SUSE-SU-2026:20923-1

csafDEsuse_csaf

Security update for exiv2

view advisory published 2026-03-23

Security update for exiv2

01

describes (9)

Related CVEs.

IDseverity exploitable
CVE-2026-27631USmedium5.3—
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an uncaught exception was found…
CVE-2026-27596UShigh7.5—
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an out-of-bounds read was found…
CVE-2026-25884UShigh8.1—
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an out-of-bounds read was found…
CVE-2025-55304USmedium5.5—
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A denial-of-service was found in Exiv2 version 0.28.5: a…
CVE-2025-54080USmedium5.5—
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions 0.28.5…
CVE-2025-26623UScritical9.8—
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A heap buffer overflow was found in Exiv2 versions v0.28…
CVE-2024-39695USmedium6.5—
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 version v0.28.2.…
CVE-2024-25112USmedium5.0—
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A denial-of-service was found in Exiv2 version v0.28.1: a…
CVE-2024-24826USmedium5.0—
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 version v0.28.1.…
02

references

External citations — patches, advisories, analysis.

03

remediations (90)

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-x86-64-v3-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-x86-64-v3-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-x86-64-v3-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-x86-64-v3-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-x86-64-v3-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-x86-64-v3-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-x86-64-v3-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-x86-64-v3-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-x86-64-v3-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-x86-64-v3-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-x86-64-v3-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-x86-64-v3-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-x86-64-v3-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-x86-64-v3-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-x86-64-v3-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-x86-64-v3-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-x86-64-v3-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedlibexiv2-28-x86-64-v3-0:0.28.8-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan