Linux · Security advisory · November 9, 2021

ALSA-2021:4173: Security update for 4 packages

ALSA-2021:4173, released November 9, 2021, fixes 12 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0256

85th percentile

Priority of the 12 CVEs

Patch now 0
                                Urgent 0
                                High 12
                                Routine 0

Fixed package versions

Product	Release	Fixed in
exiv2	almalinux 8	0.27.4-5.el8
exiv2-devel	almalinux 8	0.27.4-5.el8
exiv2-doc	almalinux 8	0.27.4-5.el8
exiv2-libs	almalinux 8	0.27.4-5.el8

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2021-31292	compat-exiv2-026: Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata,...	7.8	0.0256	None reported
High	CVE-2021-3482	exiv2-libs: Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata,...	7.8	0.0230	None reported
High	CVE-2021-29457	exiv2: Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata,...	7.8	0.0215	None reported
High	CVE-2021-29473	exiv2: Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata,...	7.8	0.0168	None reported
High	CVE-2021-29470	exiv2: Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata,...	7.8	0.0157	None reported
High	CVE-2021-29458	exiv2: Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata,...	7.8	0.0157	None reported
High	CVE-2021-29464	exiv2: Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata,...	7.8	0.0150	None reported
High	CVE-2021-32617	exiv2: Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata,...	7.8	0.0117	None reported
High	CVE-2021-29463	exiv2: Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata,...	7.8	0.0112	None reported
High	CVE-2021-29623	exiv2: Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata,...	7.8	0.0110	None reported
High	CVE-2021-37618	exiv2: Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata,...	7.8	0.0098	None reported
High	CVE-2021-37619	exiv2: Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata,...	7.8	0.0098	None reported