Alerts This Week
Warning Icon 1 1,394
Alerts This Week
Warning Icon 1 1,394

Ubuntu 25.10 Exiv2 Denial Of Service Regression USN-8103-2

ubuntu
Calendar Grey March 19, 2026
Dist Ubuntu Esm H88
Exiv2 suffers from regressions affecting multiple Ubuntu versions requiring urgent fixes for denial of service.
USN-8103-1 introduced a regression in Exiv2

Summary

USN-8103-1 introduced a regression in Exiv2

Software Description:

- exiv2: EXIF/IPTC/XMP metadata manipulation tool

Details:

USN-8103-1 fixed vulnerabilities in Exiv2. The update caused a regression

for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and

Ubuntu 25.10. This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

It was discovered that Exiv2 did not correctly handle reading certain

buffers. An attacker could possibly use this issue to leak sensitive

information. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04

LTS. (CVE-2020-18771)

Wen Cheng discovered that Exiv2 did not correctly handle certain memory

allocation. If a user or system were tricked into opening a specially

crafted file, an attacker could possibly use this issue to cause a denial

of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.

(CVE-2020-18899)

It was discovered that Exiv2 did not correctly handle writing certain

...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service security issue Ubuntu regression exiv2

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  exiv2                           0.28.5+dfsg-1ubuntu0.3
  libexiv2-28                     0.28.5+dfsg-1ubuntu0.3
  libexiv2-dev                    0.28.5+dfsg-1ubuntu0.3

Ubuntu 24.04 LTS
  exiv2                           0.27.6-1ubuntu0.3
  libexiv2-27                     0.27.6-1ubuntu0.3
  libexiv2-dev                    0.27.6-1ubuntu0.3

Ubuntu 22.04 LTS
  exiv2                           0.27.5-3ubuntu1.3
  libexiv2-27                     0.27.5-3ubuntu1.3
  libexiv2-dev                    0.27.5-3ubuntu1.3

Ubuntu 20.04 LTS
  exiv2                           0.27.2-8ubuntu2.7+esm3
                                  Available with Ubuntu Pro
  libexiv2-27                     0.27.2-8ubuntu2.7+esm3
                                  Available with Ubuntu Pro
  libexiv2-dev                    0.27.2-8ubuntu2.7+esm3
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-8103-2

https://ubuntu.com/security/notices/USN-8103-1

CVE-2025-55304, https://bugs.launchpad.net/ubuntu/+source/gimp/+bug/2144731

Severity
important
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-8103-2

Topics%20covered

Topics Covered

security advisory denial of service security issue Ubuntu regression exiv2

Package Information

https://launchpad.net/ubuntu/+source/exiv2/0.28.5+dfsg-1ubuntu0.3
https://launchpad.net/ubuntu/+source/exiv2/0.27.6-1ubuntu0.3
https://launchpad.net/ubuntu/+source/exiv2/0.27.5-3ubuntu1.3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here