Hello,
Please consider demoting exiv2 to universe.
http://dev.exiv2.org/issues/1248
The upstream author appears overwhelmed with the task of hardening exiv2 for use against untrusted inputs and thus far (~nine months) no users have provided the project with patches against known issues.
$ reverse-depends src:exiv2 Reverse-Recommends ================== * geeqie (for exiv2)
Reverse-Depends =============== * cameraplugin-aal [amd64 arm64 armhf i386] (for libexiv2-14) * darktable [amd64 arm64] (for libexiv2-14) * decopy (for exiv2) * digikam-private-libs (for libexiv2-14) * ffdiaporama (for libexiv2-14) * forensics-extra (for exiv2) * gallery-app (for libexiv2-14) * geeqie (for libexiv2-14) * gimp-lensfun (for libexiv2-14) * gimp-ufraw (for libexiv2-14) * gnome-color-manager (for libexiv2-14) * gnome-commander (for libexiv2-14) * gpscorrelate (for libexiv2-14) * gpscorrelate-gui (for libexiv2-14) * gthumb (for libexiv2-14) * gwenview (for libexiv2-14) * hugin (for libexiv2-14) * hugin-tools (for libexiv2-14) * kde-runtime (for libexiv2-14) * kio-extras (for libexiv2-14) * kphotoalbum (for libexiv2-14) * krename (for libexiv2-14) * krita [amd64 i386 ppc64el s390x] (for libexiv2-14) * libextractor3 (for libexiv2-14) * libgexiv2-2 (for libexiv2-14) * libgexiv2-dev (for libexiv2-dev) * libkexiv2-11v5 (for libexiv2-14) * libkf5filemetadata-bin (for libexiv2-14) * libkf5kexiv2-15.0.0 (for libexiv2-14) * libkfilemetadata4 (for libexiv2-14) * libmyth-0.28-0 (for libexiv2-14) * libnomacsloader3 (for libexiv2-14) * libstreamanalyzer0v5 (for libexiv2-14) * luminance-hdr (for libexiv2-14) * merkaartor (for libexiv2-14) * pdf2djvu (for libexiv2-14) * phototonic (for libexiv2-14) * pinot (for libexiv2-14) * python-pyexiv2 (for libexiv2-14) * qtdeclarative5-ubuntu-ui-extras0.2 (for libexiv2-14) * rapid-photo-downloader (for exiv2) * ufraw (for libexiv2-14) * ufraw-batch (for libexiv2-14) * viewnior (for libexiv2-14)
Thanks
Hello,
Please consider demoting exiv2 to universe.
http:// dev.exiv2. org/issues/ 1248
The upstream author appears overwhelmed with the task of hardening exiv2 for use against untrusted inputs and thus far (~nine months) no users have provided the project with patches against known issues.
$ reverse-depends src:exiv2
Reverse-Recommends
==================
* geeqie (for exiv2)
Reverse-Depends private- libs (for libexiv2-14) ata-bin (for libexiv2-14) er0v5 (for libexiv2-14) ubuntu- ui-extras0. 2 (for libexiv2-14) downloader (for exiv2)
===============
* cameraplugin-aal [amd64 arm64 armhf i386] (for libexiv2-14)
* darktable [amd64 arm64] (for libexiv2-14)
* decopy (for exiv2)
* digikam-
* ffdiaporama (for libexiv2-14)
* forensics-extra (for exiv2)
* gallery-app (for libexiv2-14)
* geeqie (for libexiv2-14)
* gimp-lensfun (for libexiv2-14)
* gimp-ufraw (for libexiv2-14)
* gnome-color-manager (for libexiv2-14)
* gnome-commander (for libexiv2-14)
* gpscorrelate (for libexiv2-14)
* gpscorrelate-gui (for libexiv2-14)
* gthumb (for libexiv2-14)
* gwenview (for libexiv2-14)
* hugin (for libexiv2-14)
* hugin-tools (for libexiv2-14)
* kde-runtime (for libexiv2-14)
* kio-extras (for libexiv2-14)
* kphotoalbum (for libexiv2-14)
* krename (for libexiv2-14)
* krita [amd64 i386 ppc64el s390x] (for libexiv2-14)
* libextractor3 (for libexiv2-14)
* libgexiv2-2 (for libexiv2-14)
* libgexiv2-dev (for libexiv2-dev)
* libkexiv2-11v5 (for libexiv2-14)
* libkf5filemetad
* libkf5kexiv2-15.0.0 (for libexiv2-14)
* libkfilemetadata4 (for libexiv2-14)
* libmyth-0.28-0 (for libexiv2-14)
* libnomacsloader3 (for libexiv2-14)
* libstreamanalyz
* luminance-hdr (for libexiv2-14)
* merkaartor (for libexiv2-14)
* pdf2djvu (for libexiv2-14)
* phototonic (for libexiv2-14)
* pinot (for libexiv2-14)
* python-pyexiv2 (for libexiv2-14)
* qtdeclarative5-
* rapid-photo-
* ufraw (for libexiv2-14)
* ufraw-batch (for libexiv2-14)
* viewnior (for libexiv2-14)
Thanks