SUSE SLED15: exiv2 / exiv2-lang / libexiv2-26 / libexiv2-26-32bit / libexiv2-27 / etc (SUSE-SU-2022:3889-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3889-1 advisory. Updated to version 0.27.5 jscPED-1393: - CVE-2017-1000128: Fixed stack out of bounds read in...

SUSE: Security Advisory (SUSE-SU-2022:3889-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-13108

CVE-2019-13108 affects Exiv2 up to version 0.27.1, where an integer overflow in PngImage::readMetadata can trigger a denial of service (SIGSEGV) via a crafted PNG image (iccOffset handling). Public notices confirm fixes in subsequent releases: Fedora updated to 0.27.2, SUSE/SUSE-SU-2022:3889-1 no...