rpms/libexif
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update libexif to 0.6.26 (security release) #2

Merged
sbelikov merged 1 commit from update-libexif-0.6.26 into niceos-5.2 2026-04-28 15:55:26 +03:00
Conversation 0 Commits 1 Files changed 1 +6 -1
sbelikov commented 2026-04-28 15:50:42 +03:00
Owner
Copy link

Summary

Update libexif from 0.6.25 to 0.6.26.

Security Fixes:

  • CVE-2026-32775: Buffer overwrite via integer underflow in makernote handling.
  • CVE-2026-40385: Unsigned integer overflow on 32bit systems in Nikon makernote handling.
  • CVE-2026-40386: Unsigned integer underflow in Fuji and Olympus makernote handling.

Features:

  • Handle JPEG APP3 marker.
  • Added EXIF_TAG_IMAGE_DEPTH tag.

Details

This is a security-critical patch release addressing multiple vulnerabilities in EXIF metadata parsing.

References:

Changes

  • Version: 0.6.25 → 0.6.26
  • Class: patch
  • Priority: high
  • Labels: security-release, upstream-update
### Summary Update `libexif` from 0.6.25 to 0.6.26. **Security Fixes:** - CVE-2026-32775: Buffer overwrite via integer underflow in makernote handling. - CVE-2026-40385: Unsigned integer overflow on 32bit systems in Nikon makernote handling. - CVE-2026-40386: Unsigned integer underflow in Fuji and Olympus makernote handling. **Features:** - Handle JPEG APP3 marker. - Added EXIF_TAG_IMAGE_DEPTH tag. ### Details This is a security-critical patch release addressing multiple vulnerabilities in EXIF metadata parsing. **References:** - Upstream Release Notes: https://github.com/libexif/libexif/releases/tag/v0.6.26 - NICE.O.S Issue: https://specs.niceos.ru/rpms/libexif/issues/1 ### Changes - **Version:** 0.6.25 → 0.6.26 - **Class:** patch - **Priority:** high - **Labels:** security-release, upstream-update
sbelikov merged commit f127acef88 into niceos-5.2 2026-04-28 15:55:26 +03:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
ai-summary
Issue contains local NiceSOFT AI generated preliminary analysis

  
bot
Created by automation

  
needs-build
Needs build verification

  
needs-triage
Needs maintainer triage

  
priority/high
High priority

  
security-release
Release notes mention security fixes or CVE

  
update/patch
Patch-level update

  
upstream-update
New upstream version is available

  
upstream/github
GitHub upstream

No labels
ai-summary
bot
needs-build
needs-triage
priority/high
security-release
update/patch
upstream-update
upstream/github
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
rpms/libexif!2
No description provided.