[USN-8103-2] Exiv2 regression

[noreply+usn-bot at canonical.com]

==========================================================================
Ubuntu Security Notice USN-8103-2
March 19, 2026

exiv2 regression
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS

Summary:

USN-8103-1 introduced a regression in Exiv2

Software Description:
- exiv2: EXIF/IPTC/XMP metadata manipulation tool

Details:

USN-8103-1 fixed vulnerabilities in Exiv2. The update caused a regression
for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and
Ubuntu 25.10. This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

 It was discovered that Exiv2 did not correctly handle reading certain
 buffers. An attacker could possibly use this issue to leak sensitive
 information. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04
 LTS. (CVE-2020-18771)

 Wen Cheng discovered that Exiv2 did not correctly handle certain memory
 allocation. If a user or system were tricked into opening a specially
 crafted file, an attacker could possibly use this issue to cause a denial
 of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.
 (CVE-2020-18899)

 It was discovered that Exiv2 did not correctly handle writing certain
 metadata. If a user or system were tricked into opening a specially crafted
 file, an attacker could possibly use this issue to cause a denial of
 service. (CVE-2025-54080)

 It was discovered that Exiv2 did not correctly handle parsing certain
 metadata. If a user or system were tricked into opening a specially crafted
 file, an attacker could possibly use this issue to cause a denial of
 service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS,
 Ubuntu 24.04 LTS and Ubuntu 25.10. (CVE-2025-55304)

 It was discovered that Exiv2 did not correctly handle parsing certain
 images. If a user or system were tricked into opening a specially crafted
 file, an attacker could possibly use this issue to cause a denial of
 service. (CVE-2026-25884)

 It was discovered that Exiv2 did not correctly handle previewing certain
 images. An attacker could possibly use this issue to cause a denial of
 service. (CVE-2026-27596)

 It was discovered that Exiv2 did not correctly handle certain integer
 arithmetic. An attacker could possibly use this issue to cause a denial of
 service. (CVE-2026-27631)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  exiv2                           0.28.5+dfsg-1ubuntu0.3
  libexiv2-28                     0.28.5+dfsg-1ubuntu0.3
  libexiv2-dev                    0.28.5+dfsg-1ubuntu0.3

Ubuntu 24.04 LTS
  exiv2                           0.27.6-1ubuntu0.3
  libexiv2-27                     0.27.6-1ubuntu0.3
  libexiv2-dev                    0.27.6-1ubuntu0.3

Ubuntu 22.04 LTS
  exiv2                           0.27.5-3ubuntu1.3
  libexiv2-27                     0.27.5-3ubuntu1.3
  libexiv2-dev                    0.27.5-3ubuntu1.3

Ubuntu 20.04 LTS
  exiv2                           0.27.2-8ubuntu2.7+esm3
                                  Available with Ubuntu Pro
  libexiv2-27                     0.27.2-8ubuntu2.7+esm3
                                  Available with Ubuntu Pro
  libexiv2-dev                    0.27.2-8ubuntu2.7+esm3
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8103-2
  https://ubuntu.com/security/notices/USN-8103-1
  CVE-2025-55304, https://bugs.launchpad.net/ubuntu/+source/gimp/+bug/2144731

Package Information:
  https://launchpad.net/ubuntu/+source/exiv2/0.28.5+dfsg-1ubuntu0.3
  https://launchpad.net/ubuntu/+source/exiv2/0.27.6-1ubuntu0.3
  https://launchpad.net/ubuntu/+source/exiv2/0.27.5-3ubuntu1.3
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-security-announce/attachments/20260319/96055ba1/attachment.sig>