Compare commits

1 Commits
main ... 1.1

4 changed files with 6 additions and 44 deletions

BIN
LibRaw-0.21.2.tar.gz (Stored with Git LFS) Normal file

Binary file not shown.

BIN
LibRaw-0.21.4.tar.gz (Stored with Git LFS)

Binary file not shown.

View File

@@ -1,41 +1,3 @@
-------------------------------------------------------------------
Wed Apr 23 08:32:35 UTC 2025 - pgajdos@suse.com
- version update to 0.21.4
* additional checks in PhaseOne correction tag 0x412 processing
* Do not apply canon metadata crop to DNG files
* Make sure the profile_length is the same size as the allocated memory.
* fix: remove duplicated supported camera
* check split_col/split_row values in phase_one_correct
* Prevent out-of-bounds read in fuji 0xf00c tag parser
* prevent OOB reads in phase_one_correct
- modified sources
% baselibs.conf
- fixes:
* CVE-2025-43964 [bsc#1241584]
* CVE-2025-43962 [bsc#1241585]
* CVE-2025-43961 [bsc#1241643]
* CVE-2025-43963 [bsc#1241642]
-------------------------------------------------------------------
Fri Jan 31 07:03:32 UTC 2025 - ecsos <ecsos@opensuse.org>
- Update to 0.21.3:
* new compile-time define LIBRAW_CALLOC_RAWSTORE
If defined: calloc() will be used for all big buffer allocations
to prevent uninitialized heap data leak
* Small allocations: calloc() instead of malloc() to prevent
uninitialized heap data leak
* Support for 4-component JPEG-compressed DNG files
* CR3-Qstep table: avoid wrong 64-bit code generation
* Fixed several bugs related to specially-crafted files processing
(thanks to OSS-Fuzz project)
-------------------------------------------------------------------
Mon Dec 2 14:38:59 UTC 2024 - Bernhard Wiedemann <bwiedemann@suse.com>
- Limit fdupes to %_libdir
-------------------------------------------------------------------
Thu Dec 28 18:09:52 UTC 2023 - Dirk Müller <dmueller@suse.com>

View File

@@ -1,7 +1,7 @@
#
# spec file for package libraw
#
# Copyright (c) 2025 SUSE LLC
# Copyright (c) 2023 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -23,7 +23,7 @@
%define lver 23
%define lname libraw%{lver}
Name: libraw
Version: 0.21.4
Version: 0.21.2
Release: 0
Summary: Library for reading RAW files obtained from digital photo cameras
License: CDDL-1.0 OR LGPL-2.1-only
@@ -132,7 +132,7 @@ chmod -x manual/index.html
find %buildroot -type f -name "*.la" -delete -print
# duplicated files
rm -rf %buildroot%_datadir/doc
%fdupes %buildroot/%_libdir
%fdupes %buildroot/%_prefix
%post -n %lname -p /sbin/ldconfig
%postun -n %lname -p /sbin/ldconfig