USN-4941-1: Exiv2 vulnerabilities
10 May 2021
Several security issues were fixed in Exiv2.
Releases
Packages
- exiv2 - EXIF/IPTC/XMP metadata manipulation tool
Details
It was discovered that Exiv2 incorrectly handled certain images.
An attacker could possibly use this issue to execute arbitrary code or cause
a crash. (CVE-2021-29457)
It was discovered that Exiv2 incorrectly handled certain images.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2021-29458, CVE-2021-29470)
It was discovered that Exiv2 incorrectly handled certain images.
An attacker could possibly use this issue to execute arbitrary code or
cause a crash. (CVE-2021-3482)
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 21.04
Ubuntu 20.10
Ubuntu 20.04
Ubuntu 18.04
Ubuntu 16.04
-
libexiv2-14
-
0.25-2.1ubuntu16.04.7+esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.