Ubuntu 21.04 USN-4941-1 Moderate: Exiv2 Code Execution Threat

ubuntu

May 10, 2021

Several security issues were fixed in Exiv2.

Summary

Several security issues were fixed in Exiv2.

Software Description:

- exiv2: EXIF/IPTC/XMP metadata manipulation tool

Details:

It was discovered that Exiv2 incorrectly handled certain images.

An attacker could possibly use this issue to execute arbitrary code or cause

a crash. (CVE-2021-29457)

It was discovered that Exiv2 incorrectly handled certain images.

An attacker could possibly use this issue to cause a denial of service.

(CVE-2021-29458, CVE-2021-29470)

It was discovered that Exiv2 incorrectly handled certain images.

An attacker could possibly use this issue to execute arbitrary code or

cause a crash. (CVE-2021-3482)

Topics Covered

security advisory moderate denial of service security issue code execution DoS Ubuntu exiv2 Exiv2

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 21.04:
  libexiv2-27                     0.27.3-3ubuntu1.1

Ubuntu 20.10:
  libexiv2-27                     0.27.3-3ubuntu0.2

Ubuntu 20.04 LTS:
  libexiv2-27                     0.27.2-8ubuntu2.2

Ubuntu 18.04 LTS:
  libexiv2-14                     0.25-3.1ubuntu0.18.04.7

Ubuntu 16.04 ESM:
  libexiv2-14                     0.25-2.1ubuntu16.04.7+esm1

In general, a standard system update will make all the necessary changes.