id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
13665	libexif-0.6.22	Douglas R. Reno	Douglas R. Reno	"New point version

{{{
This is the 0.6.22 release of libexif.

It largely contains stability, security and bugfixes.

Some EXIF 2.3 tags have been added.

It is ABI compatible to 0.6.21 release.

    New translations: ms
    Updated translations for most languages
    Fixed C89 compatibility
    Fixed warnings on recent versions of autoconf
    Some useful EXIF 2.3 tag added:
        EXIF_TAG_GAMMA
        EXIF_TAG_COMPOSITE_IMAGE
        EXIF_TAG_SOURCE_IMAGE_NUMBER_OF_COMPOSITE_IMAGE
        EXIF_TAG_SOURCE_EXPOSURE_TIMES_OF_COMPOSITE_IMAGE
        EXIF_TAG_GPS_H_POSITIONING_ERROR
        EXIF_TAG_CAMERA_OWNER_NAME
        EXIF_TAG_BODY_SERIAL_NUMBER
        EXIF_TAG_LENS_SPECIFICATION
        EXIF_TAG_LENS_MAKE
        EXIF_TAG_LENS_MODEL
        EXIF_TAG_LENS_SERIAL_NUMBER
    Lots of fixes exposed by fuzzers like AFL, ClusterFuzz, OSSFuzz and others.
        CVE-2018-20030: Fix for recursion DoS
        CVE-2020-13114: Time consumption DoS when parsing canon array markers
        CVE-2020-13113: Potential use of uninitialized memory
        CVE-2020-13112: Various buffer overread fixes due to integer overflows in maker notes
        CVE-2020-0093: read overflow
        CVE-2019-9278: replaced integer overflow checks the compiler could optimize away by safer constructs
        CVE-2020-12767: fixed division by zero
        CVE-2016-6328: fixed integer overflow when parsing maker notes
        CVE-2017-7544: fixed buffer overread
}}}

This package seems to have moved to github as well."	enhancement	closed	high	10.0	BOOK	SVN	medium	fixed