Debian Bug report logs -
#962346
CVE-2020-0181
Reply or subscribe to this bug.
Toggle useless messages
Report forwarded
to debian-bugs-dist@lists.debian.org, team@security.debian.org, Debian PhotoTools Maintainers <pkg-phototools-devel@lists.alioth.debian.org>:
Bug#962346; Package src:libexif.
(Sat, 06 Jun 2020 14:15:03 GMT) (full text, mbox, link).
Acknowledgement sent
to Moritz Muehlenhoff <jmm@debian.org>:
New Bug report received and forwarded. Copy sent to team@security.debian.org, Debian PhotoTools Maintainers <pkg-phototools-devel@lists.alioth.debian.org>.
(Sat, 06 Jun 2020 14:15:03 GMT) (full text, mbox, link).
Message #5 received at submit@bugs.debian.org (full text, mbox, reply):
Source: libexif
Severity: important
Tags: security
Similar to CVE-2020-0198, another issue reported/fixed in Android, but not
applied upstream:
https://android.googlesource.com/platform/external/libexif/+/f6c54954cbfc25eb73d2d2902f0597c0220174a4
Cheers,
Moritz
Information forwarded
to debian-bugs-dist@lists.debian.org, Debian PhotoTools Maintainers <pkg-phototools-devel@lists.alioth.debian.org>:
Bug#962346; Package src:libexif.
(Sun, 07 Jun 2020 08:42:02 GMT) (full text, mbox, link).
Acknowledgement sent
to Salvatore Bonaccorso <carnil@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian PhotoTools Maintainers <pkg-phototools-devel@lists.alioth.debian.org>.
(Sun, 07 Jun 2020 08:42:02 GMT) (full text, mbox, link).
Message #10 received at 962346@bugs.debian.org (full text, mbox, reply):
Hi Moritz,
On Sat, Jun 06, 2020 at 04:12:20PM +0200, Moritz Muehlenhoff wrote:
> Source: libexif
> Severity: important
> Tags: security
>
> Similar to CVE-2020-0198, another issue reported/fixed in Android, but not
> applied upstream:
> https://android.googlesource.com/platform/external/libexif/+/f6c54954cbfc25eb73d2d2902f0597c0220174a4
Not completely sure, but I think upstream fixed that while adressing
CVE-2019-9278, with commit
http://github.com/libexif/libexif/commit/75aa73267fdb1e0ebfbc00369e7312bac43d0566
(cf. https://github.com/libexif/libexif/issues/26).
Regards,
Salvatore
Send a report that this bug log contains spam.
Debian bug tracking system administrator <owner@bugs.debian.org>.
Last modified:
Sun Jun 7 13:39:45 2020;
Machine Name:
bembo
Debian Bug tracking system
Debbugs is free software and licensed under the terms of the GNU
Public License version 2. The current version can be obtained
from https://bugs.debian.org/debbugs-source/.
Copyright © 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson,
2005-2017 Don Armstrong, and many other contributors.
Vulmon