Skip to content
OpenAdvisories
Medium ELSA-2025-7457 1 CVE

Moderate: exiv2 security update (Oracle Linux 10)

Published Jun 27, 2025 · Updated Jun 27, 2025

Ecosystem: Oracle Linux

Summary

[0.28.3-3.2]
- Revert: remove rpath patch
Resolves: RHEL-80106
- Fix CVE-2025-26623 exiv2: Use After Free
Resolves: RHEL-80106

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 10 exiv2 0:0.28.3-3.el10_0.2
Oracle Linux · 10 exiv2-devel 0:0.28.3-3.el10_0.2
Oracle Linux · 10 exiv2-doc 0:0.28.3-3.el10_0.2
Oracle Linux · 10 exiv2-libs 0:0.28.3-3.el10_0.2

Vulnerabilities 1

  • Medium 5.3
    CVE-2025-26623

    Use After Free in Exiv2

    Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A heap buffer overflow was found in Exiv2 versions v0.28.0 to v0.28.4. Versions prior to v0.28.0, such as v0.27.7, are **not** affected…

    Exiv2 exiv2 exiv2 exiv2 Debian Azure Linux Alpine PyPI