- updated to 0.18.4:

* Fix for possible heap overrun in Canon makernotes parser
 * Fix for CVE-2017-13735
 * CVE-2017-14265: Additional check for X-Trans CFA pattern data
- remove libraw-CVE-2017-6887,6886.patch and
         libraw-CVE-2017-6890,6899.patch:
  no need to patch dcraw.c, it is not used

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=96

libraw.spec

@@ -21,7 +21,7 @@
 Name:           libraw
 %define lver    16
 %define lname	libraw%{lver}
-Version:        0.18.2
+Version:        0.18.4
 Release:        0
 Summary:        Library for reading RAW files obtained from digital photo cameras
 License:        CDDL-1.0 or LGPL-2.1
@@ -30,8 +30,6 @@ Url:            http://www.libraw.org/
 
 #Git-Clone:	git://github.com/LibRaw/LibRaw
 Source:         http://www.libraw.org/data/%tar_name-%version.tar.gz
-Patch0:         libraw-CVE-2017-6890,6899.patch
-Patch1:         libraw-CVE-2017-6887,6886.patch
 BuildRequires:  fdupes
 BuildRequires:  gcc-c++
 BuildRequires:  libjasper-devel
@@ -100,8 +98,6 @@ against LibRaw. LibRaw does not provide dynamic libraries.
 
 %prep
 %setup -qn %tar_name-%version
-%patch0 -p1
-%patch1 -p1
 
 %build
 export CXXFLAGS="%optflags -fPIC -DUSE_ZLIB"