USN-3852-1: Exiv2 vulnerabilities
10 January 2019
Several security issues were fixed in Exiv2.
- exiv2 - EXIF/IPTC/XMP metadata manipulation tool
It was discovered that Exiv2 incorrectly handled certain files.
An attacker could possibly use this issue to cause a denial of service.
CVE-2017-9239 only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS.
(CVE-2017-11591, CVE-2017-11683, CVE-2017-14859, CVE-2017-14862,
CVE-2017-14864, CVE-2017-17669, CVE-2017-9239, CVE-2018-16336,
The problem can be corrected by updating your system to the following package versions:
In general, a standard system update will make all the necessary changes.