Accepting request 586791 from home:kbabioch:branches:multimedia:libs

- Update to 2.4.5:
  * Fix a buffer overflow in the PSD parser. (CVE-2018-7730 bnc#1085295)
  * Fix a buffer overflow in the TIFF parser. (CVE-2018-7728 bnc#1085297)
  * Fix a buffer overflow in PostScript parser. (CVE-2018-7729 bnc#1085296)
  * Fix a null dereference in WEBP parser. (CVE-2018-7731 bnc#1085294)
  * Properly initialize pointers in WEBP.
  * Fix an infinite loop in RIFF parser.
  * Fix an infinite loop in QuickTime parser.
  * Fix an infinite loop in ASF parser.
  * Adjust minimum version for gcc in documentation.
  * Fix a buffer overrun, memcpy() on overlapping regions, use after free in
    the exception handling.  Fix a fatal assert with corrupt WEBP.
  * Fix a crash on a corrupt file.
  * Upgrade XMPCore to Adobe XMP CC 2014.12.
    * New flag to optimize layout on MPEG4 files.
    * GoPro MPEG4 video files support.
    * Improved JPEG support.
    * iXML support in WAVE files.
    * Several bugs and memory leaks fixes.
    * Changes from Adobe XMP CC 2013.06.
      * Pluggable file handlers (not exposed yet in Exempi)
      * Support for Exif 2.3 properties
      * New RIFF file handler
      * Better Postscript support.
      * Lot of bug fixes.
  * Now require (partial) C++11 support to compile (gcc 4.4.7 tested)
  * WebP format handler (contributed: Frankie Dintino, The Atlantic)
  * Several API improvements
  * Fix potential crash with corrupt TIFF file.
  * Fix header to pass -Wstrict-prototypes

OBS-URL: https://build.opensuse.org/request/show/586791
OBS-URL: https://build.opensuse.org/package/show/multimedia:libs/exempi?expand=0&rev=26
This commit is contained in:
Tomáš Chvátal 2018-03-14 14:17:49 +00:00 committed by Git OBS Bridge
parent 3330199e22
commit 98e5a07e80
6 changed files with 45 additions and 12 deletions

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:0e7ad0e5e61b6828e38d31a8cc59c26c9adeed7edf4b26708c400beb6a686c07
size 3380662

View File

@ -1,7 +0,0 @@
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iEYEABECAAYFAlQD4rUACgkQX+4F5qVuFaPYsACeJ/JzbFIFBE950MF92v02/Tan
888An0nojYEGGUgn+scqC3bFOCOiE0dp
=d0uc
-----END PGP SIGNATURE-----

3
exempi-2.4.5.tar.bz2 Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:406185feb88e84ea1d4b4251370be2991205790d7113a7e28e192ff46a4f221e
size 3615134

6
exempi-2.4.5.tar.bz2.asc Normal file
View File

@ -0,0 +1,6 @@
-----BEGIN PGP SIGNATURE-----
iEYEABECAAYFAlqgq08ACgkQX+4F5qVuFaNeLwCgz4MWXwc+jl2vMPf0zbeOgFg2
qf4AnAw1DJC4jNhc9xXaCkQfDYYG3R1m
=4wPW
-----END PGP SIGNATURE-----

View File

@ -1,3 +1,37 @@
-------------------------------------------------------------------
Wed Mar 14 13:20:57 UTC 2018 - kbabioch@suse.com
- Update to 2.4.5:
* Fix a buffer overflow in the PSD parser. (CVE-2018-7730 bnc#1085295)
* Fix a buffer overflow in the TIFF parser. (CVE-2018-7728 bnc#1085297)
* Fix a buffer overflow in PostScript parser. (CVE-2018-7729 bnc#1085296)
* Fix a null dereference in WEBP parser. (CVE-2018-7731 bnc#1085294)
* Properly initialize pointers in WEBP.
* Fix an infinite loop in RIFF parser.
* Fix an infinite loop in QuickTime parser.
* Fix an infinite loop in ASF parser.
* Adjust minimum version for gcc in documentation.
* Fix a buffer overrun, memcpy() on overlapping regions, use after free in
the exception handling. Fix a fatal assert with corrupt WEBP.
* Fix a crash on a corrupt file.
* Upgrade XMPCore to Adobe XMP CC 2014.12.
* New flag to optimize layout on MPEG4 files.
* GoPro MPEG4 video files support.
* Improved JPEG support.
* iXML support in WAVE files.
* Several bugs and memory leaks fixes.
* Changes from Adobe XMP CC 2013.06.
* Pluggable file handlers (not exposed yet in Exempi)
* Support for Exif 2.3 properties
* New RIFF file handler
* Better Postscript support.
* Lot of bug fixes.
* Now require (partial) C++11 support to compile (gcc 4.4.7 tested)
* WebP format handler (contributed: Frankie Dintino, The Atlantic)
* Several API improvements
* Fix potential crash with corrupt TIFF file.
* Fix header to pass -Wstrict-prototypes
-------------------------------------------------------------------
Wed Feb 1 10:45:36 UTC 2017 - adam.majer@suse.de

View File

@ -1,7 +1,7 @@
#
# spec file for package exempi
#
# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@ -18,7 +18,7 @@
%define debug_package_requires libexempi3 = %{version}
Name: exempi
Version: 2.2.2
Version: 2.4.5
Release: 0
Summary: XMP support library
License: BSD-3-Clause