Fixed in gwenview version 21.12.1.
---
gwenview (4:21.12.1-0ubuntu1) jammy; urgency=medium
* New upstream release (21.12.1)
-- Rik Mills Thu, 06 Jan 2022 10:21:02 +
** Changed in: gwenview (Ubuntu)
Importance: Undecided => Medium
** Changed in: gwenview (Ubuntu)
Status:
This bug was fixed in the package exiv2 - 0.27.2-8ubuntu2.7
---
exiv2 (0.27.2-8ubuntu2.7) focal-security; urgency=medium
* SECURITY REGRESSION: fix out of range access
* Bugfix: Fix regression introduced when fixing CVE-2021-37620 (LP:
#1941752)
-
This bug was fixed in the package exiv2 - 0.27.3-3ubuntu1.6
---
exiv2 (0.27.3-3ubuntu1.6) hirsute-security; urgency=medium
* SECURITY REGRESSION: out of range access that may cause a crash
- debian/patches/CVE-2021-37620-4.patch: fix out of range access that may
cause a
This bug was fixed in the package exiv2 - 0.27.3-3ubuntu4.1
---
exiv2 (0.27.3-3ubuntu4.1) impish-security; urgency=medium
* SECURITY REGRESSION: out of range access that may cause a crash
- debian/patches/CVE-2021-37620-4.patch: fix out of range access that may
cause a
Sure thing, working on it, till Tuesday it will be done as I need to
test it and so for all releases.
Thanks
** Changed in: exiv2 (Ubuntu)
Assignee: Ubuntu Security Team (ubuntu-security) => Leonidas S. Barbosa
(leosilvab)
--
You received this bug notification because you are a member of
@leosilva - as you did the original update for exiv2 could you please
sponsor the attached debdiff? Thanks.
** Changed in: exiv2 (Ubuntu)
Assignee: (unassigned) => Ubuntu Security Team (ubuntu-security)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is
** Changed in: exiv2 (Ubuntu)
Importance: Undecided => High
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1941752
Title:
Regression: exiv2 0.27.3-3ubuntu1.5 makes Gwenview crash when opening
The attachment "1-0.27.2-8ubuntu2.7.debdiff" seems to be a debdiff. The
ubuntu-sponsors team has been subscribed to the bug report so that they
can review and hopefully sponsor the debdiff. If the attachment isn't a
patch, please remove the "patch" flag from the attachment, remove the
"patch"
This is a debdiff applicable for focal-security. This backports an
upstream fix for the regression introduced when fixing CVE-2021-37620. I
build it locally in pbuilder and it fixes the crash in gwenview as
expected.
** Patch added: "1-0.27.2-8ubuntu2.7.debdiff"
** Changed in: gwenview
Status: Unknown => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1941752
Title:
Regression: exiv2 0.27.3-3ubuntu1.5 makes Gwenview crash when opening
Fixed upstream on Sept, 22:
https://github.com/Exiv2/exiv2/commit/8a1e949bff482f74599f60b8ab518442036b1834#diff-b28a1f0018497d794db6df47daa5413371c3e933681f9c126d447f90d30084d8
How long will we have to wait to see this fixed in the Ubuntu
repositories? This is a real showstopper bug.
--
You
Downgrading to libexiv2-27 0.27.2-8ubuntu2 solved the problem.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1941752
Title:
Regression: exiv2 0.27.3-3ubuntu1.5 makes Gwenview crash when opening
This is not just darktable.
I have files that work fine, while some other always crash. The only
constant is that all files were created on a Nikon camera.
Files that crash include some, but not all: Raw NEF; JPEGs created by
processing NEF files on Windows using Nikon software; JPEGs created
Confirmed on Ubuntu 18.04.6 LTS i686.
** Tags added: i686
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1941752
Title:
Regression: exiv2 0.27.3-3ubuntu1.5 makes Gwenview crash when opening
similar problem with Gthumb 3.11 and exiv2 0.27.3-3ubuntu1.5 on Ubuntu
21.04 and jpg generated with darktable.
gthumb crash:
terminate called after throwing an instance of 'std::out_of_range'
what(): basic_string:At __n (which is 19) >= this->size() (which is 19)
--
You received this bug
Launchpad has imported 5 comments from the remote bug at
https://bugs.kde.org/show_bug.cgi?id=441121.
If you reply to an imported comment from within Launchpad, your comment
will be sent to the remote bug automatically. Read more about
Launchpad's inter-bugtracker facilities at
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: exiv2 (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1941752
Title:
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: gwenview (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1941752
Title:
gwenview crashes every time when I try to open any image. Not darktable
related. It started after some regular apt update done a few weeks ago.
I had 18.04 LTS, so decided to upgrade to latest LTS (Focal). And to my
surprise the same error still exists:
terminate called after throwing an instance
The following change in CVE-2021-37620-3.patch is responsible:
--- exiv2-0.27.3.orig/src/tags_int.cpp
+++ exiv2-0.27.3/src/tags_int.cpp
@@ -2865,7 +2865,7 @@ namespace Exiv2 {
}
std::string stringValue = value.toString();
-if (stringValue[19] == 'Z') {
+if
Relevant terminal output from crash:
terminate called after throwing an instance of 'std::out_of_range'
what(): basic_string::at: __n (which is 19) >= this->size() (which is 19)
KCrash: crashing... crashRecursionCounter = 2
KCrash: Application Name = gwenview path = /usr/bin pid = 108229
--
CVE-2021-37620-3.patch is responsible.
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-37620
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1941752
Title:
Regression: exiv2
** Also affects: gwenview (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1941752
Title:
Regression: exiv2 0.27.3-3ubuntu1.5 makes Gwenview crash
23 matches
Mail list logo
