Linux · Security advisory · November 9, 2021

RLSA-2021:4173: exiv2 security update

RLSA-2021:4173, released November 9, 2021, fixes 12 CVEs in exiv2 (version 0:0.27.4-5.el8). None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0256

85th percentile

Priority of the 12 CVEs

Patch now 0
                                Urgent 0
                                High 12
                                Routine 0

Fixed package versions

Product	Release	Fixed in
exiv2	rocky 8	0:0.27.4-5.el8

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2021-31292	compat-exiv2-026: Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata,...	7.8	0.0256	None reported
High	CVE-2021-3482	exiv2-libs: Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata,...	7.8	0.0230	None reported
High	CVE-2021-29457	exiv2: Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata,...	7.8	0.0215	None reported
High	CVE-2021-29473	exiv2: Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata,...	7.8	0.0168	None reported
High	CVE-2021-29470	exiv2: Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata,...	7.8	0.0157	None reported
High	CVE-2021-29458	exiv2: Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata,...	7.8	0.0157	None reported
High	CVE-2021-29464	exiv2: Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata,...	7.8	0.0150	None reported
High	CVE-2021-32617	exiv2: Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata,...	7.8	0.0117	None reported
High	CVE-2021-29463	exiv2: Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata,...	7.8	0.0112	None reported
High	CVE-2021-29623	exiv2: Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata,...	7.8	0.0110	None reported
High	CVE-2021-37618	exiv2: Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata,...	7.8	0.0098	None reported
High	CVE-2021-37619	exiv2: Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata,...	7.8	0.0098	None reported