SUSE-SU-2026:2837-1

Details

Description of the patch:

This update for libexif fixes the following issues

CVE-2026-40385: Fixed information disclosure and crashes via integer overflow in Nikon MakerNote handling (bsc#1262000)
CVE-2026-40386: Fixed denial of service and information disclosure via integer underflow in MakerNote decoding (bsc#1262001)
CVE-2026-32775: Fixed Buffer overwrite via integer underflow in MakerNotes decoding (bsc#1259755)

Affected Packages

libexif-devel

SUSE Linux Enterprise Desktop 15 SP7SUSE Linux Enterprise High Performance Computing 15 SP7SUSE Linux Enterprise Module for Desktop Applications 15 SP7SUSE Linux Enterprise Server 15 SP7SUSE Linux Enterprise Server for SAP Applications 15 SP7

Fixed in:

0.6.22-150000.5.12.1

libexif12

SUSE Linux Enterprise Desktop 15 SP7SUSE Linux Enterprise High Performance Computing 15 SP7SUSE Linux Enterprise Module for Desktop Applications 15 SP7SUSE Linux Enterprise Server 15 SP7SUSE Linux Enterprise Server for SAP Applications 15 SP7

Fixed in:

0.6.22-150000.5.12.1

libexif12-32bit

SUSE Linux Enterprise Module for Package Hub 15 SP7

Fixed in:

0.6.22-150000.5.12.1

References

ADVISORY

https://bugzilla.suse.com/1259755

ADVISORY

https://bugzilla.suse.com/1262000

ADVISORY