libexif (0.6.20-2ubuntu0.7) precise-security; urgency=medium
* SECURITY UPDATE: Buffer overflow
- debian/patches/CVE-2020-0452.patch: fixed a incorrect overflow check that
could be
optimized away in libexif/exif-entry.c.
- CVE-2020-0452
libexif (0.6.20-2ubuntu0.6) precise-security; urgency=medium
* SECURITY UPDATE: Out of bounds read
- debian/patches/CVE-2020-0093.patch: fix read
buffer overflow making sure the number of bytes being
copied from does not exceed the source buffer size in
libexif/exif-data.c.
- CVE-2020-0093
* SECURITY UPDATE: Out of bounds read
- debian/patches/CVE-2020-13112.patch: fix MakerNote tag size
overflow check for a size overflow while reading tags in
libexif/canon/exif-mnote-data-canon.c,
libexif/fuji/exif/mnote-data-fuji.c,
libexif/olympus/exif-mnote-data-olympus.c,
libexif/pentax/exif-mnote-data-pentax.c.
- CVE-2020-13112
* SECURITY UPDATE: Possibly crash and potential use-after-free
- debian/patches/CVE-2020-13113.patch: ensures that an uninitialized
pointer is not dereferenced later in the case where the number of
components is 0 in libexif/canon/exif-mnote-data-canon.c,
libexif/fuji/exif-mnote-data-fuji.c,
libexif/olympus/exif-mnote-data-olympus.c,
libexif/pentax/exif-mnote-data-pentax.
- CVE-2020-13113
* SECURITY UPDATE: Denial of service
- debian/patches/CVE-2020-13114.patch: add a failsafe on the
maximum number of Canon MakerNote subtags in
libexif/canon/exif-mnote-data-canon.c.
- CVE-2020-13114
* SECURITY UPDATE: Out of bounds read
- debian/patches/CVE-2020-0182.patch: fix a buffer read
overflow in exif_entry_get_value in libexif/exif-entry.c.
- CVE-2020-0182
* SECURITY UPDATE: Integer overflow
- debian/patches/CVE-2020-0198.patch: fix unsigned integer overflow
in libexif/exif-data.c.
- CVE-2020-0198
libexif (0.6.20-2ubuntu0.3) precise-security; urgency=medium
* SECURITY UPDATE: Denial of service
- debian/patches/CVE-2018-20030.patch: improve deep recursion detection
in exif_data_load_data_content in libexif/exif-data.c.
- CVE-2018-20030
* SECURITY UPDATE: Divinding by zero vulnerability
- debian/patches/CVE-2020-12767.patch: check if d variable is not zeroed
before use it in libexif/exif-entry.c
- CVE-2020-12767
libexif (0.6.20-2ubuntu0.2) precise-security; urgency=medium
* SECURITY UPDATE: Integer overflow
- debian/patches/CVE-2016-6328.patch: fix int overflow while parsing
MNOTE entry data of the input file in
libexif/pentax/mnote-pentax-entry.c
- CVE-2016-6328
* SECURITY UPDATE: Out-bouns heap read and denial of service
- debian/patches/CVE-2017-7544.patch: fixes out-of-bounds heap read
in exif_data_save_data_entry function in libexif/exif-data.c.
- CVE-2017-7544
* SECURITY UPDATE: Out of bounds write
- debian/patches/CVE-2019-9278.patch: avoid the use of unsafe int overflow
checking constructs and check for the actual sizes to avoid integer
overflows in libexif/exif-data.c.
- CVE-2019-9278
Date: 2020-11-09 12:48:13.993928+00:00
Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa)
Signed-By: Ubuntu Archive Robot <ubuntu-archive-ro...@lists.canonical.com>
https://launchpad.net/ubuntu/+source/libexif/0.6.20-2ubuntu0.7
Sorry, changesfile not available.
--
Precise-changes mailing list
Precise-changes@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/precise-changes
