{"id":"CLSA-2026-1787932207","summary":"Fix CVE(s): CVE-2020-18771, CVE-2026-25884, CVE-2026-27596","details":"   * SECURITY UPDATE: out-of-bounds read in the Nikon MakerNote printer\n     - debian/patches/CVE-2020-18771.patch: bound the nikonFocusarea[]\n       index in Nikon1MakerNote::print0x0088() with EXV_COUNTOF(), so a\n       crafted MakerNote cannot make the printer read a pointer from past\n       the end of the table (upstream 5e6c2855ce, via Debian DLA-3265-1).\n     - CVE-2020-18771\n   * SECURITY UPDATE: out-of-bounds read in the native preview loader\n     - debian/patches/CVE-2026-27596.patch: require sizeData \u003e= 28 in\n       LoaderNative::getData() before subtracting 28, so a Photoshop\n       preview IRB declaring a shorter payload cannot wrap the length to\n       nearly 4 GB (upstream 2cb728a850).\n     - CVE-2026-27596","modified":"2026-10-26T09:32:03.727514590Z","published":"2026-09-01T10:59:33Z","upstream":["CVE-2020-18771","CVE-2026-25884","CVE-2026-27596"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1787932207.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-18771"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25884"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27596"}],"affected":[{"package":{"name":"exiv2","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/exiv2?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25-3.1ubuntu0.18.04.11+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787932207.json"}},{"package":{"name":"libexiv2-14","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libexiv2-14?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25-3.1ubuntu0.18.04.11+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787932207.json"}},{"package":{"name":"libexiv2-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libexiv2-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25-3.1ubuntu0.18.04.11+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787932207.json"}},{"package":{"name":"libexiv2-doc","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libexiv2-doc?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25-3.1ubuntu0.18.04.11+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787932207.json"}}],"schema_version":"1.9.0"}