USN-3852-1: Exiv2 vulnerabilities exiv2 vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 18.10 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary Several security issues were fixed in Exiv2. Software Description exiv2 – EXIF/IPTC/XMP metadata manipulation tool Details It was discovered that Exiv2 incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. CVE-2017-9239 only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2017-11591, CVE-2017-11683, CVE-2017-14859, CVE-2017-14862, CVE-2017-14864, CVE-2017-17669, CVE-2017-9239, CVE-2018-16336, CVE-2018-1758) Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 18.10 exiv2 – 0.25-4ubuntu0.1 libexiv2-14 – 0.25-4ubuntu0.1 Ubuntu 18.04 LTS exiv2 – 0.25-3.1ubuntu0.18.04.2 libexiv2-14 – 0.25-3.1ubuntu0.18.04.2 Ubuntu 16.04 LTS exiv2 – 0.25-2.1ubuntu16.04.3 libexiv2-14 – 0.25-2.1ubuntu16.04.3 Ubuntu 14.04 LTS exiv2 – 0.23-1ubuntu2.2 libexiv2-12 – 0.23-1ubuntu2.2 To update your system, [ more… ]