--===============6296749807862926206==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature";
 boundary="huq684BweRXVnRxX"
Content-Disposition: inline


--huq684BweRXVnRxX
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

==========================================================================
Ubuntu Security Notice USN-5043-1
August 17, 2021

exiv2 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 21.04
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 ESM

Summary:

Several security issues were fixed in Exiv2.

Software Description:
- exiv2: EXIF/IPTC/XMP metadata manipulation tool

Details:

It was discovered that Exiv2 incorrectly handled certain image files.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2021-32815, CVE-2021-34334, CVE-2021-37620, CVE-2021-37622)

It was discovered that Exiv2 incorrectly handled certain image files.
An attacker could possibly use this issue to cause a denial of service.
These issues only affected Ubuntu 20.04 LTS and Ubuntu 21.04.
(CVE-2021-34335, CVE-2021-37615, CVE-2021-37616, CVE-2021-37618,
CVE-2021-37619, CVE-2021-37621, CVE-2021-37623)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 21.04:
  libexiv2-27                     0.27.3-3ubuntu1.5

Ubuntu 20.04 LTS:
  libexiv2-27                     0.27.2-8ubuntu2.6

Ubuntu 18.04 LTS:
  libexiv2-14                     0.25-3.1ubuntu0.18.04.11

Ubuntu 16.04 ESM:
  libexiv2-14                     0.25-2.1ubuntu16.04.7+esm4

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-5043-1
  CVE-2021-32815, CVE-2021-34334, CVE-2021-34335, CVE-2021-37615,
  CVE-2021-37616, CVE-2021-37618, CVE-2021-37619, CVE-2021-37620,
  CVE-2021-37621, CVE-2021-37622, CVE-2021-37623

Package Information:
  https://launchpad.net/ubuntu/+source/exiv2/0.27.3-3ubuntu1.5
  https://launchpad.net/ubuntu/+source/exiv2/0.27.2-8ubuntu2.6
  https://launchpad.net/ubuntu/+source/exiv2/0.25-3.1ubuntu0.18.04.11

--huq684BweRXVnRxX
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=mn2s
-----END PGP SIGNATURE-----

--huq684BweRXVnRxX--


--===============6296749807862926206==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

-- 
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce