From mboxrd@z Thu Jan 1 00:00:00 1970 From: Adolf Belka To: development@lists.ipfire.org Subject: [PATCH] libexif: Update to version 0.6.24 Date: Tue, 27 Dec 2022 12:59:57 +0100 Message-ID: <20221227120002.12161-6-adolf.belka@ipfire.org> In-Reply-To: <20221227120002.12161-1-adolf.belka@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============5822581315244816389==" List-Id: --===============5822581315244816389== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable - Update from version 0.6.22 to 0.6.24 - Update of rootfile not required - source file no longer provided in xz format - changed to bz2 - Changelog (Two CVE's fixed in 0.6.23) libexif-0.6.24 (2021-11-25): * Translation updates: sr, vi, pl, uk, french * fixed regression in exif_data_load_data which could not load EXIF in JP= EG data anymore * Decode lots of Canon tag names * removed empty strings from translation (empty string would translate to= the PO info header) * various warning removals and code improvements * added sample "persistent" afl fuzzer (100x faster than normal afl fuzze= r) libexif-0.6.23 (2021-09-12): * Translation updates: es, pl, uk, fr * EXIF_TAG_SENSITIVITY_TYPE decoder added, added some more Exif 2.3 tags: - EXIF_TAG_STANDARD_OUTPUT_SENSITIVITY - EXIF_TAG_RECOMMENDED_EXPOSURE_INDEX - EXIF_TAG_ISO_SPEED - EXIF_TAG_ISO_SPEEDLatitudeYYY - EXIF_TAG_ISO_SPEEDLatitudeZZZ - EXIF_TAG_OFFSET_TIME - EXIF_TAG_OFFSET_TIME_ORIGINAL - EXIF_TAG_OFFSET_TIME_DIGITIZED - EXIF_TAG_IMAGE_DEPTH * be more relaxed to out of order JPG / EXIF dataheaders in files generate= d by some tools * default GPS IFD table added * Decode more Nikon Makernote tag names * Added Apple iOS Makernote * Security fixes: * CVE-2020-0198: unsigned integer overflow in exif_data_load_data_content * CVE-2020-0452: compiler optimization could remove an a bufferoverflow check, making a buffer overflow possible with some EXIF tags * some more denial of service (compute time or stack exhaustion) counter= -measures added that avoid minutes of decoding time with malformed files found by OSS-Fuzz Signed-off-by: Adolf Belka --- lfs/libexif | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/lfs/libexif b/lfs/libexif index c23dfd573..c89232b1c 100644 --- a/lfs/libexif +++ b/lfs/libexif @@ -1,7 +1,7 @@ ############################################################################= ### # = # # IPFire.org - A linux based firewall = # -# Copyright (C) 2007-2018 IPFire Team = # +# Copyright (C) 2007-2022 IPFire Team = # # = # # This program is free software: you can redistribute it and/or modify = # # it under the terms of the GNU General Public License as published by = # @@ -26,15 +26,15 @@ include Config =20 SUMMARY =3D An EXIF Tag Parsing Library for Digital Cameras =20 -VER =3D 0.6.22 +VER =3D 0.6.24 =20 THISAPP =3D libexif-$(VER) -DL_FILE =3D $(THISAPP).tar.xz +DL_FILE =3D $(THISAPP).tar.bz2 DL_FROM =3D $(URL_IPFIRE) DIR_APP =3D $(DIR_SRC)/$(THISAPP) TARGET =3D $(DIR_INFO)/$(THISAPP) PROG =3D libexif -PAK_VER =3D 2 +PAK_VER =3D 3 =20 DEPS =3D =20 @@ -48,7 +48,7 @@ objects =3D $(DL_FILE) =20 $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE) =20 -$(DL_FILE)_BLAKE2 =3D 3771dcf2d6a9d9a63e2d3fcdd49487bec7af45d1d18aef1bf3d427= 893b0cfc464fab37adfbfa549571a58540c7c1eb402724afe05c36baa51a6b7f19ee17ed2b +$(DL_FILE)_BLAKE2 =3D 75d3a2b4fefd7b7706226e70d31250ef7e99eeb81a4839ddc36cc9= e3180534542d8a02851f8e6fd5034bbc925a616ead8c4bfb0cce8bc5886c3ec54811914a6b =20 install : $(TARGET) =20 --=20 2.39.0 --===============5822581315244816389==--