Ubuntu Security Notice 4396-1 - It was discovered that libexif incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information. It was discovered that libexif incorrectly handled certain inputs. An attacker could possibly use this issue to cause a remote denial of service. It was discovered that libexif incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information or cause a crash. Various other issues were also addressed.
e080558761a105024feebba02610f6c5581c07eff90a1cb0d2371deb7e830972
==========================================================================
Ubuntu Security Notice USN-4396-1
June 16, 2020
libexif vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 20.04 LTS
- Ubuntu 19.10
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
- Ubuntu 14.04 ESM
- Ubuntu 12.04 ESM
Summary:
Several security issues were fixed in libexif.
Software Description:
- libexif: library to parse EXIF files
Details:
It was discovered that libexif incorrectly handled certain inputs.
An attacker could possibly use this issue to expose sensitive information.
(CVE-2020-0093, CVE-2020-0182)
It was discovered that libexif incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a remote denial of service.
(CVE-2020-0198)
It was discovered that libexif incorrectly handled certain inputs.
An attacker could possibly use this issue to expose sensitive information or
cause a crash. (CVE-2020-13112)
It was discovered that libexif incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a crash.
(CVE-2020-13113)
It was discovered libexif incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2020-13114)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 20.04 LTS:
libexif12 0.6.21-6ubuntu0.3
Ubuntu 19.10:
libexif12 0.6.21-5.1ubuntu0.5
Ubuntu 18.04 LTS:
libexif12 0.6.21-4ubuntu0.5
Ubuntu 16.04 LTS:
libexif12 0.6.21-2ubuntu0.5
Ubuntu 14.04 ESM:
libexif12 0.6.21-1ubuntu1+esm5
Ubuntu 12.04 ESM:
libexif12 0.6.20-2ubuntu0.6
After a standard system update you need to restart your session to effect the necessary changes.
References:
https://usn.ubuntu.com/4396-1
CVE-2020-0093, CVE-2020-0182, CVE-2020-0198, CVE-2020-13112,
CVE-2020-13113, CVE-2020-13114
Package Information:
https://launchpad.net/ubuntu/+source/libexif/0.6.21-6ubuntu0.3
https://launchpad.net/ubuntu/+source/libexif/0.6.21-5.1ubuntu0.5
https://launchpad.net/ubuntu/+source/libexif/0.6.21-4ubuntu0.5
https://launchpad.net/ubuntu/+source/libexif/0.6.21-2ubuntu0.5