Bug 803317 – <media-libs/exiftool-12.30: Unspecified vulnerability

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description Sam James 2021-07-22 04:47:16 UTC]

July 9, 2021 - Version 12.29

    Added a few new Nikon and Olympus lenses (thanks LibRaw)
    Improved a QuickTime "File format error" message to be more meaningful, and made it a minor error
    Changed PNG writer to add EXIF before IDAT
    Some changes the way JUMBF metadata is handled
    Patched to read timed GPS from a different type of INSV videos
    Patched a security issue
    Fixed problem where ExifTool could hang when processing mebx timed metadata 

But it's not yet marked as a "production release", so we should avoid bumping to it, I suppose.

[addCollapseLink(1, 1, 'Toggle comment display'); Comment 1 NATTkA bot 2021-07-29 17:20:38 UTC Comment hidden (obsolete)]

Package list is empty or all packages have requested keywords.

[addCollapseLink(2, 1, 'Toggle comment display'); Comment 2 NATTkA bot 2021-07-29 17:28:43 UTC Comment hidden (obsolete)]

Package list is empty or all packages have requested keywords.

[addCollapseLink(3, 1, 'Toggle comment display'); Comment 3 NATTkA bot 2021-07-29 17:36:40 UTC Comment hidden (obsolete)]

Package list is empty or all packages have requested keywords.

[addCollapseLink(4, 1, 'Toggle comment display'); Comment 4 NATTkA bot 2021-07-29 17:44:43 UTC Comment hidden (obsolete)]

Package list is empty or all packages have requested keywords.

[addCollapseLink(5, 1, 'Toggle comment display'); Comment 5 NATTkA bot 2021-07-29 17:52:46 UTC Comment hidden (obsolete)]

Package list is empty or all packages have requested keywords.

[addCollapseLink(6, 1, 'Toggle comment display'); Comment 6 NATTkA bot 2021-07-29 17:56:42 UTC Comment hidden (obsolete)]

Package list is empty or all packages have requested keywords.

[addCollapseLink(7, 1, 'Toggle comment display'); Comment 7 NATTkA bot 2021-07-29 18:00:41 UTC Comment hidden (obsolete)]

Package list is empty or all packages have requested keywords.

[addCollapseLink(8, 1, 'Toggle comment display'); Comment 8 NATTkA bot 2021-07-29 18:08:59 UTC Comment hidden (obsolete)]

Package list is empty or all packages have requested keywords.

[Comment 9 Larry the Git Cow 2021-09-29 22:40:50 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a62fe1a6b20a6dfdf9c639d3cc45406a5eff5e7f

commit a62fe1a6b20a6dfdf9c639d3cc45406a5eff5e7f
Author:     Sam James <[e-mail]>
AuthorDate: 2021-09-29 22:40:31 +0000
Commit:     Sam James <[e-mail]>
CommitDate: 2021-09-29 22:40:31 +0000

    media-libs/exiftool: add 12.30
    
    Bug: https://bugs.gentoo.org/803317
    Signed-off-by: Sam James <[e-mail]>

 media-libs/exiftool/Manifest              |  1 +
 media-libs/exiftool/exiftool-12.30.ebuild | 25 +++++++++++++++++++++++++
 2 files changed, 26 insertions(+)

[Comment 10 Andreas K. Hüttel 2021-10-17 19:54:34 UTC]

> But it's not yet marked as a "production release", so we should avoid
> bumping to it, I suppose.

12.30 is now, so let's stabilize it. Arches please do.

[Comment 11 Sam James 2021-10-17 20:03:44 UTC]

x86 done

[Comment 12 Sam James 2021-10-17 20:04:03 UTC]

amd64 done

[Comment 13 Sam James 2021-10-17 20:07:31 UTC]

ppc done

[Comment 14 Sam James 2021-10-17 20:07:33 UTC]

ppc64 done

[Comment 15 Sam James 2021-10-18 00:37:58 UTC]

arm64 done

all arches done

[Comment 16 John Helmert III 2021-10-18 19:40:37 UTC]

Please note we're working to detach stabilization from security bugs!

Please cleanup.

[Comment 17 Larry the Git Cow 2021-10-23 15:37:13 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=cc1e3d9a555b3f2163888f0d4e0131dc2f5b66d6

commit cc1e3d9a555b3f2163888f0d4e0131dc2f5b66d6
Author:     Andreas K. Hüttel <[e-mail]>
AuthorDate: 2021-10-23 15:36:50 +0000
Commit:     Andreas K. Hüttel <[e-mail]>
CommitDate: 2021-10-23 15:37:02 +0000

    media-libs/exiftool: Remove old
    
    Bug: https://bugs.gentoo.org/803317
    Package-Manager: Portage-3.0.28, Repoman-3.0.3
    Signed-off-by: Andreas K. Hüttel <[e-mail]>

 media-libs/exiftool/Manifest              |  1 -
 media-libs/exiftool/exiftool-12.26.ebuild | 25 -------------------------
 2 files changed, 26 deletions(-)

[Comment 18 Larry the Git Cow 2024-07-24 06:08:47 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=cbb2c6bdcf7c6bcf9d999c22c28ef4eb416b0a51

commit cbb2c6bdcf7c6bcf9d999c22c28ef4eb416b0a51
Author:     GLSAMaker <[e-mail]>
AuthorDate: 2024-07-24 06:08:31 +0000
Commit:     Hans de Graaff <[e-mail]>
CommitDate: 2024-07-24 06:08:44 +0000

    [ GLSA 202407-27 ] ExifTool: Multiple vulnerabilities
    
    Bug: https://bugs.gentoo.org/785667
    Bug: https://bugs.gentoo.org/791397
    Bug: https://bugs.gentoo.org/803317
    Bug: https://bugs.gentoo.org/832033
    Signed-off-by: GLSAMaker <[e-mail]>
    Signed-off-by: Hans de Graaff <[e-mail]>

 glsa-202407-27.xml | 46 ++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 46 insertions(+)