gpp_maybe Security update for exiv2-0_26

SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-4208

This update for exiv2-0_26 fixes the following issues: - CVE-2019-17402: Fixed improper validation of the total size to the offset and size leads to a crash in Exiv2::getULong in types.cpp (bsc#1153577). - CVE-2018-20098: Fixed a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header (bsc#1119560). - CVE-2018-17581: Fixed an excessive stack consumption CiffDirectory:readDirectory() at crwimage_int.cpp (bsc#1110282). - CVE-2018-20099: exiv2: infinite loop in Exiv2::Jp2Image::encodeJp2Header (bsc#1119559). - CVE-2018-20097: Fixed SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroupsu (bsc#1119562). - CVE-2017-11591: Fixed a floating point exception in Exiv2::ValueType (bsc#1050257). - CVE-2018-11531: Fixed a heap-based buffer overflow in getData in preview.cpp (bsc#1095070). - CVE-2021-32815: Fixed a deny-of-service due to assertion failure in crwimage_int.cpp (bsc#1189337). - CVE-2021-29473: Fixed out-of-bounds read in Exiv2::Jp2Image:doWriteMetadata (bsc#1186231). - CVE-2019-13109: Fixed a denial of service in PngImage:readMetadata (bsc#1142677). - CVE-2019-13110: Fixed an integer-overflow and out-of-bounds read in CiffDirectory:readDirectory leads to denail of service (bsc#1142678).

Release Date

Nov 23 2022
References

Bugzilla: 1119562, 1095070, 1142677, 1050257, 1119560, 1119559, 1110282, 1189337, 1142678, 1186231, 1153577
CVEs: CVE-2018-20098, CVE-2018-17581, CVE-2018-20099, CVE-2019-17402, CVE-2018-20097, CVE-2017-11591, CVE-2018-11531, CVE-2021-32815, CVE-2021-29473, CVE-2019-13109, CVE-2019-13110
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Desktop Applications Module 15.4 ppc64le

Packages

exiv2-0_26
Tool to access image Exif metadata

0.26-150400.9.21.1 lock src

libexiv2-26
Library to access image metadata

0.26-150400.9.21.1 lock rpm

Desktop Applications Module 15.4 aarch64

Packages

exiv2-0_26
Tool to access image Exif metadata

0.26-150400.9.21.1 lock src

libexiv2-26
Library to access image metadata

0.26-150400.9.21.1 lock rpm

Desktop Applications Module 15.4 s390x

Packages

exiv2-0_26
Tool to access image Exif metadata

0.26-150400.9.21.1 lock src

libexiv2-26
Library to access image metadata

0.26-150400.9.21.1 lock rpm

Desktop Applications Module 15.4 x86_64

Packages

exiv2-0_26
Tool to access image Exif metadata

0.26-150400.9.21.1 lock src

libexiv2-26
Library to access image metadata

0.26-150400.9.21.1 lock rpm