Opened 5 years ago
Closed 5 years ago
#15528 closed enhancement (fixed)
libexif-0.6.23
| Reported by: | Bruce Dubbs | Owned by: | Bruce Dubbs |
|---|---|---|---|
| Priority: | elevated | Milestone: | 11.1 |
| Component: | BOOK | Version: | git |
| Severity: | medium | Keywords: | |
| Cc: |
Description
New point version.
Change History (4)
comment:1 by , 5 years ago
| Owner: | changed from to |
|---|---|
| Status: | new → assigned |
comment:2 by , 5 years ago
| Priority: | normal → elevated |
|---|
comment:3 by , 5 years ago
The patch for the previous version has been incorporated in this release.
comment:4 by , 5 years ago
| Resolution: | → fixed |
|---|---|
| Status: | assigned → closed |
Fixed at commit b42891ad411e287ac59973dbc4e021fae6e83b08
Package Updates.
Update to libatomic_ops-7.6.12.
Update to sudo-1.9.8.
Update to libass-0.15.2.
Update to libexif-0.6.23.
Update to ModemManager-1.18.0.
Note:
See TracTickets
for help on using tickets.

libexif-0.6.23 (2021-09-12):
EXIF_TAG_STANDARD_OUTPUT_SENSITIVITY EXIF_TAG_RECOMMENDED_EXPOSURE_INDEX EXIF_TAG_ISO_SPEED EXIF_TAG_ISO_SPEEDLatitudeYYY EXIF_TAG_ISO_SPEEDLatitudeZZZ EXIF_TAG_OFFSET_TIME EXIF_TAG_OFFSET_TIME_ORIGINAL EXIF_TAG_OFFSET_TIME_DIGITIZED EXIF_TAG_IMAGE_DEPTHCVE-2020-0198: unsigned integer overflow in exif_data_load_data_content CVE-2020-0452: compiler optimization could remove an a bufferoverflow check, making a buffer overflow possible with some EXIF tags some more denial of service (compute time or stack exhaustion) counter-measures added that avoid minutes of decoding time with malformed files found by OSS-Fuzz