exempi 2.4.5-2ubuntu0.1: exempi 2.4.5-2ubuntu0.1 for Ubuntu 18.04.6 LTS (bionic)

exempi 2.4.5-2ubuntu0.1, released May 2, 2022, fixes 23 CVEs in exempi. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

7.8

Base score, 0 to 10

Highest EPSS

0.0579

93rd percentile

Priority of the 23 CVEs

Patch now 0
                                Urgent 0
                                High 4
                                Routine 19

Fixed package versions

Product	Release	Fixed in
exempi	Ubuntu 18.04.6 LTS (bionic)	2.4.5-2ubuntu0.1

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2021-42529	exempi: XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially...	7.8	0.0394	None reported
High	CVE-2021-42530	exempi: XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially...	7.8	0.0394	None reported
High	CVE-2021-42531	exempi: XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially...	7.8	0.0394	None reported
High	CVE-2021-42532	exempi: XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially...	7.8	0.0394	None reported
Routine	CVE-2021-36051	libexempi3: XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in...	n/a	0.0579	None reported
Routine	CVE-2021-36050	exempi: XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in...	n/a	0.0537	None reported
Routine	CVE-2021-39847	exempi: XMP Toolkit SDK version 2020.1 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially r...	n/a	0.0537	None reported
Routine	CVE-2021-36056	exempi: XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in...	n/a	0.0436	None reported
Routine	CVE-2021-36054	exempi: XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in...	n/a	0.0373	None reported
Routine	CVE-2021-36052	exempi: XMP Toolkit version 2020.1 (and earlier) is affected by a memory corruption vulnerability, potentially resulting in a...	n/a	0.0322	None reported
Routine	CVE-2021-36055	exempi: XMP Toolkit SDK versions 2020.1 (and earlier) are affected by a use-after-free vulnerability that could result in arb...	n/a	0.0274	None reported
Routine	CVE-2021-36047	exempi: XMP Toolkit SDK version 2020.1 (and earlier) is affected by an Improper Input Validation vulnerability potentially re...	n/a	0.0270	None reported
Routine	CVE-2021-36048	exempi: XMP Toolkit SDK version 2020.1 (and earlier) is affected by an Improper Input Validation vulnerability potentially re...	n/a	0.0270	None reported
Routine	CVE-2021-36064	exempi: XMP Toolkit version 2020.1 (and earlier) is affected by a Buffer Underflow vulnerability which could result in arbitr...	n/a	0.0270	None reported
Routine	CVE-2021-36046	exempi: XMP Toolkit version 2020.1 (and earlier) is affected by a memory corruption vulnerability, potentially resulting in a...	n/a	0.0248	None reported
Routine	CVE-2021-40732	exempi: XMP Toolkit version 2020.1 (and earlier) is affected by a null pointer dereference vulnerability that could result in...	n/a	0.0244	None reported
Routine	CVE-2021-40716	exempi: XMP Toolkit SDK versions 2021.07 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to...	n/a	0.0232	None reported
Routine	CVE-2018-12648	exempi: The WEBP::GetLE32 function in XMPFiles/source/FormatSupport/WEBP_Support.hpp in Exempi 2.4.5 has a NULL pointer deref...	n/a	0.0224	None reported
Routine	CVE-2021-36053	exempi: XMP Toolkit SDK versions 2020.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to...	n/a	0.0196	None reported
Routine	CVE-2021-42528	exempi: XMP Toolkit 2021.07 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially cr...	5.5	0.0195	None reported
Routine	CVE-2021-36058	exempi: XMP Toolkit SDK version 2020.1 (and earlier) is affected by an Integer Overflow vulnerability potentially resulting i...	n/a	0.0195	None reported
Routine	CVE-2021-36045	exempi: exempi - security update	n/a	0.0193	None reported
Routine	CVE-2021-36057	exempi: XMP Toolkit SDK version 2020.1 (and earlier) is affected by a write-what-where condition vulnerability caused during...	n/a	0.0062	None reported

Also fixes CVE-2021-42532

libexempi3 2.4.5-2ubuntu0.1
libexempi3 on Ubuntu 18.04.6 LTS (bionic)
exempi 2.5.1-1ubuntu0.1
exempi on Ubuntu 20.04 LTS (focal)
exempi 2.5.2-1ubuntu0.22.04.1
exempi on Ubuntu 22.04.1 LTS (jammy)
libexempi8 2.5.1-1ubuntu0.1
libexempi8 on Ubuntu 20.04 LTS (focal)
libexempi8 2.5.2-1ubuntu0.22.04.1
libexempi8 on Ubuntu 22.04.1 LTS (jammy)
DEBIAN-CVE-2021-42532
exempi on Debian 12.15 (bookworm), Debian 13.5 (trixie), Debian 14

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/ubuntu-bionic-exempi-2.4.5-2ubuntu0.1">exempi 2.4.5-2ubuntu0.1 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.