gpp_maybe Security update for exiv2

SUSE-SLE-SAP-12-SP4-2022-4252

This update for exiv2 fixes the following issues: - CVE-2019-13112: Fixed an uncontrolled memory allocation in PngChunk:parseChunkContent causing denial of service. (bsc#1142681) - CVE-2021-37620: Fixed out-of-bounds read in XmpTextValue:read(). (bsc#1189332) - CVE-2021-34334: Fixed a DoS due to integer overflow in loop counter. (bsc#1189338) - CVE-2021-31291: Fixed a heap-based buffer overflow vulnerability in jp2image.cpp may lead to a denial of service via crafted metadata (bsc#1188733). - CVE-2021-32815: Fixed a deny-of-service due to assertion failure in crwimage_int.cpp (bsc#1189337). - CVE-2018-20097: Fixed SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroupsu (bsc#1119562). - CVE-2021-29457: Fixed a heap buffer overflow when write metadata into a crafted image file (bsc#1185002). - CVE-2021-29473: Fixed out-of-bounds read in Exiv2::Jp2Image:doWriteMetadata (bsc#1186231).

• Release Date
  Nov 28 2022
• References
  Bugzilla: 1189332, 1188733, 1142681, 1189337, 1119562, 1185002, 1189338, 1186231
  CVEs: CVE-2021-29473, CVE-2019-13112, CVE-2021-29457, CVE-2021-32815, CVE-2021-37620, CVE-2021-31291, CVE-2021-34334, CVE-2018-20097
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le

• Packages
  exiv2
  Tool to access image Exif metadata

  0.23-12.18.1 lock src

  libexiv2-12
  Library to access image metadata

  0.23-12.18.1 lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.4 x86_64

• Packages
  exiv2
  Tool to access image Exif metadata

  0.23-12.18.1 lock src

  libexiv2-12
  Library to access image metadata

  0.23-12.18.1 lock rpm