Your message dated Sat, 16 May 2020 08:20:40 +0000
with message-id <[email protected]>
and subject line Bug#960199: fixed in libexif 0.6.21-7
has caused the Debian Bug report #960199,
regarding libexif: CVE-2020-12767
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
960199: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=960199
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: libexif
Version: 0.6.21-6
Severity: important
Tags: security upstream
Forwarded: https://github.com/libexif/libexif/issues/31
Control: found -1 0.6.21-5.1+deb10u1
Control: found -1 0.6.21-2+deb9u1
Control: found -1 0.6.21-2
Hi,
The following vulnerability was published for libexif.
CVE-2020-12767[0]:
| exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-
| by-zero error.
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2020-12767
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12767
[1] https://github.com/libexif/libexif/issues/31
[2]
https://github.com/libexif/libexif/commit/e22f73064f804c94e90b642cd0db4697c827da72
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
Source: libexif
Source-Version: 0.6.21-7
Done: Hugh McMaster <[email protected]>
We believe that the bug you reported is fixed in the latest version of
libexif, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Hugh McMaster <[email protected]> (supplier of updated libexif package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 15 May 2020 23:23:07 +1000
Source: libexif
Architecture: source
Version: 0.6.21-7
Distribution: unstable
Urgency: medium
Maintainer: Debian PhotoTools Maintainers
<[email protected]>
Changed-By: Hugh McMaster <[email protected]>
Closes: 960199
Changes:
libexif (0.6.21-7) unstable; urgency=medium
.
* Team upload.
* Frederic Peters has stepped down as an Uploader. Thank you for your work!
* debian/control:
- Use debhelper-compat v13.
- Update Uploaders field.
* debian/copyright: Add information for files in contrib/examples.
* debian/patches/cve-2020-12767.patch:
- Prevent some possible divide-by-zero errors in exif-entry.c's
exif_entry_get_value() function (CVE-2020-12767) (Closes: #960199).
* debian/patches/exif-loader-undefined-behaviour.patch:
- Prevent undefined behaviour when left-shifting with type 'int'.
* debian/rules:
- Use dh_installdocs-indep override instead of dh_installdocs override.
- Remove embedded jquery.js file after installing documentation.
- Do not install the upstream ChangeLog.
* libexif12: Update source paths for documentation files.
* libexif-dev: Update source paths for documentation files.
* libexif-doc:
- Update source paths for documentation files.
- Install contrib/example source files.
* Add debian/not-installed file.
Checksums-Sha1:
33e334d330711d9b569583c266bffbcf0f606dea 2076 libexif_0.6.21-7.dsc
8f1f1492ba2a3ff7df0612f8854a7178ee54aa14 15412 libexif_0.6.21-7.debian.tar.xz
Checksums-Sha256:
70ca920f7ecffe28fd4819cf60ef14820893e3ee0dcd430effab052cd7727064 2076
libexif_0.6.21-7.dsc
6bf0f4070fd1df9c9f014349810d6abf5f349ac679c18ed21cbcb73dedc40cb3 15412
libexif_0.6.21-7.debian.tar.xz
Files:
3b2e7f5212985bb23fc7464d848753fe 2076 libs optional libexif_0.6.21-7.dsc
8df2f509284681cad13057494bec3aed 15412 libs optional
libexif_0.6.21-7.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=effl
-----END PGP SIGNATURE-----
--- End Message ---
--
Pkg-phototools-devel mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-phototools-devel
