Commit Graph

169 Commits

Author SHA256 Message Date
Ana Guerrero
7228e4c8df Accepting request 1227816 from graphics
Limit fdupes to %_libdir

The only dup reported was for /usr/lib64/libraw.a and libraw_r.a (forwarded request 1227792 from bmwiedemann)

OBS-URL: https://build.opensuse.org/request/show/1227816
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=67
2024-12-03 19:45:53 +00:00
a56505d780 Limit fdupes to %_libdir
The only dup reported was for /usr/lib64/libraw.a and libraw_r.a

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=161
2024-12-02 15:53:16 +00:00
Dominique Leuenberger
e79996d037 Accepting request 1136090 from graphics
OBS-URL: https://build.opensuse.org/request/show/1136090
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=66
2024-01-04 14:54:38 +00:00
Dirk Stoecker
6f8c5e2902 Accepting request 1135525 from home:dirkmueller:Factory
- update to 0.21.2:
  * New compile-defined limit LIBRAW_MAX_PROFILE_SIZE_MB:
    limits allocation/read size for embedded color profile
    Embedded color profile allocation/read size: limited by input
    file size.
  * Multiple fixes (mostly inspired by oss-fuzz) to improve
    library stability and/or input checks.
  * raw-identify: use fallback if PATH_MAX not available
  * Disabled color conversion for Canon 16-bit thumbnails
  * docs/changelog: explained the case when no thumbnail is found
    in specific file
  * swapXX renamed to libraw_swapXX to avoid name conflict
  * better striped thumbnails handling
- drop libraw-CVE-2023-1729.patch (upstream)

  * Olympus XZ-1: do not provide linear_max
  * multiple camera support improvements
  * quicktake_100_load_raw: check width/height limits
    CVE-2017-14265: Additional check for X-Trans CFA pattern data
 * Fix for possible heap overrun in Canon makernotes parser
    Phase One flat field code called even for half-size output
- added missing parts of the fix for CVE-2017-6887
* phase_one_correct always returns value; handle P1 return codes
  files and DNG converted by Adobe convertor).
  analysis.
* Fujifilm F700/S20Pro second frame support
        Olympus E-P5
   - Support for updated Samsung NX200 firmware.
 * Makefile.msvc: easy additional compiler flag editing.
 * Fixed decoding of some Leaf Aptus II files

OBS-URL: https://build.opensuse.org/request/show/1135525
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=159
2024-01-02 09:33:58 +00:00
Dominique Leuenberger
b6f269e9ab Accepting request 1132688 from graphics
CVE-2018-5819,CVE-2021-32142
    bsc#1120515,bsc#1120516,bsc#1120517,bsc#1120519,bsc#1208470)

OBS-URL: https://build.opensuse.org/request/show/1132688
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=65
2023-12-12 18:32:34 +00:00
664bccdd8b CVE-2018-5819,CVE-2021-32142
bsc#1120515,bsc#1120516,bsc#1120517,bsc#1120519,bsc#1208470)

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=157
2023-12-12 13:48:58 +00:00
Ana Guerrero
6f99f2cfae Accepting request 1111919 from graphics
- security update
- added patches
  fix CVE-2020-22628 [bsc#1215308], stretch() function in libraw/src/postprocessing/aspect_ratio.cpp
  + libraw-CVE-2020-22628.patch

OBS-URL: https://build.opensuse.org/request/show/1111919
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=64
2023-09-22 19:46:45 +00:00
4533446095 fix CVE-2020-22628 [bsc#1215308], stretch() function in libraw/src/postprocessing/aspect_ratio.cpp
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=155
2023-09-18 08:29:37 +00:00
e50c2429eb - security update
- added patches
  fix CVE-2020-22628 [bsc#1215308], stretch() function in librawsrcpostprocessingspect_ratio.cpp
  + libraw-CVE-2020-22628.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=154
2023-09-14 14:58:10 +00:00
Dominique Leuenberger
5c0f7799bd Accepting request 1084055 from graphics
- security update
- added patches
  fix CVE-2023-1729 [bsc#1210720], a heap-buffer-overflow in raw2image_ex()
  + libraw-CVE-2023-1729.patch

OBS-URL: https://build.opensuse.org/request/show/1084055
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=63
2023-05-03 10:56:29 +00:00
6fbdde71f7 - security update
- added patches
  fix CVE-2023-1729 [bsc#1210720], a heap-buffer-overflow in raw2image_ex()
  + libraw-CVE-2023-1729.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=152
2023-05-02 13:50:12 +00:00
Dominique Leuenberger
ec4e13e44c Accepting request 1060347 from graphics
- update to 0.21.1:
  * fixed typo in panasonic metadata parser
  * Multiple fixes inspired by oss-fuzz project
  * Phase One/Leaf IIQ-S v2 support
  * Canon CR3 filmrolls
  * Canon CRM (movie) files
  * Tiled bit-packed (and 16-bit unpacked) DNGs
  * (non-standard) Deflate-compressed integer DNG files are allowed
  * Canon EOS R3, R7 and R10
  * Fujifilm X-H2S, X-T30 II
  * OM System OM-1
  * Leica M11
  * Sony A7-IV (ILCE-7M4)
  * DJI Mavic 3
  * Nikon Z9: standard compression formats only (forwarded request 1059316 from dirkmueller)

OBS-URL: https://build.opensuse.org/request/show/1060347
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=62
2023-01-24 18:42:03 +00:00
e271853089 Accepting request 1059316 from home:dirkmueller:Factory
- update to 0.21.1:
  * fixed typo in panasonic metadata parser
  * Multiple fixes inspired by oss-fuzz project
  * Phase One/Leaf IIQ-S v2 support
  * Canon CR3 filmrolls
  * Canon CRM (movie) files
  * Tiled bit-packed (and 16-bit unpacked) DNGs
  * (non-standard) Deflate-compressed integer DNG files are allowed
  * Canon EOS R3, R7 and R10
  * Fujifilm X-H2S, X-T30 II
  * OM System OM-1
  * Leica M11
  * Sony A7-IV (ILCE-7M4)
  * DJI Mavic 3
  * Nikon Z9: standard compression formats only

OBS-URL: https://build.opensuse.org/request/show/1059316
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=150
2023-01-23 08:06:25 +00:00
Dominique Leuenberger
3e4857b76c Accepting request 1055784 from graphics
- Update to 0.21.0:
  * Camera format support:
    + Phase One/Leaf IIQ-S v2 support
    + Canon CR3 filmrolls/RawBurst
    + Canon CRM (movie) files
    + Tiled bit-packed (and 16-bit unpacked) DNGs
    + (non-standard) Deflate-compressed integer DNG files are allowed
  * Camera support:
    + Canon EOS R3, R7 and R10
    + Fujifilm X-H2S, X-T30 II
    + OM System OM-1
    + Leica M11
    + Sony A7-IV (ILCE-7M4)
    + DJI Mavic 3
    + Nikon Z9: standard compression formats only
  * Multiple (resultion) thumbnails support
  * Misc:
    + Nikon makernotes: read NEFCompression tag for HE/HE* files
    + Nikon orientation tag: more fixed offsets for known cameras
    + Adobe DNG SDK 1.6 support (meaning, just an additional patch for GPR SDK)
  * Bugs fixed:
    + Fixed possible out-of-buffer read in Nikon orientation tag parser
    + Out-of-range read-only array access in postprocessing if output_color is set to 0 (raw color)
    + Minolta Z2 was not recognized correctly on 32-bit systems
    + Fixed possible buffer overflow in Kodak C330 decoder
    + dcraw_process(): check for buffer allocation results to avoid NULL deref
    + Multiple bugfixes inspired by oss-fuzz project (forwarded request 1055251 from polslinux)

OBS-URL: https://build.opensuse.org/request/show/1055784
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=61
2023-01-15 16:57:57 +00:00
45ae7dd8da Accepting request 1055251 from home:polslinux:branches:graphics
- Update to 0.21.0:
  * Camera format support:
    + Phase One/Leaf IIQ-S v2 support
    + Canon CR3 filmrolls/RawBurst
    + Canon CRM (movie) files
    + Tiled bit-packed (and 16-bit unpacked) DNGs
    + (non-standard) Deflate-compressed integer DNG files are allowed
  * Camera support:
    + Canon EOS R3, R7 and R10
    + Fujifilm X-H2S, X-T30 II
    + OM System OM-1
    + Leica M11
    + Sony A7-IV (ILCE-7M4)
    + DJI Mavic 3
    + Nikon Z9: standard compression formats only
  * Multiple (resultion) thumbnails support
  * Misc:
    + Nikon makernotes: read NEFCompression tag for HE/HE* files
    + Nikon orientation tag: more fixed offsets for known cameras
    + Adobe DNG SDK 1.6 support (meaning, just an additional patch for GPR SDK)
  * Bugs fixed:
    + Fixed possible out-of-buffer read in Nikon orientation tag parser
    + Out-of-range read-only array access in postprocessing if output_color is set to 0 (raw color)
    + Minolta Z2 was not recognized correctly on 32-bit systems
    + Fixed possible buffer overflow in Kodak C330 decoder
    + dcraw_process(): check for buffer allocation results to avoid NULL deref
    + Multiple bugfixes inspired by oss-fuzz project

OBS-URL: https://build.opensuse.org/request/show/1055251
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=148
2023-01-04 12:32:40 +00:00
Dominique Leuenberger
c037e066d9 Accepting request 921823 from graphics
- previous version updates fixed also:
  * CVE-2018-20337,CVE-2018-20363,CVE-2018-20364,CVE-2018-20365,
    CVE-2018-5815,CVE-2018-5816,CVE-2018-5817,CVE-2018-5818,
    CVE-2018-5819
   (bsc#1097975,bsc#1103206,bsc#1120498,bsc#1120499,bsc#1120500,
    bsc#1120515,bsc#1120516,bsc#1120517,bsc#1120519)

OBS-URL: https://build.opensuse.org/request/show/921823
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=60
2021-09-27 18:09:12 +00:00
6f7538c3d1 - previous version updates fixed also:
* CVE-2018-20337,CVE-2018-20363,CVE-2018-20364,CVE-2018-20365,
    CVE-2018-5815,CVE-2018-5816,CVE-2018-5817,CVE-2018-5818,
    CVE-2018-5819
   (bsc#1097975,bsc#1103206,bsc#1120498,bsc#1120499,bsc#1120500,
    bsc#1120515,bsc#1120516,bsc#1120517,bsc#1120519)

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=147
2021-09-27 14:53:14 +00:00
Dominique Leuenberger
dfba5b09f5 Accepting request 887564 from graphics
Hardening: link as PIE (bsc#1184123). (forwarded request 887317 from wfrisch)

OBS-URL: https://build.opensuse.org/request/show/887564
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=59
2021-04-24 21:07:04 +00:00
835c323dc2 Accepting request 887317 from home:wfrisch:branches:graphics
Hardening: link as PIE (bsc#1184123).

OBS-URL: https://build.opensuse.org/request/show/887317
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=145
2021-04-22 12:27:22 +00:00
Richard Brown
e76a6e1f69 Accepting request 873641 from graphics
- baselibs required by ImageMagick
- added sources
  + baselibs.conf

OBS-URL: https://build.opensuse.org/request/show/873641
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=58
2021-02-22 13:22:44 +00:00
0b22c485e7 - baselibs required by ImageMagick
- added sources
  + baselibs.conf

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=143
2021-02-19 07:41:57 +00:00
Dominique Leuenberger
0924e57e50 Accepting request 844046 from graphics
- update to 0.20.2:
  * corrected GPS EXIF output
  * Olympus XZ-1: do not provide linear_max 
  * Pentax Optio 33WR: maker index was incorrect
  * dcraw_emu: corrected help line for -6 option.
  * raw-identify: corrected range check for color matrices print
  * use_camera_matrix option: fixed a bug introduced when making compiler more happy
  * multiple camera support improvements (forwarded request 844032 from dirkmueller)

OBS-URL: https://build.opensuse.org/request/show/844046
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=57
2020-10-29 08:21:42 +00:00
7c7e0c52a5 Accepting request 844032 from home:dirkmueller:branches:graphics
- update to 0.20.2:
  * corrected GPS EXIF output
  * Olympus XZ-1: do not provide linear_max 
  * Pentax Optio 33WR: maker index was incorrect
  * dcraw_emu: corrected help line for -6 option.
  * raw-identify: corrected range check for color matrices print
  * use_camera_matrix option: fixed a bug introduced when making compiler more happy
  * multiple camera support improvements

OBS-URL: https://build.opensuse.org/request/show/844032
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=141
2020-10-26 09:29:56 +00:00
Dominique Leuenberger
d1067d179d Accepting request 824129 from graphics
OBS-URL: https://build.opensuse.org/request/show/824129
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=56
2020-08-28 19:11:58 +00:00
Dirk Stoecker
ce7f7845b0 Accepting request 822595 from home:polslinux:branches:graphics
- version update to 0.20.0
  * Camera Format support
    + Canon CR3
    + GoPro (via GPR SDK)
    + Panasonic 14-bit
    + Fujifilm compressed/16bit
    + Rapsberry Pi RAW+JPEG format (if USE_6BY9RPI defined)
  * Camera support (+59, 1131 total)
    + Canon: PowerShot G5 X Mark II, G7 X Mark III, SX70 HS,
    + EOS R, EOS RP, EOS 90D, EOS 250D,  EOS M6 Mark II, EOS M50, EOS M200
    + EOS 1DX Mark III (lossless files only)
    + DJI Mavic Air, Osmo Action
    + FujiFilm GFX 100, X-A7, X-Pro3, X100V,
      X-T4 (uncompressed/lossless compressed only), X-T200
    + GoPro Fusion, HERO5, HERO6, HERO7, HERO8
    + Hasselblad L1D-20c, X1D II 50C
    + Leica D-LUX7, Q-P, Q2, V-LUX5, C-Lux / CAM-DC25, SL2, M10 Monochrom
    + Nikon D780, Z50, P950
    + Olympus TG-6, E-M5 Mark III, E-PL10, E-M1 Mark III,
    + Panasonic DC-FZ1000 II, DC-G90, DC-S1, DC-S1R, DC-S1H, DC-TZ95
    + PhaseOne IQ4 150MP
    + Ricoh GR III
    + Sony A7R IV, A9 II, ILCE-6100, ILCE-6600, RX0 II, RX100 VII
    + Zenit M
  * minor/unsorted changes
    + Add support for zlib during configure
    + Fixed multiple problems found by OSS-Fuzz
    + Lots of changes in imgdata.makernotes
    + DNG whitelevel calculated via BitsPerSample if not set via tags
    + DNG: support for LinearDNG w/ BlackLevelRepeat.. pattern
    + better support for Nikon Coolscan 16-bit NEF files
    + Bayer images: ensure that even margins have the same COLOR()
      for both the active sensor area and the full sensor area.
    + fixed several bugs
- removed libraw-Add-Sony-ILCE-7M3.patch
- removed libraw-CVE-2020-15503.patch

OBS-URL: https://build.opensuse.org/request/show/822595
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=139
2020-08-03 12:38:49 +00:00
Dominique Leuenberger
438a7e57b0 Accepting request 819256 from graphics
- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch

OBS-URL: https://build.opensuse.org/request/show/819256
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=55
2020-07-15 09:24:32 +00:00
ab9161749c - security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=137
2020-07-07 15:00:30 +00:00
Dominique Leuenberger
81d10021ea Accepting request 758470 from graphics
- version update to 0.19.5
  * LibRaw 0.19.5
  * WB coefficients check was too strong, weakened
  * Fixed possible buffer underrun in modern Samsung loader
  * LibRaw 0.19.4
  * CRW/metadata loop prevention code is rolled back due to ABI
    incompatibility. To enable, use -DLIBRAW_METADATA_LOOP_PREVENTION=1
    compile flag for LibRaw and ALL APPS.
  * Fixed possible buffer underflow
  * LibRaw 0.19.3
  * Several fixes inspired by OSS-Fuzz
- deleted patches
  - libraw-half-size-allocation-buffer-overflow.patch (upstreamed)

OBS-URL: https://build.opensuse.org/request/show/758470
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=54
2020-01-02 13:39:59 +00:00
c4d57e1859 - version update to 0.19.5
* LibRaw 0.19.5
  * WB coefficients check was too strong, weakened
  * Fixed possible buffer underrun in modern Samsung loader
  * LibRaw 0.19.4
  * CRW/metadata loop prevention code is rolled back due to ABI
    incompatibility. To enable, use -DLIBRAW_METADATA_LOOP_PREVENTION=1
    compile flag for LibRaw and ALL APPS.
  * Fixed possible buffer underflow
  * LibRaw 0.19.3
  * Several fixes inspired by OSS-Fuzz
- deleted patches
  - libraw-half-size-allocation-buffer-overflow.patch (upstreamed)

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=135
2019-12-20 09:49:25 +00:00
Dominique Leuenberger
86664d0a8a Accepting request 725044 from graphics
- drop JPEG2000 support [bsc#1144252]

- Use FAT LTO objects in order to provide proper static library.

OBS-URL: https://build.opensuse.org/request/show/725044
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=53
2019-09-11 08:19:44 +00:00
dafbaf02b5 - drop JPEG2000 support [bsc#1144252]
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=133
2019-08-21 13:03:10 +00:00
c7febdbe5f Accepting request 720466 from home:marxin:static
- Use FAT LTO objects in order to provide proper static library.

OBS-URL: https://build.opensuse.org/request/show/720466
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=132
2019-08-05 08:18:35 +00:00
Dominique Leuenberger
0dd82e78cb Accepting request 664333 from graphics
- supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
  + libraw-half-size-allocation-buffer-overflow.patch

- asan_build: build ASAN included
- debug_build: build more suitable for debugging

OBS-URL: https://build.opensuse.org/request/show/664333
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=52
2019-01-15 08:13:12 +00:00
197c7d72fe - supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
+ libraw-half-size-allocation-buffer-overflow.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=130
2019-01-10 10:59:36 +00:00
07185dde95 OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=129 2019-01-09 12:22:19 +00:00
da5e16073e OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=128 2019-01-09 11:34:08 +00:00
2fba2715ca - complete fix for CVE-2018-20365 [bsc#1120500]
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=127
2019-01-09 10:07:31 +00:00
292e14c9ed - asan_build: build ASAN included
- debug_build: build more suitable for debugging

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=126
2019-01-08 13:23:50 +00:00
Dominique Leuenberger
83a3c53239 Accepting request 662208 from graphics
- Updated to version 0.19.2
 * Fixed possible buffer overrun at Fuji makernotes parser
 * Fixed possible write to NULL pointer at raw2image/raw2image_ex calls.
- ./configure not present in sources

OBS-URL: https://build.opensuse.org/request/show/662208
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=51
2019-01-03 17:04:14 +00:00
1e0c8e559c - Updated to version 0.19.2
* Fixed possible buffer overrun at Fuji makernotes parser
 * Fixed possible write to NULL pointer at raw2image/raw2image_ex calls.
- ./configure not present in sources

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=124
2018-12-31 15:38:58 +00:00
Dominique Leuenberger
b1f79c2504 Accepting request 657091 from graphics
- Updated to version 0.19.1
  * Finally: got Sinar 4shot sample, works fine now
  * OpenMP critical sections for malloc/free; extra #ifdefs
    removed; bin/dcraw_dist could be built again using Makefile.devel
  * additional checks in parse_phase_one()
  * more checks on file offsets/tag len in parse_minolta
  * more checks in parse_ciff
  * Mempool check reworked
  * Old Leaf (16bit/3color/TIFF) support
  * Fix cameraWB->autoWB fallback
  * Polaroid x530 channel swap; get metadata pointer for Foveon files
  * Fixed Secunia Advisory SA86384
    - possible infinite loop in unpacked_load_raw()
    - possible infinite loop in parse_rollei()
    - possible infinite loop in parse_sinar_ia()
- removed libraw-CVE-2018-5813.patch (upstreamed)

OBS-URL: https://build.opensuse.org/request/show/657091
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=50
2018-12-19 12:26:21 +00:00
6867ad1b1d - removed libraw-CVE-2018-5813.patch (upstreamed)
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=122
2018-12-11 08:57:13 +00:00
c2cd305880 - Updated to version 0.19.1
* Finally: got Sinar 4shot sample, works fine now
  * OpenMP critical sections for malloc/free; extra #ifdefs
    removed; bin/dcraw_dist could be built again using Makefile.devel
  * additional checks in parse_phase_one()
  * more checks on file offsets/tag len in parse_minolta
  * more checks in parse_ciff
  * Mempool check reworked
  * Old Leaf (16bit/3color/TIFF) support
  * Fix cameraWB->autoWB fallback
  * Polaroid x530 channel swap; get metadata pointer for Foveon files
  * Fixed Secunia Advisory SA86384
    - possible infinite loop in unpacked_load_raw()
    - possible infinite loop in parse_rollei()
    - possible infinite loop in parse_sinar_ia()

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=121
2018-12-11 08:56:25 +00:00
Dominique Leuenberger
6e52953079 Accepting request 627331 from graphics
OBS-URL: https://build.opensuse.org/request/show/627331
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=49
2018-09-04 20:46:55 +00:00
61ceba12d2 Accepting request 627249 from home:gladiac:branches:graphics
- Add patch libraw-Add-Sony-ILCE-7M3.patch
  * See https://github.com/LibRaw/LibRaw/pull/145
  * The patch has been cut, the tarball from the download section
    doesn't match the git tag. dcraw/dcraw.c is totall different.
- Use %license tag

OBS-URL: https://build.opensuse.org/request/show/627249
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=119
2018-08-03 12:14:16 +00:00
dbea602fbb OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=118 2018-08-01 12:20:41 +00:00
129f943f5f * CVE-2018-5815 [bsc#1103206]
+ libraw-CVE-2018-5815.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=117
2018-08-01 11:43:03 +00:00
002f02bcd4 - security update
* CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=116
2018-08-01 11:19:18 +00:00
bf698e2497 - new upstream branch, version 0.19.x
* fixes CVE-2018-10529 and CVE-2018-10528, hence removing
    . libraw-CVE-2018-10528.patch
    . libraw-CVE-2018-10529.patch
  * the rest of changes at
    https://www.libraw.org/download#stable

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=115
2018-08-01 10:16:21 +00:00
Dominique Leuenberger
c5880ab9e9 Accepting request 602481 from graphics
- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch

- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun

OBS-URL: https://build.opensuse.org/request/show/602481
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=48
2018-05-06 12:56:15 +00:00