Описание
Security update for exiv2
This update for exiv2 fixes the following issues:
- CVE-2026-49275: Out of bounds read in CrwMap::decodeBasic (bsc#1277791).
- CVE-2026-68546: Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files (bsc#1277579).
- CVE-2026-68547: Heap out-of-bounds write in RemoteIo when reading from a malicious remote server (bsc#1277591).
Changes for exiv2:
- update to 0.28.9:
- https://github.com/Exiv2/exiv2/security/advisories/GHSA-3695-mjv8-3r52
- https://github.com/Exiv2/exiv2/security/advisories/GHSA-jcgh-p9v3-pw6j
- https://github.com/Exiv2/exiv2/security/advisories/GHSA-hxph-pv7w-8649
- https://github.com/Exiv2/exiv2/security/advisories/GHSA-vg6c-9f6h-4x5q
- https://github.com/Exiv2/exiv2/security/advisories/GHSA-9v3x-mhg4-wwv2
- https://github.com/Exiv2/exiv2/security/advisories/GHSA-fgw8-p7pr-37cp
- https://github.com/Exiv2/exiv2/security/advisories/GHSA-pwvq-9w4q-786w
Список пакетов
openSUSE Leap 16.0
exiv2-0.28.9-160000.1.1
exiv2-lang-0.28.9-160000.1.1
libexiv2-28-0.28.9-160000.1.1
libexiv2-28-x86-64-v3-0.28.9-160000.1.1
libexiv2-devel-0.28.9-160000.1.1
Ссылки
- SUSE Security Ratings
- SUSE Bug 1277579
- SUSE Bug 1277591
- SUSE Bug 1277791
- SUSE CVE CVE-2026-49275 page
- SUSE CVE CVE-2026-68546 page
- SUSE CVE CVE-2026-68547 page
Описание
unknown
Затронутые продукты
openSUSE Leap 16.0:exiv2-0.28.9-160000.1.1
openSUSE Leap 16.0:exiv2-lang-0.28.9-160000.1.1
openSUSE Leap 16.0:libexiv2-28-0.28.9-160000.1.1
openSUSE Leap 16.0:libexiv2-28-x86-64-v3-0.28.9-160000.1.1
Ссылки
- CVE-2026-49275
- SUSE Bug 1277579
- SUSE Bug 1277791
Описание
unknown
Затронутые продукты
openSUSE Leap 16.0:exiv2-0.28.9-160000.1.1
openSUSE Leap 16.0:exiv2-lang-0.28.9-160000.1.1
openSUSE Leap 16.0:libexiv2-28-0.28.9-160000.1.1
openSUSE Leap 16.0:libexiv2-28-x86-64-v3-0.28.9-160000.1.1
Ссылки
- CVE-2026-68546
- SUSE Bug 1277579
- SUSE Bug 1277591
- SUSE Bug 1277791
Описание
unknown
Затронутые продукты
openSUSE Leap 16.0:exiv2-0.28.9-160000.1.1
openSUSE Leap 16.0:exiv2-lang-0.28.9-160000.1.1
openSUSE Leap 16.0:libexiv2-28-0.28.9-160000.1.1
openSUSE Leap 16.0:libexiv2-28-x86-64-v3-0.28.9-160000.1.1
Ссылки
- CVE-2026-68547
- SUSE Bug 1277579
- SUSE Bug 1277591
- SUSE Bug 1277791