Publishing details

• Published on 2018-06-04
• Copied from ubuntu trusty in PPA for Ubuntu Security Proposed by Ubuntu Archive Robot

Changelog

exempi (2.2.1-1ubuntu1.1) trusty-security; urgency=medium

  * SECURITY UPDATE: integer overflow in RIFF.cpp
    - debian/patches/CVE-2017-18233.patch: fix overflow in
      source/XMPFiles/FormatSupport/RIFF.cpp.
    - CVE-2017-18233
  * SECURITY UPDATE: DoS via pdf file with JPEG data
    - debian/patches/CVE-2017-18234.patch: fix error handling and replace
      memcpy in public/include/XMP_Const.h,
      public/include/client-glue/WXMP_Common.hpp,
      source/XMPFiles/FormatSupport/TIFF_MemoryReader.cpp,
      source/XMPFiles/FormatSupport/TIFF_Support.hpp,
      source/common/XMP_LibUtils.hpp.
    - Thanks to Debian for the backport!
    - CVE-2017-18234
  * SECURITY UPDATE: infinite loop via a crafted asf file
    - debian/patches/CVE-2017-18236.patch: check size in
      source/XMPFiles/FormatSupport/ASF_Support.cpp.
    - CVE-2017-18236
  * SECURITY UPDATE: infinite loop via XMP data in qt file
    - debian/patches/CVE-2017-18238.patch: exit loop in
      source/XMPFiles/FormatSupport/QuickTime_Support.cpp.
    - CVE-2017-18238
  * SECURITY UPDATE: heap-based buffer over-read in the MD5Update()
    - debian/patches/CVE-2018-7728.patch: check dataLen in
      source/XMPFiles/FileHandlers/TIFF_Handler.cpp.
    - CVE-2018-7728
  * SECURITY UPDATE: buffer over-read in CacheFileData()
    - debian/patches/CVE-2018-7730.patch: check dataLen in
      source/XMPFiles/FormatSupport/PSIR_FileWriter.cpp.
    - CVE-2018-7730

 -- Marc Deslauriers <email address hidden>  Thu, 31 May 2018 13:48:18 -0400

Builds

• amd64
• arm64
• armhf
• i386
• powerpc
• ppc64el

Built packages

• exempi command line tool to manipulate XMP metadata

• exempi-dbgsym debug symbols for package exempi

• libexempi-dev library to parse XMP metadata (Development files)

• libexempi-dev-dbgsym debug symbols for package libexempi-dev

• libexempi3 library to parse XMP metadata (Library)

• libexempi3-dbg library to parse XMP metadata (Debug files)

• libexempi3-dbgsym debug symbols for package libexempi3

Package files

• exempi-dbgsym_2.2.1-1ubuntu1.1_amd64.ddeb (1018 bytes)
• exempi-dbgsym_2.2.1-1ubuntu1.1_arm64.ddeb (1022 bytes)
• exempi-dbgsym_2.2.1-1ubuntu1.1_armhf.ddeb (1022 bytes)
• exempi-dbgsym_2.2.1-1ubuntu1.1_i386.ddeb (1020 bytes)
• exempi-dbgsym_2.2.1-1ubuntu1.1_powerpc.ddeb (1016 bytes)
• exempi-dbgsym_2.2.1-1ubuntu1.1_ppc64el.ddeb (1018 bytes)
• exempi_2.2.1-1ubuntu1.1.debian.tar.gz (10.0 KiB)
• exempi_2.2.1-1ubuntu1.1.dsc (2.1 KiB)
• exempi_2.2.1-1ubuntu1.1_amd64.deb (9.6 KiB)
• exempi_2.2.1-1ubuntu1.1_arm64.deb (9.7 KiB)
• exempi_2.2.1-1ubuntu1.1_armhf.deb (9.1 KiB)
• exempi_2.2.1-1ubuntu1.1_i386.deb (9.5 KiB)
• exempi_2.2.1-1ubuntu1.1_powerpc.deb (9.6 KiB)
• exempi_2.2.1-1ubuntu1.1_ppc64el.deb (9.9 KiB)
• exempi_2.2.1.orig.tar.gz (3.4 MiB)
• libexempi-dev-dbgsym_2.2.1-1ubuntu1.1_amd64.ddeb (1012 bytes)
• libexempi-dev-dbgsym_2.2.1-1ubuntu1.1_arm64.ddeb (1014 bytes)
• libexempi-dev-dbgsym_2.2.1-1ubuntu1.1_armhf.ddeb (1012 bytes)
• libexempi-dev-dbgsym_2.2.1-1ubuntu1.1_i386.ddeb (1014 bytes)
• libexempi-dev-dbgsym_2.2.1-1ubuntu1.1_powerpc.ddeb (1012 bytes)
• libexempi-dev-dbgsym_2.2.1-1ubuntu1.1_ppc64el.ddeb (1012 bytes)
• libexempi-dev_2.2.1-1ubuntu1.1_amd64.deb (434.5 KiB)
• libexempi-dev_2.2.1-1ubuntu1.1_arm64.deb (428.9 KiB)
• libexempi-dev_2.2.1-1ubuntu1.1_armhf.deb (429.9 KiB)
• libexempi-dev_2.2.1-1ubuntu1.1_i386.deb (443.2 KiB)
• libexempi-dev_2.2.1-1ubuntu1.1_powerpc.deb (407.9 KiB)
• libexempi-dev_2.2.1-1ubuntu1.1_ppc64el.deb (471.7 KiB)
• libexempi3-dbg_2.2.1-1ubuntu1.1_amd64.deb (3.0 MiB)
• libexempi3-dbg_2.2.1-1ubuntu1.1_arm64.deb (2.9 MiB)
• libexempi3-dbg_2.2.1-1ubuntu1.1_armhf.deb (2.9 MiB)
• libexempi3-dbg_2.2.1-1ubuntu1.1_i386.deb (2.8 MiB)
• libexempi3-dbg_2.2.1-1ubuntu1.1_powerpc.deb (3.0 MiB)
• libexempi3-dbg_2.2.1-1ubuntu1.1_ppc64el.deb (3.1 MiB)
• libexempi3-dbgsym_2.2.1-1ubuntu1.1_amd64.ddeb (982 bytes)
• libexempi3-dbgsym_2.2.1-1ubuntu1.1_arm64.ddeb (982 bytes)
• libexempi3-dbgsym_2.2.1-1ubuntu1.1_armhf.ddeb (982 bytes)
• libexempi3-dbgsym_2.2.1-1ubuntu1.1_i386.ddeb (980 bytes)
• libexempi3-dbgsym_2.2.1-1ubuntu1.1_powerpc.ddeb (978 bytes)
• libexempi3-dbgsym_2.2.1-1ubuntu1.1_ppc64el.ddeb (980 bytes)
• libexempi3_2.2.1-1ubuntu1.1_amd64.deb (378.7 KiB)
• libexempi3_2.2.1-1ubuntu1.1_arm64.deb (338.5 KiB)
• libexempi3_2.2.1-1ubuntu1.1_armhf.deb (339.6 KiB)
• libexempi3_2.2.1-1ubuntu1.1_i386.deb (376.1 KiB)
• libexempi3_2.2.1-1ubuntu1.1_powerpc.deb (356.3 KiB)
• libexempi3_2.2.1-1ubuntu1.1_ppc64el.deb (387.5 KiB)