SUSE-SU-2026:2584-1: exiv2&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2026:2584-1 is a vulnerability in exiv2&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 23-06-2026
   PublishedVulnerability first disclosed.
2. 24-06-2026
   Last modifiedVulnerability information updated.

Description

Security update for exiv2 This update for exiv2 fixes the following issues - CVE-2021-34334: DoS due to integer overflow in loop counter (bsc#1189338). - CVE-2026-25884: out-of-bounds read in `CrwMap: decode0x0805` (bsc#1259083). - CVE-2026-27596: integer overflow in `LoaderNative: getData()` leads to out-of-bounds read (bsc#1259084). - CVE-2026-27631: crash due to uncaught exception when trying to create `std: vector` larger than `max_size()` (bsc#1259085). Changes for exiv2: * Minor bugs and fixes - Other improvements * exivsimple has array index errors when stripping quotes form TIFF parser,Binary array elements should be decoded using the Add option -K Key (--key Key) to specify one or more keys to 'exiv2 -eX' followed by 'exiv2 -iX' produces invalid XMP - This release introduces support for Postscript (EPS) images. XMP metadata can be read and written from/to EPS images and previews are accessible. Further it includes a new build environment for MSVC 64 bit - fix build with gcc 4.3 (upstream backport) * Fix 'Since v0.14 the version check macro doesn't work in a precompiler

No weakness data has been published for this record.