From 98e5a07e804c4382c52b83a5fb24417075eeb28cea169557c56d63591ad1c1ca Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Tom=C3=A1=C5=A1=20Chv=C3=A1tal?= Date: Wed, 14 Mar 2018 14:17:49 +0000 Subject: [PATCH 1/2] Accepting request 586791 from home:kbabioch:branches:multimedia:libs - Update to 2.4.5: * Fix a buffer overflow in the PSD parser. (CVE-2018-7730 bnc#1085295) * Fix a buffer overflow in the TIFF parser. (CVE-2018-7728 bnc#1085297) * Fix a buffer overflow in PostScript parser. (CVE-2018-7729 bnc#1085296) * Fix a null dereference in WEBP parser. (CVE-2018-7731 bnc#1085294) * Properly initialize pointers in WEBP. * Fix an infinite loop in RIFF parser. * Fix an infinite loop in QuickTime parser. * Fix an infinite loop in ASF parser. * Adjust minimum version for gcc in documentation. * Fix a buffer overrun, memcpy() on overlapping regions, use after free in the exception handling. Fix a fatal assert with corrupt WEBP. * Fix a crash on a corrupt file. * Upgrade XMPCore to Adobe XMP CC 2014.12. * New flag to optimize layout on MPEG4 files. * GoPro MPEG4 video files support. * Improved JPEG support. * iXML support in WAVE files. * Several bugs and memory leaks fixes. * Changes from Adobe XMP CC 2013.06. * Pluggable file handlers (not exposed yet in Exempi) * Support for Exif 2.3 properties * New RIFF file handler * Better Postscript support. * Lot of bug fixes. * Now require (partial) C++11 support to compile (gcc 4.4.7 tested) * WebP format handler (contributed: Frankie Dintino, The Atlantic) * Several API improvements * Fix potential crash with corrupt TIFF file. * Fix header to pass -Wstrict-prototypes OBS-URL: https://build.opensuse.org/request/show/586791 OBS-URL: https://build.opensuse.org/package/show/multimedia:libs/exempi?expand=0&rev=26 --- exempi-2.2.2.tar.bz2 | 3 --- exempi-2.2.2.tar.bz2.asc | 7 ------- exempi-2.4.5.tar.bz2 | 3 +++ exempi-2.4.5.tar.bz2.asc | 6 ++++++ exempi.changes | 34 ++++++++++++++++++++++++++++++++++ exempi.spec | 4 ++-- 6 files changed, 45 insertions(+), 12 deletions(-) delete mode 100644 exempi-2.2.2.tar.bz2 delete mode 100644 exempi-2.2.2.tar.bz2.asc create mode 100644 exempi-2.4.5.tar.bz2 create mode 100644 exempi-2.4.5.tar.bz2.asc diff --git a/exempi-2.2.2.tar.bz2 b/exempi-2.2.2.tar.bz2 deleted file mode 100644 index d81e56c..0000000 --- a/exempi-2.2.2.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:0e7ad0e5e61b6828e38d31a8cc59c26c9adeed7edf4b26708c400beb6a686c07 -size 3380662 diff --git a/exempi-2.2.2.tar.bz2.asc b/exempi-2.2.2.tar.bz2.asc deleted file mode 100644 index 2cb2c0e..0000000 --- a/exempi-2.2.2.tar.bz2.asc +++ /dev/null @@ -1,7 +0,0 @@ ------BEGIN PGP SIGNATURE----- -Version: GnuPG v1 - -iEYEABECAAYFAlQD4rUACgkQX+4F5qVuFaPYsACeJ/JzbFIFBE950MF92v02/Tan -888An0nojYEGGUgn+scqC3bFOCOiE0dp -=d0uc ------END PGP SIGNATURE----- diff --git a/exempi-2.4.5.tar.bz2 b/exempi-2.4.5.tar.bz2 new file mode 100644 index 0000000..8ff5bee --- /dev/null +++ b/exempi-2.4.5.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:406185feb88e84ea1d4b4251370be2991205790d7113a7e28e192ff46a4f221e +size 3615134 diff --git a/exempi-2.4.5.tar.bz2.asc b/exempi-2.4.5.tar.bz2.asc new file mode 100644 index 0000000..e418182 --- /dev/null +++ b/exempi-2.4.5.tar.bz2.asc @@ -0,0 +1,6 @@ +-----BEGIN PGP SIGNATURE----- + +iEYEABECAAYFAlqgq08ACgkQX+4F5qVuFaNeLwCgz4MWXwc+jl2vMPf0zbeOgFg2 +qf4AnAw1DJC4jNhc9xXaCkQfDYYG3R1m +=4wPW +-----END PGP SIGNATURE----- diff --git a/exempi.changes b/exempi.changes index f37fe29..bb350a2 100644 --- a/exempi.changes +++ b/exempi.changes @@ -1,3 +1,37 @@ +------------------------------------------------------------------- +Wed Mar 14 13:20:57 UTC 2018 - kbabioch@suse.com + +- Update to 2.4.5: + * Fix a buffer overflow in the PSD parser. (CVE-2018-7730 bnc#1085295) + * Fix a buffer overflow in the TIFF parser. (CVE-2018-7728 bnc#1085297) + * Fix a buffer overflow in PostScript parser. (CVE-2018-7729 bnc#1085296) + * Fix a null dereference in WEBP parser. (CVE-2018-7731 bnc#1085294) + * Properly initialize pointers in WEBP. + * Fix an infinite loop in RIFF parser. + * Fix an infinite loop in QuickTime parser. + * Fix an infinite loop in ASF parser. + * Adjust minimum version for gcc in documentation. + * Fix a buffer overrun, memcpy() on overlapping regions, use after free in + the exception handling. Fix a fatal assert with corrupt WEBP. + * Fix a crash on a corrupt file. + * Upgrade XMPCore to Adobe XMP CC 2014.12. + * New flag to optimize layout on MPEG4 files. + * GoPro MPEG4 video files support. + * Improved JPEG support. + * iXML support in WAVE files. + * Several bugs and memory leaks fixes. + * Changes from Adobe XMP CC 2013.06. + * Pluggable file handlers (not exposed yet in Exempi) + * Support for Exif 2.3 properties + * New RIFF file handler + * Better Postscript support. + * Lot of bug fixes. + * Now require (partial) C++11 support to compile (gcc 4.4.7 tested) + * WebP format handler (contributed: Frankie Dintino, The Atlantic) + * Several API improvements + * Fix potential crash with corrupt TIFF file. + * Fix header to pass -Wstrict-prototypes + ------------------------------------------------------------------- Wed Feb 1 10:45:36 UTC 2017 - adam.majer@suse.de diff --git a/exempi.spec b/exempi.spec index 6d9e03e..ed8f178 100644 --- a/exempi.spec +++ b/exempi.spec @@ -1,7 +1,7 @@ # # spec file for package exempi # -# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,7 +18,7 @@ %define debug_package_requires libexempi3 = %{version} Name: exempi -Version: 2.2.2 +Version: 2.4.5 Release: 0 Summary: XMP support library License: BSD-3-Clause From c35347a472f188dbea7ee9ddc73c3600b4b7e9a50e9288728f3dcf1101907999 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Tom=C3=A1=C5=A1=20Chv=C3=A1tal?= Date: Wed, 14 Mar 2018 16:35:30 +0000 Subject: [PATCH 2/2] Accepting request 586995 from home:jengelh:branches:multimedia:libs - Extend descriptions. OBS-URL: https://build.opensuse.org/request/show/586995 OBS-URL: https://build.opensuse.org/package/show/multimedia:libs/exempi?expand=0&rev=27 --- exempi.changes | 5 +++++ exempi.spec | 22 ++++++++++++++++------ 2 files changed, 21 insertions(+), 6 deletions(-) diff --git a/exempi.changes b/exempi.changes index bb350a2..a619f9e 100644 --- a/exempi.changes +++ b/exempi.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Wed Mar 14 14:56:58 UTC 2018 - jengelh@inai.de + +- Extend descriptions. + ------------------------------------------------------------------- Wed Mar 14 13:20:57 UTC 2018 - kbabioch@suse.com diff --git a/exempi.spec b/exempi.spec index ed8f178..61568df 100644 --- a/exempi.spec +++ b/exempi.spec @@ -40,30 +40,40 @@ BuildRequires: zlib-devel BuildRoot: %{_tmppath}/%{name}-%{version}-build %description -XMP parsing and IO library +Exempi is a library for XMP parsing and I/O. XMP is a kind of +metadata for images and PDF. %package -n libexempi3 Summary: XMP support library Group: System/Libraries %description -n libexempi3 -XMP parsing and IO library +Exempi is a library for XMP parsing and I/O. XMP (Extensible Metadata +Platform) facilitates embedding metadata in files using a subset of +RDF. Most notably, XMP supports embedding metadata in PDF and many +image formats. %package tools -Summary: XMP support library -- Tools +Summary: Tools from Exempi, an XMP support library Group: Productivity/Graphics/Other %description tools -XMP parsing and IO library +Exempi is a library for XMP parsing and I/O. XMP is a kind of +metadata for images and PDF. + +This subpackage contains utilities from the Exempi project. %package -n libexempi-devel -Summary: XMP support library +Summary: Development files for the Exempi XMP support library Group: Development/Libraries/C and C++ Requires: glibc-devel Requires: libexempi3 = %{version} %description -n libexempi-devel -XMP parsing and IO library +Exempi is a library for XMP metadata parsing and doing I/O with it. + +This subpackage contains the header files for building applications +with Exempi. %prep %setup -q