SUSE-SU-2026:0231-1

Details

This update for exiv2-0_26 fixes the following issues:

Add reference for previously fixed issue:

CVE-2025-55304: Fixed quadratic performance algorithm in the ICC profile parsing code of JpegBase::readMetadata (bsc#1248963).

Affected Packages

exiv2-0_26

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise Server 15 SP4-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP4openSUSE Leap 15.6

Fixed in:

0.26-150400.9.27.1

libexiv2-26

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise Server 15 SP4-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP4openSUSE Leap 15.6

Fixed in:

0.26-150400.9.27.1

libexiv2-26-32bit

openSUSE Leap 15.6

Fixed in:

0.26-150400.9.27.1

References

REPORT

https://bugzilla.suse.com/1248963

WEB

https://www.suse.com/security/cve/CVE-2025-55304

ADVISORY

https://www.suse.com/support/update/announcement/2026/suse-su-20260231-1/