- libexif-0.6.23 (2021-09-12):

- Translation updates: es, pl, uk, fr
  - EXIF_TAG_SENSITIVITY_TYPE decoder added, added some more Exif 2.3 tags:
        EXIF_TAG_STANDARD_OUTPUT_SENSITIVITY
        EXIF_TAG_RECOMMENDED_EXPOSURE_INDEX
        EXIF_TAG_ISO_SPEED
        EXIF_TAG_ISO_SPEEDLatitudeYYY
        EXIF_TAG_ISO_SPEEDLatitudeZZZ
        EXIF_TAG_OFFSET_TIME
        EXIF_TAG_OFFSET_TIME_ORIGINAL
        EXIF_TAG_OFFSET_TIME_DIGITIZED
        EXIF_TAG_IMAGE_DEPTH
  - be more relaxed to out of order JPG / EXIF dataheaders in files generated by some tools
  - default GPS IFD table added
  - Decode more Nikon Makernote tag names
  - Added Apple iOS Makernote
  - Security fixes:
    - CVE-2020-0198: unsigned integer overflow in exif_data_load_data_content
    - CVE-2020-0452: compiler optimization could remove an a
      bufferoverflow check, making a buffer overflow possible with some
      EXIF tags
    - some more denial of service (compute time or stack exhaustion) counter-measures
      added that avoid minutes of decoding time with malformed files found
      by OSS-Fuzz

OBS-URL: https://build.opensuse.org/package/show/graphics/libexif?expand=0&rev=41

libexif-0.6.22.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:8672d93172a0cd022aba49ede265d2d3f1aa0977c62dec5bda5e108cad237233
-size 1900414

libexif-0.6.22.tar.bz2.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEfEr9Ydiq51cHlqUXIgnWkC+WnJUFAl7CsXsACgkQIgnWkC+W
-nJWv7Q//UNlR0Cf5I+skfhwcCnEu3V5gikptwSHBunMzLyC6YH39uoAScT2Ist4A
-KRRe1INM8Z2W13o7wW0rTdCRlVV/zWmLNjSYgU6Wr0nohG7l38VM6uyvZQjb+4yR
-8IkXYy3uurWQDm2MpTJrWpNQoEoX3sSXzUVOD4VMBqz4C/c4BmRpe7e0YkdkeobR
-XFgiita0umBX/DXeWwjRF2nbkgJOKGCzGeAcQzC9SIfemT2WvuBLqfVHSUTBYIHI
-MsZibvSh7CQdTnpeL80r5nfL2GjJeyhLYwFLa4yUGYrQ0/IpGBwNqmy6qqc5jQMk
-7mVdAg/gnUF4EY+0w8i+91e6pu2FF7WExoANjosU59V+YNqqKf0mgdk1BjLdSmBv
-4n6PFp7STQdU8zzgVhxDc2eEHfbBpvmRfL8iByx4ilTzl/awPOjeIREWBD2lailc
-1ICJoXIO6gT9euQvBnnCINOdZ+jN/cPSMPRfO6mGg1HfjW2zcyaAPqYBV94sCCf2
-IheRM1qiVF5UYAwKIt6VE/YxjnJuUvN2p4m++R9LGOBd96Lvp4TB+HltcwpPV0EO
-cEcvEJmTtWKZMTycXIzvrR+qHvwfiduXbLulCQw55r8UHd7k5X8uFlt0TAebY/9q
-qALFCoAbICw0AUZGXqUAl/G6PqtjzM68C/3RmM6aPKFPHn6PBZI=
-=0Wku
------END PGP SIGNATURE-----

libexif-0.6.23.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:5148dabf332576ed19d7fda507a73444e5ad9d3036aac22ee644745e040bb307
+size 1964635

libexif-0.6.23.tar.bz2.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=Bleq
+-----END PGP SIGNATURE-----

libexif.changes

@@ -1,3 +1,31 @@
+-------------------------------------------------------------------
+Mon Sep 13 07:05:10 UTC 2021 - Marcus Meissner <meissner@suse.com>
+
+- libexif-0.6.23 (2021-09-12):
+  - Translation updates: es, pl, uk, fr
+  - EXIF_TAG_SENSITIVITY_TYPE decoder added, added some more Exif 2.3 tags:
+        EXIF_TAG_STANDARD_OUTPUT_SENSITIVITY
+        EXIF_TAG_RECOMMENDED_EXPOSURE_INDEX
+        EXIF_TAG_ISO_SPEED
+        EXIF_TAG_ISO_SPEEDLatitudeYYY
+        EXIF_TAG_ISO_SPEEDLatitudeZZZ
+        EXIF_TAG_OFFSET_TIME
+        EXIF_TAG_OFFSET_TIME_ORIGINAL
+        EXIF_TAG_OFFSET_TIME_DIGITIZED
+        EXIF_TAG_IMAGE_DEPTH
+  - be more relaxed to out of order JPG / EXIF dataheaders in files generated by some tools
+  - default GPS IFD table added
+  - Decode more Nikon Makernote tag names
+  - Added Apple iOS Makernote
+  - Security fixes:
+    - CVE-2020-0198: unsigned integer overflow in exif_data_load_data_content
+    - CVE-2020-0452: compiler optimization could remove an a
+      bufferoverflow check, making a buffer overflow possible with some
+      EXIF tags
+    - some more denial of service (compute time or stack exhaustion) counter-measures
+      added that avoid minutes of decoding time with malformed files found
+      by OSS-Fuzz
+
 -------------------------------------------------------------------
 Mon May 18 16:08:17 UTC 2020 - Marcus Meissner <meissner@suse.com>
 

libexif.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package libexif
 #
-# Copyright (c) 2020 SUSE LLC
+# Copyright (c) 2021 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -24,8 +24,8 @@ Summary:        An EXIF Tag Parsing Library for Digital Cameras
 License:        LGPL-2.1-or-later
 Group:          Development/Libraries/C and C++
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
-Source0:        %{name}-%{version}.tar.bz2
+Source0:        https://github.com/libexif/libexif/releases/download/v%version/libexif-%version.tar.bz2
-Source2:        %{name}-%{version}.tar.bz2.asc
+Source2:        https://github.com/libexif/libexif/releases/download/v%version/libexif-%version.tar.bz2.asc
 Source3:        %name.keyring
 Source1:        baselibs.conf
 BuildRequires:  doxygen