Sync from SUSE:SLFO:Main libraw revision fa5f2bde343718d582a2d171657d0b95

libraw.changes

@@ -1,3 +1,22 @@
+-------------------------------------------------------------------
+Wed Apr 23 08:32:35 UTC 2025 - pgajdos@suse.com
+
+- version update to 0.21.4
+  * additional checks in PhaseOne correction tag 0x412 processing
+  * Do not apply canon metadata crop to DNG files
+  * Make sure the profile_length is the same size as the allocated memory.
+  * fix: remove duplicated supported camera
+  * check split_col/split_row values in phase_one_correct
+  * Prevent out-of-bounds read in fuji 0xf00c tag parser
+  * prevent OOB reads in phase_one_correct 
+- modified sources
+  % baselibs.conf
+- fixes:
+  * CVE-2025-43964 [bsc#1241584] 
+  * CVE-2025-43962 [bsc#1241585]
+  * CVE-2025-43961 [bsc#1241643]
+  * CVE-2025-43963 [bsc#1241642]
+
 -------------------------------------------------------------------
 Fri Jan 31 07:03:32 UTC 2025 - ecsos <ecsos@opensuse.org>
 

libraw.spec

@@ -23,7 +23,7 @@
 %define lver    23
 %define lname	libraw%{lver}
 Name:           libraw
-Version:        0.21.3
+Version:        0.21.4
 Release:        0
 Summary:        Library for reading RAW files obtained from digital photo cameras
 License:        CDDL-1.0 OR LGPL-2.1-only