[ubuntu/jammy-updates] exiv2 0.27.5-3ubuntu1.1 (Accepted)

[Ubuntu Archive Robot]

exiv2 (0.27.5-3ubuntu1.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Out of Bounds Read
    - debian/patches/CVE-2026-25884.patch: Fix out-of-bounds read
    - debian/patches/CVE-2026-27596.patch: Check for integer overflow.
    - CVE-2026-25884
    - CVE-2026-27596
  * SECURITY UPDATE: Denial of Service
    - debian/patches/CVE-2025-54080.patch: Better bounds checking
    - debian/patches/CVE-2026-27631.patch: Check for integer overflow
    - debian/patches/CVE-2025-55304-1.patch: Add new method
      appendIccProfile to fix quadratic performance issue
    - debian/patches/CVE-2025-55304-2.patch: Fix docstring
    - CVE-2025-54080
    - CVE-2026-27631
    - CVE-2025-55304

Date: 2026-03-16 02:02:10.715670+00:00
Changed-By: Bruce Cable <bruce.cable at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/exiv2/0.27.5-3ubuntu1.1
-------------- next part --------------
Sorry, changesfile not available.