gpp_maybe Security update for exiv2

SUSE-SLES-16.0-424

This update for exiv2 fixes the following issues: Update to exiv2 0.28.8: - CVE-2024-24826: out-of-bounds read in QuickTimeVideo: NikonTagsDecoder (bsc#1219870). - CVE-2024-25112: denial of service due to unbounded recursion in QuickTimeVideo: multipleEntriesDecoder (bsc#1219871). - CVE-2024-39695: out-of-bounds read in AsfVideo: streamProperties (bsc#1227528). - CVE-2025-26623: heap buffer overflow via writing metadata into a crafted image file (bsc#1237347). - CVE-2025-54080: out-of-bounds read in `Exiv2: EpsImage: writeMetadata()` when writing metadata into a crafted image file (bsc#1248962). - CVE-2025-55304: quadratic performance algorithm in the ICC profile parsing code of `JpegBase: readMetadata` (bsc#1248963). - CVE-2026-25884: out-of-bounds read in `CrwMap: decode0x0805` (bsc#1259083). - CVE-2026-27596: integer overflow in `LoaderNative: getData()` leads to out-of-bounds read (bsc#1259084). - CVE-2026-27631: crash due to uncaught exception when trying to create `std: vector` larger than `max_size()` (bsc#1259085).

• Release Date
  Mar 23 2026
• References
  Bugzilla: 1219870, 1219871, 1227528, 1237347, 1248962, 1248963, 1259083, 1259084, 1259085
  CVEs: CVE-2024-24826, CVE-2024-25112, CVE-2024-39695, CVE-2025-26623, CVE-2025-54080, CVE-2025-55304, CVE-2026-25884, CVE-2026-27596, CVE-2026-27631
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

• Packages
  libexiv2-28
  Library to access image metadata

  0.28.8-160000.1.1 lock rpm

  libexiv2-28-x86-64-v3
  Library to access image metadata

  0.28.8-160000.1.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

• Packages
  libexiv2-28
  Library to access image metadata

  0.28.8-160000.1.1 lock rpm

SUSE Linux Enterprise Server 16.0 x86_64

• Packages
  libexiv2-28
  Library to access image metadata

  0.28.8-160000.1.1 lock rpm

  libexiv2-28-x86-64-v3
  Library to access image metadata

  0.28.8-160000.1.1 lock rpm

SUSE Linux Enterprise Server 16.0 ppc64le

• Packages
  libexiv2-28
  Library to access image metadata

  0.28.8-160000.1.1 lock rpm

SUSE Linux Enterprise Server 16.0 s390x

• Packages
  libexiv2-28
  Library to access image metadata

  0.28.8-160000.1.1 lock rpm

SUSE Linux Enterprise Server 16.0 aarch64

• Packages
  libexiv2-28
  Library to access image metadata

  0.28.8-160000.1.1 lock rpm