From unknown Fri Sep 19 18:23:19 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#62624 <62624@debbugs.gnu.org> To: bug#62624 <62624@debbugs.gnu.org> Subject: Status: [PATCH] gnu: libexif: Update to 0.6.24. [fixes CVE-2020-0198, CVE-2020-0452] Reply-To: bug#62624 <62624@debbugs.gnu.org> Date: Sat, 20 Sep 2025 01:23:19 +0000 retitle 62624 [PATCH] gnu: libexif: Update to 0.6.24. [fixes CVE-2020-0198,= CVE-2020-0452] reassign 62624 guix-patches submitter 62624 Bruno Victal severity 62624 normal tag 62624 patch security thanks From debbugs-submit-bounces@debbugs.gnu.org Sun Apr 02 14:04:42 2023 Received: (at submit) by debbugs.gnu.org; 2 Apr 2023 18:04:42 +0000 Received: from localhost ([127.0.0.1]:42620 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pj24H-0003jd-Rf for submit@debbugs.gnu.org; Sun, 02 Apr 2023 14:04:42 -0400 Received: from lists.gnu.org ([209.51.188.17]:51642) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pj24G-0003jV-2C for submit@debbugs.gnu.org; Sun, 02 Apr 2023 14:04:40 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pj24E-0002e7-Lf for guix-patches@gnu.org; Sun, 02 Apr 2023 14:04:39 -0400 Received: from smtpm4.myservices.hosting ([185.26.105.235]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pj24C-0006O6-50 for guix-patches@gnu.org; Sun, 02 Apr 2023 14:04:38 -0400 Received: from mail1.netim.hosting (unknown [185.26.106.173]) by smtpm4.myservices.hosting (Postfix) with ESMTP id 52FCE20B8B for ; Sun, 2 Apr 2023 20:04:33 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by mail1.netim.hosting (Postfix) with ESMTP id 4B47B8009C; Sun, 2 Apr 2023 19:55:19 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at mail1.netim.hosting Received: from mail1.netim.hosting ([127.0.0.1]) by localhost (mail1-2.netim.hosting [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id lHjbaO-chdrF; Sun, 2 Apr 2023 19:55:18 +0200 (CEST) Received: from guix-nuc.home.arpa (unknown [10.192.1.83]) (Authenticated sender: lumen@makinata.eu) by mail1.netim.hosting (Postfix) with ESMTPSA id 9EA5480097; Sun, 2 Apr 2023 19:55:18 +0200 (CEST) From: Bruno Victal To: guix-patches@gnu.org Subject: [PATCH] gnu: libexif: Update to 0.6.24. [fixes CVE-2020-0198, CVE-2020-0452] Date: Sun, 2 Apr 2023 18:55:08 +0100 Message-Id: <4cb6ec46f0f4d337c66a5f96d86487c39d2cb1b7.1680458090.git.mirai@makinata.eu> X-Mailer: git-send-email 2.39.2 MIME-Version: 1.0 Tags: patch, security Severity: critical Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=185.26.105.235; envelope-from=mirai@makinata.eu; helo=smtpm4.myservices.hosting X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.4 (/) X-Debbugs-Envelope-To: submit Cc: Bruno Victal X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.6 (/) * gnu/packages/photo.scm (libexif): Update to 0.6.24. [source]: Switch to git checkout. [native-inputs]: Add autoconf, automake, gettext-minimal and libtool. --- gnu/packages/photo.scm | 17 +++++++++-------- 1 file changed, 9 insertions(+), 8 deletions(-) diff --git a/gnu/packages/photo.scm b/gnu/packages/photo.scm index 80fc963363..8df1034487 100644 --- a/gnu/packages/photo.scm +++ b/gnu/packages/photo.scm @@ -211,18 +211,19 @@ (define-public libraw (define-public libexif (package (name "libexif") - (version "0.6.22") + (version "0.6.24") (source (origin - (method url-fetch) - (uri (string-append - "https://github.com/libexif/libexif/releases" - "/download/libexif-" - (string-map (lambda (x) (if (char=? x #\.) #\_ x)) version) - "-release/libexif-" version ".tar.xz")) + (method git-fetch) + (uri (git-reference + (url "https://github.com/libexif/libexif.git") + (commit (string-append "v" version)))) + (file-name (git-file-name name version)) (sha256 (base32 - "0mhcad5zab7fsn120rd585h8ncwkq904nzzrq8vcd72hzk4g2j2h")))) + "0zi5vvb0khlzc6xyfayk6mjx5lgkrj8r7s8lfv4j7wkcgndjga0j")))) (build-system gnu-build-system) + (native-inputs + (list autoconf automake gettext-minimal libtool)) (home-page "https://libexif.github.io/") (synopsis "Read and manipulate EXIF data in digital photographs") (description -- 2.39.2 From debbugs-submit-bounces@debbugs.gnu.org Tue Apr 04 09:31:50 2023 Received: (at control) by debbugs.gnu.org; 4 Apr 2023 13:31:50 +0000 Received: from localhost ([127.0.0.1]:46831 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pjglK-0005pc-2e for submit@debbugs.gnu.org; Tue, 04 Apr 2023 09:31:50 -0400 Received: from smtpm5.myservices.hosting ([185.26.105.236]:53482) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pjglI-0005pT-01 for control@debbugs.gnu.org; Tue, 04 Apr 2023 09:31:48 -0400 Received: from mail1.netim.hosting (unknown [185.26.106.173]) by smtpm5.myservices.hosting (Postfix) with ESMTP id 1029020B2C for ; Tue, 4 Apr 2023 15:31:46 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by mail1.netim.hosting (Postfix) with ESMTP id BA8148009B for ; Tue, 4 Apr 2023 15:31:46 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at mail1.netim.hosting Received: from mail1.netim.hosting ([127.0.0.1]) by localhost (mail1-2.netim.hosting [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id hvqd3Mhg6OHq for ; Tue, 4 Apr 2023 15:31:46 +0200 (CEST) Received: from [192.168.1.239] (unknown [10.192.1.83]) (Authenticated sender: lumen@makinata.eu) by mail1.netim.hosting (Postfix) with ESMTPSA id 6EB0F8009A for ; Tue, 4 Apr 2023 15:31:46 +0200 (CEST) Message-ID: Date: Tue, 4 Apr 2023 14:31:42 +0100 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.9.1 From: Bruno Victal Subject: control-msg To: control Content-Language: en-US Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) tags 62324 patch tags 61462 patch tags 60788 - pending tags 59971 wishlist tags 51737 patch tags 62624 + security tags 49817 + security # resend control-msg close 37740 quit From debbugs-submit-bounces@debbugs.gnu.org Thu Apr 06 11:42:39 2023 Received: (at 62624-done) by debbugs.gnu.org; 6 Apr 2023 15:42:39 +0000 Received: from localhost ([127.0.0.1]:54751 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pkRl1-00065a-6H for submit@debbugs.gnu.org; Thu, 06 Apr 2023 11:42:39 -0400 Received: from eggs.gnu.org ([209.51.188.92]:60546) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pkRky-00065M-I5 for 62624-done@debbugs.gnu.org; Thu, 06 Apr 2023 11:42:37 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pkRks-0005Yc-Di; Thu, 06 Apr 2023 11:42:30 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:In-Reply-To:Date:References:Subject:To: From; bh=wHWRWZ2O1UErjhqCKhAyPFchpweEQ1p+k0lhnyQTbrQ=; b=KQIqb7wkfCGN0rorvgB8 2pgBpi0MppvHoGumpLAsTMLxy61CF/KBQzS1ExbK0qoC+U+tRgn2Q8g6nXSIzwpHBzyQP9kNxnZ4h qHq4O2Q5kQCr0wZCPeAKp23SeLiEj5Bmo7g7he770etDVJ7TS7m4h16F9K0UycJaANrR8EjEdT/Dl f4AIdqQvia6bf+7ZzAUA0S0QguSL81nA71iZ9oiYwEBGssNCus/UbcNM0qrgflkykuwDYSx94y4QM rfDBWlb/zBqg3eObp8qq/310bWqeU0HDwHe2ULcGPoJXrIoZQUlQKdpYXE3aneCK5fm9vwBflqwgM 45xFhs7zMVgNSg==; Received: from 91-160-117-201.subs.proxad.net ([91.160.117.201] helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pkRkr-0002n4-UR; Thu, 06 Apr 2023 11:42:30 -0400 From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: Bruno Victal Subject: Re: bug#62624: [PATCH] gnu: libexif: Update to 0.6.24. [fixes CVE-2020-0198, CVE-2020-0452] References: <4cb6ec46f0f4d337c66a5f96d86487c39d2cb1b7.1680458090.git.mirai@makinata.eu> Date: Thu, 06 Apr 2023 17:42:25 +0200 In-Reply-To: <4cb6ec46f0f4d337c66a5f96d86487c39d2cb1b7.1680458090.git.mirai@makinata.eu> (Bruno Victal's message of "Sun, 2 Apr 2023 18:55:08 +0100") Message-ID: <87pm8hhva6.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 62624-done Cc: 62624-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Hi, Bruno Victal skribis: > * gnu/packages/photo.scm (libexif): Update to 0.6.24. > [source]: Switch to git checkout. > [native-inputs]: Add autoconf, automake, gettext-minimal and libtool. Applied, thanks! From unknown Fri Sep 19 18:23:19 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Fri, 05 May 2023 11:24:05 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator