From unknown Fri Sep 19 18:22:45 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#62624] [PATCH] gnu: libexif: Update to 0.6.24. [fixes CVE-2020-0198, CVE-2020-0452] Resent-From: Bruno Victal Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 02 Apr 2023 18:05:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 62624 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 62624@debbugs.gnu.org Cc: Bruno Victal X-Debbugs-Original-To: guix-patches@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.168045868214365 (code B ref -1); Sun, 02 Apr 2023 18:05:02 +0000 Received: (at submit) by debbugs.gnu.org; 2 Apr 2023 18:04:42 +0000 Received: from localhost ([127.0.0.1]:42620 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pj24H-0003jd-Rf for submit@debbugs.gnu.org; Sun, 02 Apr 2023 14:04:42 -0400 Received: from lists.gnu.org ([209.51.188.17]:51642) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pj24G-0003jV-2C for submit@debbugs.gnu.org; Sun, 02 Apr 2023 14:04:40 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pj24E-0002e7-Lf for guix-patches@gnu.org; Sun, 02 Apr 2023 14:04:39 -0400 Received: from smtpm4.myservices.hosting ([185.26.105.235]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pj24C-0006O6-50 for guix-patches@gnu.org; Sun, 02 Apr 2023 14:04:38 -0400 Received: from mail1.netim.hosting (unknown [185.26.106.173]) by smtpm4.myservices.hosting (Postfix) with ESMTP id 52FCE20B8B for ; Sun, 2 Apr 2023 20:04:33 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by mail1.netim.hosting (Postfix) with ESMTP id 4B47B8009C; Sun, 2 Apr 2023 19:55:19 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at mail1.netim.hosting Received: from mail1.netim.hosting ([127.0.0.1]) by localhost (mail1-2.netim.hosting [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id lHjbaO-chdrF; Sun, 2 Apr 2023 19:55:18 +0200 (CEST) Received: from guix-nuc.home.arpa (unknown [10.192.1.83]) (Authenticated sender: lumen@makinata.eu) by mail1.netim.hosting (Postfix) with ESMTPSA id 9EA5480097; Sun, 2 Apr 2023 19:55:18 +0200 (CEST) From: Bruno Victal Date: Sun, 2 Apr 2023 18:55:08 +0100 Message-Id: <4cb6ec46f0f4d337c66a5f96d86487c39d2cb1b7.1680458090.git.mirai@makinata.eu> X-Mailer: git-send-email 2.39.2 MIME-Version: 1.0 Tags: patch, security Severity: critical Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=185.26.105.235; envelope-from=mirai@makinata.eu; helo=smtpm4.myservices.hosting X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.4 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.6 (/) * gnu/packages/photo.scm (libexif): Update to 0.6.24. [source]: Switch to git checkout. [native-inputs]: Add autoconf, automake, gettext-minimal and libtool. --- gnu/packages/photo.scm | 17 +++++++++-------- 1 file changed, 9 insertions(+), 8 deletions(-) diff --git a/gnu/packages/photo.scm b/gnu/packages/photo.scm index 80fc963363..8df1034487 100644 --- a/gnu/packages/photo.scm +++ b/gnu/packages/photo.scm @@ -211,18 +211,19 @@ (define-public libraw (define-public libexif (package (name "libexif") - (version "0.6.22") + (version "0.6.24") (source (origin - (method url-fetch) - (uri (string-append - "https://github.com/libexif/libexif/releases" - "/download/libexif-" - (string-map (lambda (x) (if (char=? x #\.) #\_ x)) version) - "-release/libexif-" version ".tar.xz")) + (method git-fetch) + (uri (git-reference + (url "https://github.com/libexif/libexif.git") + (commit (string-append "v" version)))) + (file-name (git-file-name name version)) (sha256 (base32 - "0mhcad5zab7fsn120rd585h8ncwkq904nzzrq8vcd72hzk4g2j2h")))) + "0zi5vvb0khlzc6xyfayk6mjx5lgkrj8r7s8lfv4j7wkcgndjga0j")))) (build-system gnu-build-system) + (native-inputs + (list autoconf automake gettext-minimal libtool)) (home-page "https://libexif.github.io/") (synopsis "Read and manipulate EXIF data in digital photographs") (description -- 2.39.2 From debbugs-submit-bounces@debbugs.gnu.org Tue Apr 04 09:31:50 2023 Received: (at control) by debbugs.gnu.org; 4 Apr 2023 13:31:50 +0000 Received: from localhost ([127.0.0.1]:46831 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pjglK-0005pc-2e for submit@debbugs.gnu.org; Tue, 04 Apr 2023 09:31:50 -0400 Received: from smtpm5.myservices.hosting ([185.26.105.236]:53482) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pjglI-0005pT-01 for control@debbugs.gnu.org; Tue, 04 Apr 2023 09:31:48 -0400 Received: from mail1.netim.hosting (unknown [185.26.106.173]) by smtpm5.myservices.hosting (Postfix) with ESMTP id 1029020B2C for ; Tue, 4 Apr 2023 15:31:46 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by mail1.netim.hosting (Postfix) with ESMTP id BA8148009B for ; Tue, 4 Apr 2023 15:31:46 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at mail1.netim.hosting Received: from mail1.netim.hosting ([127.0.0.1]) by localhost (mail1-2.netim.hosting [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id hvqd3Mhg6OHq for ; Tue, 4 Apr 2023 15:31:46 +0200 (CEST) Received: from [192.168.1.239] (unknown [10.192.1.83]) (Authenticated sender: lumen@makinata.eu) by mail1.netim.hosting (Postfix) with ESMTPSA id 6EB0F8009A for ; Tue, 4 Apr 2023 15:31:46 +0200 (CEST) Message-ID: Date: Tue, 4 Apr 2023 14:31:42 +0100 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.9.1 From: Bruno Victal Subject: control-msg To: control Content-Language: en-US Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) tags 62324 patch tags 61462 patch tags 60788 - pending tags 59971 wishlist tags 51737 patch tags 62624 + security tags 49817 + security # resend control-msg close 37740 quit From unknown Fri Sep 19 18:22:45 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: Bruno Victal Subject: bug#62624: closed (Re: bug#62624: [PATCH] gnu: libexif: Update to 0.6.24. [fixes CVE-2020-0198, CVE-2020-0452]) Message-ID: References: <87pm8hhva6.fsf@gnu.org> <4cb6ec46f0f4d337c66a5f96d86487c39d2cb1b7.1680458090.git.mirai@makinata.eu> X-Gnu-PR-Message: they-closed 62624 X-Gnu-PR-Package: guix-patches X-Gnu-PR-Keywords: patch security Reply-To: 62624@debbugs.gnu.org Date: Thu, 06 Apr 2023 15:43:01 +0000 Content-Type: multipart/mixed; boundary="----------=_1680795781-23449-1" This is a multi-part message in MIME format... ------------=_1680795781-23449-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #62624: [PATCH] gnu: libexif: Update to 0.6.24. [fixes CVE-2020-0198, CVE-2= 020-0452] which was filed against the guix-patches package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 62624@debbugs.gnu.org. --=20 62624: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D62624 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1680795781-23449-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 62624-done) by debbugs.gnu.org; 6 Apr 2023 15:42:39 +0000 Received: from localhost ([127.0.0.1]:54751 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pkRl1-00065a-6H for submit@debbugs.gnu.org; Thu, 06 Apr 2023 11:42:39 -0400 Received: from eggs.gnu.org ([209.51.188.92]:60546) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pkRky-00065M-I5 for 62624-done@debbugs.gnu.org; Thu, 06 Apr 2023 11:42:37 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pkRks-0005Yc-Di; Thu, 06 Apr 2023 11:42:30 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:In-Reply-To:Date:References:Subject:To: From; bh=wHWRWZ2O1UErjhqCKhAyPFchpweEQ1p+k0lhnyQTbrQ=; b=KQIqb7wkfCGN0rorvgB8 2pgBpi0MppvHoGumpLAsTMLxy61CF/KBQzS1ExbK0qoC+U+tRgn2Q8g6nXSIzwpHBzyQP9kNxnZ4h qHq4O2Q5kQCr0wZCPeAKp23SeLiEj5Bmo7g7he770etDVJ7TS7m4h16F9K0UycJaANrR8EjEdT/Dl f4AIdqQvia6bf+7ZzAUA0S0QguSL81nA71iZ9oiYwEBGssNCus/UbcNM0qrgflkykuwDYSx94y4QM rfDBWlb/zBqg3eObp8qq/310bWqeU0HDwHe2ULcGPoJXrIoZQUlQKdpYXE3aneCK5fm9vwBflqwgM 45xFhs7zMVgNSg==; Received: from 91-160-117-201.subs.proxad.net ([91.160.117.201] helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pkRkr-0002n4-UR; Thu, 06 Apr 2023 11:42:30 -0400 From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: Bruno Victal Subject: Re: bug#62624: [PATCH] gnu: libexif: Update to 0.6.24. [fixes CVE-2020-0198, CVE-2020-0452] References: <4cb6ec46f0f4d337c66a5f96d86487c39d2cb1b7.1680458090.git.mirai@makinata.eu> Date: Thu, 06 Apr 2023 17:42:25 +0200 In-Reply-To: <4cb6ec46f0f4d337c66a5f96d86487c39d2cb1b7.1680458090.git.mirai@makinata.eu> (Bruno Victal's message of "Sun, 2 Apr 2023 18:55:08 +0100") Message-ID: <87pm8hhva6.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 62624-done Cc: 62624-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Hi, Bruno Victal skribis: > * gnu/packages/photo.scm (libexif): Update to 0.6.24. > [source]: Switch to git checkout. > [native-inputs]: Add autoconf, automake, gettext-minimal and libtool. Applied, thanks! ------------=_1680795781-23449-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 2 Apr 2023 18:04:42 +0000 Received: from localhost ([127.0.0.1]:42620 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pj24H-0003jd-Rf for submit@debbugs.gnu.org; Sun, 02 Apr 2023 14:04:42 -0400 Received: from lists.gnu.org ([209.51.188.17]:51642) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pj24G-0003jV-2C for submit@debbugs.gnu.org; Sun, 02 Apr 2023 14:04:40 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pj24E-0002e7-Lf for guix-patches@gnu.org; Sun, 02 Apr 2023 14:04:39 -0400 Received: from smtpm4.myservices.hosting ([185.26.105.235]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pj24C-0006O6-50 for guix-patches@gnu.org; Sun, 02 Apr 2023 14:04:38 -0400 Received: from mail1.netim.hosting (unknown [185.26.106.173]) by smtpm4.myservices.hosting (Postfix) with ESMTP id 52FCE20B8B for ; Sun, 2 Apr 2023 20:04:33 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by mail1.netim.hosting (Postfix) with ESMTP id 4B47B8009C; Sun, 2 Apr 2023 19:55:19 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at mail1.netim.hosting Received: from mail1.netim.hosting ([127.0.0.1]) by localhost (mail1-2.netim.hosting [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id lHjbaO-chdrF; Sun, 2 Apr 2023 19:55:18 +0200 (CEST) Received: from guix-nuc.home.arpa (unknown [10.192.1.83]) (Authenticated sender: lumen@makinata.eu) by mail1.netim.hosting (Postfix) with ESMTPSA id 9EA5480097; Sun, 2 Apr 2023 19:55:18 +0200 (CEST) From: Bruno Victal To: guix-patches@gnu.org Subject: [PATCH] gnu: libexif: Update to 0.6.24. [fixes CVE-2020-0198, CVE-2020-0452] Date: Sun, 2 Apr 2023 18:55:08 +0100 Message-Id: <4cb6ec46f0f4d337c66a5f96d86487c39d2cb1b7.1680458090.git.mirai@makinata.eu> X-Mailer: git-send-email 2.39.2 MIME-Version: 1.0 Tags: patch, security Severity: critical Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=185.26.105.235; envelope-from=mirai@makinata.eu; helo=smtpm4.myservices.hosting X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.4 (/) X-Debbugs-Envelope-To: submit Cc: Bruno Victal X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.6 (/) * gnu/packages/photo.scm (libexif): Update to 0.6.24. [source]: Switch to git checkout. [native-inputs]: Add autoconf, automake, gettext-minimal and libtool. --- gnu/packages/photo.scm | 17 +++++++++-------- 1 file changed, 9 insertions(+), 8 deletions(-) diff --git a/gnu/packages/photo.scm b/gnu/packages/photo.scm index 80fc963363..8df1034487 100644 --- a/gnu/packages/photo.scm +++ b/gnu/packages/photo.scm @@ -211,18 +211,19 @@ (define-public libraw (define-public libexif (package (name "libexif") - (version "0.6.22") + (version "0.6.24") (source (origin - (method url-fetch) - (uri (string-append - "https://github.com/libexif/libexif/releases" - "/download/libexif-" - (string-map (lambda (x) (if (char=? x #\.) #\_ x)) version) - "-release/libexif-" version ".tar.xz")) + (method git-fetch) + (uri (git-reference + (url "https://github.com/libexif/libexif.git") + (commit (string-append "v" version)))) + (file-name (git-file-name name version)) (sha256 (base32 - "0mhcad5zab7fsn120rd585h8ncwkq904nzzrq8vcd72hzk4g2j2h")))) + "0zi5vvb0khlzc6xyfayk6mjx5lgkrj8r7s8lfv4j7wkcgndjga0j")))) (build-system gnu-build-system) + (native-inputs + (list autoconf automake gettext-minimal libtool)) (home-page "https://libexif.github.io/") (synopsis "Read and manipulate EXIF data in digital photographs") (description -- 2.39.2 ------------=_1680795781-23449-1--