Alerts This Week
Warning Icon 1 1,213
Alerts This Week
Warning Icon 1 1,213

openSUSE Exiv2 Moderate Update Addressing Four Issues 2026-2704-1

opensuse
Calendar Grey June 30, 2026
Dist Opensuse Esm H88
# Security update for exiv2-0_26 Announcement ID: SUSE-SU-2026:2704-1 Release Date: 2026-06-30T10:28
An update that solves four vulnerabilities can now be installed.

Description

This update for exiv2-0_26 fixes the following issues

* CVE-2025-54080: out-of-bounds read in `Exiv2::EpsImage::writeMetadata()`

when writing metadata into a crafted image file (bsc#1248962).

* CVE-2026-25884: out-of-bounds read in `CrwMap::decode0x0805` (bsc#1259083).

* CVE-2026-27596: integer overflow in `LoaderNative::getData()` leads to out-

of-bounds read (bsc#1259084).

* CVE-2026-27631: crash due to uncaught exception when trying to create

`std::vector` larger than `max_size()` (bsc#1259085).

Topics%20covered

Topics Covered

security advisory moderate integer overflow out-of-bounds OpenSUSE exiv2

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* openSUSE Leap 15.4

zypper in -t patch SUSE-2026-2704=1

Package List

* openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64)

* libexiv2-26-debuginfo-0.26-150400.9.34.1

* exiv2-0_26-debugsource-0.26-150400.9.34.1

* libexiv2-26-0.26-150400.9.34.1

* openSUSE Leap 15.4 (x86_64)

* libexiv2-26-32bit-debuginfo-0.26-150400.9.34.1

* libexiv2-26-32bit-0.26-150400.9.34.1

* openSUSE Leap 15.4 (aarch64_ilp32)

* libexiv2-26-64bit-0.26-150400.9.34.1

* libexiv2-26-64bit-debuginfo-0.26-150400.9.34.1

References

* bsc#1248962

* bsc#1259083

* bsc#1259084

* bsc#1259085

## References:

* https://www.suse.com/security/cve/CVE-2025-54080.html

* https://www.suse.com/security/cve/CVE-2026-25884.html

* https://www.suse.com/security/cve/CVE-2026-27596.html

* https://www.suse.com/security/cve/CVE-2026-27631.html

* https://bugzilla.suse.com/show_bug.cgi?id=1248962

* https://bugzilla.suse.com/show_bug.cgi?id=1259083

* https://bugzilla.suse.com/show_bug.cgi?id=1259084

* https://bugzilla.suse.com/show_bug.cgi?id=1259085

Severity
moderate
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:2704-1
Release Date: 2026-06-30T10:28:26Z
Affected Products: * openSUSE Leap 15.4

Topics%20covered

Topics Covered

security advisory moderate integer overflow out-of-bounds OpenSUSE exiv2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here