mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-08-08 08:30:47 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/libexif: security bump to version 0.6.26

Browse Source 
https://github.com/libexif/libexif/blob/v0.6.26/NEWS

* Security issues fixed:
  * CVE-2026-40386: An unsigned integer underflow in Fuji and Olympus
    makernote handling
  * CVE-2026-40385: An unsigned integer overflow on 32bit systems in
    Nikon makernote handling
  * CVE-2026-32775: A buffer overwrite via integer underflow in makernote
    handling

Switched to xz tarball and tarball hash provided by upstream.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 3f9bcf42c3)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
This commit is contained in:
Bernd Kuhls
2026-04-16 09:36:37 +02:00
committed by Thomas Perale
parent 2e3c080b98
commit 2513ab9603
2 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
package/libexif/libexif.hash
View File

@@ -1,3 +1,4 @@
# From https://github.com/libexif/libexif/releases/tag/v0.6.26
sha256 4a055ed6575e61ca46c3172be3c753cc16c9becd0f99ec71d58dd0e471476c0c libexif-0.6.26.tar.xz
# Locally computed:
sha256 7c9eba99aed3e6594d8c3e85861f1c6aaf450c218621528bc989d3b3e7a26307 libexif-0.6.25.tar.bz2
sha256 36b6d3fa47916943fd5fec313c584784946047ec1337a78b440e5992cb595f89 COPYING

4
package/libexif/libexif.mk
View File

@@ -4,8 +4,8 @@
#
################################################################################
LIBEXIF_VERSION = 0.6.25
LIBEXIF_SOURCE = libexif-$(LIBEXIF_VERSION).tar.bz2
LIBEXIF_VERSION = 0.6.26
LIBEXIF_SOURCE = libexif-$(LIBEXIF_VERSION).tar.xz
LIBEXIF_SITE = \
https://github.com/libexif/libexif/releases/download/v$(LIBEXIF_VERSION)
LIBEXIF_INSTALL_STAGING = YES