[ubuntu/noble-security] libexif 0.6.24-1ubuntu0.24.04.1 (Accepted)

[Marc Deslauriers]

libexif (0.6.24-1ubuntu0.24.04.1) noble-security; urgency=medium

  * SECURITY UPDATE: integer overflow when decoding MakerNotes
    - debian/patches/CVE-2026-32775.patch: check maxlen to be at least 1 in
      libexif/apple/mnote-apple-entry.c, libexif/canon/mnote-canon-entry.c,
      libexif/fuji/mnote-fuji-entry.c, libexif/olympus/mnote-olympus-entry.c,
      libexif/pentax/mnote-pentax-entry.c.
    - CVE-2026-32775
  * SECURITY UPDATE: 32bit integer overflow in Nikon MakerNote handling
    - debian/patches/CVE-2026-40385.patch: Avoid overflow on 32bit system when
      reading Nikon MakerNotes in libexif/olympus/exif-mnote-data-olympus.c.
    - CVE-2026-40385
  * SECURITY UPDATE: integer underflow in size checking for Fuji and Olympus
    MakerNote decoding
    - debian/patches/CVE-2026-40386.patch: fixed 2 unsigned integer underflows
      in libexif/fuji/exif-mnote-data-fuji.c, libexif/olympus/exif-mnote-data-
      olympus.c.
    - CVE-2026-40386

Date: 2026-07-07 15:33:23.718098+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/libexif/0.6.24-1ubuntu0.24.04.1
-------------- next part --------------
Sorry, changesfile not available.