This update for exiv2 fixes the following issues :

exiv2 was updated to latest 0.26 branch, fixing bugs and security issues :

  - CVE-2017-1000126: Fixed an out of bounds read in webp     parser (bsc#1068873).

  - CVE-2017-9239: Fixed a segmentation fault in     TiffImageEntry::doWriteImage function (bsc#1040973).

  - CVE-2018-12264: Fixed an integer overflow in     LoaderTiff::getData() which might have led to an     out-of-bounds read (bsc#1097600).

  - CVE-2018-12265: Fixed integer overflows in     LoaderExifJpeg which could have led to memory corruption     (bsc#1097599).

  - CVE-2018-17229: Fixed a heap based buffer overflow in     Exiv2::d2Data via a crafted image (bsc#1109175).

  - CVE-2018-17230: Fixed a heap based buffer overflow in     Exiv2::d2Data via a crafted image (bsc#1109176).

  - CVE-2018-17282: Fixed a NULL pointer dereference in     Exiv2::DataValue::copy (bsc#1109299).

  - CVE-2018-19108: Fixed an integer overflow in     Exiv2::PsdImage::readMetadata which could have led to     infinite loop (bsc#1115364).

  - CVE-2018-19607: Fixed a NULL pointer dereference in     Exiv2::isoSpeed which might have led to denial of     service (bsc#1117513).

  - CVE-2018-9305: Fixed an out of bounds read in     IptcData::printStructure which might have led to to     information leak or denial of service (bsc#1088424).

  - CVE-2019-13114: Fixed a NULL pointer dereference which     might have led to denial of service via a crafted     response of an malicious http server (bsc#1142684).

This update was imported from the SUSE:SLE-15:Update update project.

Detections

Analytics

openSUSE Security Update : exiv2 (openSUSE-2020-482)

high Nessus Plugin ID 135384

Version 1.2