounds read in JPEG2000 parser (bsc#1068871). - CVE-2019-13108: Fixed integer overflow PngImage:readMetadata (bsc#1142675). - CVE-2020-19716: Fixed buffer overflow vulnerability in the Databuf function in types.cpp (bsc#1188645). - CVE-2021-29457: Fixed heap buffer overflow when write metadata into a crafted image file (bsc#1185002). - CVE-2021-29470: Fixed out-of-bounds read in Exiv2:Jp2Image:encodeJp2Header (bsc#1185447). - CVE-2021-29623: Fixed read of uninitialized memory (bsc#1186053). - CVE-2021-31291: Fixed heap-based buffer overflow in jp2image.cpp (bsc#1188733). - CVE-2021-32617: Fixed denial of service due to inefficient algorithm (bsc#1186192). - CVE-2021-37620: Fixed out-of-bounds read in XmpTextValue:read() (bsc#1189332). - CVE-2021-37621: Fixed DoS due to infinite loop in Image:printIFDStructure (bsc#1189333). - CVE-2021-37622: Fixed DoS due to infinite loop in JpegBase:printStructure (bsc#1189334) - CVE-2021-34334: Fixed DoS due to integer overflow in loop counter(bsc#1189338) - CVE-2021-37623: Fixed DoS due to infinite loop in JpegBase:printStructure (bsc#1189335) - CVE-2021-29463: Fixed out-of-bounds read in webpimage.cpp (bsc#1185913). - CVE-2021-34334: Fixed DoS due to integer overflow in loop counter (bsc#1189338) - CVE-2019-13111: Fixed integer overflow in WebPImage:decodeChunks that lead to denial of service (bsc#1142679) - CVE-2021-29463: Fixed an out-of-bounds read was found in webpimage.cpp (bsc#1185913) Bugfixes: - Fixed build using GCC 11 (bsc#1185218). A new libexiv2-2_27 shared library is shipped, the libexiv2-2_26 is provided only for compatibility now. Please recompile your applications using the exiv2 library.

• Release Date
  Nov 7 2022
• References
  Bugzilla: 1142675, 1188733, 1068871, 1186053, 1188645, 1185447, 1189333, 1185002, 1186192, 1189332, 1185218, 1189334, 1189338, 1189335, 1185913, 1142679
  CVEs: CVE-2017-1000128, CVE-2019-13108, CVE-2020-19716, CVE-2021-29457, CVE-2021-29470, CVE-2021-29623, CVE-2021-31291, CVE-2021-32617, CVE-2021-37620, CVE-2021-37621, CVE-2021-37622, CVE-2021-37623, CVE-2021-34334, CVE-2021-29463, CVE-2019-13111
• Type
  security
• Severity
  important

cloud_download Downloads

Desktop Applications Module 15.4 aarch64

• Packages
  exiv2
  Tool to access image Exif metadata

  0.27.5-150400.15.4.1 lock src

  exiv2-0_26
  Tool to access image Exif metadata

  0.26-150400.9.16.1 lock src

  libexiv2-26
  Library to access image metadata

  0.26-150400.9.16.1 lock rpm

  libexiv2-27
  Library to access image metadata

  0.27.5-150400.15.4.1 lock rpm

  libexiv2-devel
  Development Headers for Exiv2

  0.27.5-150400.15.4.1 lock rpm

  libexiv2-xmp-static
  Library required too link libexiv2

  0.27.5-150400.15.4.1 lock rpm

Desktop Applications Module 15.4 ppc64le

• Packages
  exiv2
  Tool to access image Exif metadata

  0.27.5-150400.15.4.1 lock src

  exiv2-0_26
  Tool to access image Exif metadata

  0.26-150400.9.16.1 lock src

  libexiv2-26
  Library to access image metadata

  0.26-150400.9.16.1 lock rpm

  libexiv2-27
  Library to access image metadata

  0.27.5-150400.15.4.1 lock rpm

  libexiv2-devel
  Development Headers for Exiv2

  0.27.5-150400.15.4.1 lock rpm

  libexiv2-xmp-static
  Library required too link libexiv2

  0.27.5-150400.15.4.1 lock rpm

Desktop Applications Module 15.4 s390x

• Packages
  exiv2
  Tool to access image Exif metadata

  0.27.5-150400.15.4.1 lock src

  exiv2-0_26
  Tool to access image Exif metadata

  0.26-150400.9.16.1 lock src

  libexiv2-26
  Library to access image metadata

  0.26-150400.9.16.1 lock rpm

  libexiv2-27
  Library to access image metadata

  0.27.5-150400.15.4.1 lock rpm

  libexiv2-devel
  Development Headers for Exiv2

  0.27.5-150400.15.4.1 lock rpm

  libexiv2-xmp-static
  Library required too link libexiv2

  0.27.5-150400.15.4.1 lock rpm

Desktop Applications Module 15.4 x86_64

• Packages
  exiv2
  Tool to access image Exif metadata

  0.27.5-150400.15.4.1 lock src

  exiv2-0_26
  Tool to access image Exif metadata

  0.26-150400.9.16.1 lock src

  libexiv2-26
  Library to access image metadata

  0.26-150400.9.16.1 lock rpm

  libexiv2-27
  Library to access image metadata

  0.27.5-150400.15.4.1 lock rpm

  libexiv2-devel
  Development Headers for Exiv2

  0.27.5-150400.15.4.1 lock rpm

  libexiv2-xmp-static
  Library required too link libexiv2

  0.27.5-150400.15.4.1 lock rpm