Commit Graph

88 Commits

Author SHA256 Message Date
Dirk Stoecker
a917afa8f9 Accepting request 1135525 from home:dirkmueller:Factory
- update to 0.21.2:
  * New compile-defined limit LIBRAW_MAX_PROFILE_SIZE_MB:
    limits allocation/read size for embedded color profile
    Embedded color profile allocation/read size: limited by input
    file size.
  * Multiple fixes (mostly inspired by oss-fuzz) to improve
    library stability and/or input checks.
  * raw-identify: use fallback if PATH_MAX not available
  * Disabled color conversion for Canon 16-bit thumbnails
  * docs/changelog: explained the case when no thumbnail is found
    in specific file
  * swapXX renamed to libraw_swapXX to avoid name conflict
  * better striped thumbnails handling
- drop libraw-CVE-2023-1729.patch (upstream)

  * Olympus XZ-1: do not provide linear_max
  * multiple camera support improvements
  * quicktake_100_load_raw: check width/height limits
    CVE-2017-14265: Additional check for X-Trans CFA pattern data
 * Fix for possible heap overrun in Canon makernotes parser
    Phase One flat field code called even for half-size output
- added missing parts of the fix for CVE-2017-6887
* phase_one_correct always returns value; handle P1 return codes
  files and DNG converted by Adobe convertor).
  analysis.
* Fujifilm F700/S20Pro second frame support
        Olympus E-P5
   - Support for updated Samsung NX200 firmware.
 * Makefile.msvc: easy additional compiler flag editing.
 * Fixed decoding of some Leaf Aptus II files

OBS-URL: https://build.opensuse.org/request/show/1135525
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=159
2024-01-02 09:33:58 +00:00
026c265f2e - security update
- added patches
  fix CVE-2020-22628 [bsc#1215308], stretch() function in librawsrcpostprocessingspect_ratio.cpp
  + libraw-CVE-2020-22628.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=154
2023-09-14 14:58:10 +00:00
5ee3025486 - security update
- added patches
  fix CVE-2023-1729 [bsc#1210720], a heap-buffer-overflow in raw2image_ex()
  + libraw-CVE-2023-1729.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=152
2023-05-02 13:50:12 +00:00
7211935b9d Accepting request 1059316 from home:dirkmueller:Factory
- update to 0.21.1:
  * fixed typo in panasonic metadata parser
  * Multiple fixes inspired by oss-fuzz project
  * Phase One/Leaf IIQ-S v2 support
  * Canon CR3 filmrolls
  * Canon CRM (movie) files
  * Tiled bit-packed (and 16-bit unpacked) DNGs
  * (non-standard) Deflate-compressed integer DNG files are allowed
  * Canon EOS R3, R7 and R10
  * Fujifilm X-H2S, X-T30 II
  * OM System OM-1
  * Leica M11
  * Sony A7-IV (ILCE-7M4)
  * DJI Mavic 3
  * Nikon Z9: standard compression formats only

OBS-URL: https://build.opensuse.org/request/show/1059316
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=150
2023-01-23 08:06:25 +00:00
8d47b17319 Accepting request 1055251 from home:polslinux:branches:graphics
- Update to 0.21.0:
  * Camera format support:
    + Phase One/Leaf IIQ-S v2 support
    + Canon CR3 filmrolls/RawBurst
    + Canon CRM (movie) files
    + Tiled bit-packed (and 16-bit unpacked) DNGs
    + (non-standard) Deflate-compressed integer DNG files are allowed
  * Camera support:
    + Canon EOS R3, R7 and R10
    + Fujifilm X-H2S, X-T30 II
    + OM System OM-1
    + Leica M11
    + Sony A7-IV (ILCE-7M4)
    + DJI Mavic 3
    + Nikon Z9: standard compression formats only
  * Multiple (resultion) thumbnails support
  * Misc:
    + Nikon makernotes: read NEFCompression tag for HE/HE* files
    + Nikon orientation tag: more fixed offsets for known cameras
    + Adobe DNG SDK 1.6 support (meaning, just an additional patch for GPR SDK)
  * Bugs fixed:
    + Fixed possible out-of-buffer read in Nikon orientation tag parser
    + Out-of-range read-only array access in postprocessing if output_color is set to 0 (raw color)
    + Minolta Z2 was not recognized correctly on 32-bit systems
    + Fixed possible buffer overflow in Kodak C330 decoder
    + dcraw_process(): check for buffer allocation results to avoid NULL deref
    + Multiple bugfixes inspired by oss-fuzz project

OBS-URL: https://build.opensuse.org/request/show/1055251
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=148
2023-01-04 12:32:40 +00:00
359e97f549 Accepting request 887317 from home:wfrisch:branches:graphics
Hardening: link as PIE (bsc#1184123).

OBS-URL: https://build.opensuse.org/request/show/887317
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=145
2021-04-22 12:27:22 +00:00
227bcde9aa - baselibs required by ImageMagick
- added sources
  + baselibs.conf

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=143
2021-02-19 07:41:57 +00:00
f648531abc Accepting request 844032 from home:dirkmueller:branches:graphics
- update to 0.20.2:
  * corrected GPS EXIF output
  * Olympus XZ-1: do not provide linear_max 
  * Pentax Optio 33WR: maker index was incorrect
  * dcraw_emu: corrected help line for -6 option.
  * raw-identify: corrected range check for color matrices print
  * use_camera_matrix option: fixed a bug introduced when making compiler more happy
  * multiple camera support improvements

OBS-URL: https://build.opensuse.org/request/show/844032
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=141
2020-10-26 09:29:56 +00:00
Dirk Stoecker
5e2c3d3ccf Accepting request 822595 from home:polslinux:branches:graphics
- version update to 0.20.0
  * Camera Format support
    + Canon CR3
    + GoPro (via GPR SDK)
    + Panasonic 14-bit
    + Fujifilm compressed/16bit
    + Rapsberry Pi RAW+JPEG format (if USE_6BY9RPI defined)
  * Camera support (+59, 1131 total)
    + Canon: PowerShot G5 X Mark II, G7 X Mark III, SX70 HS,
    + EOS R, EOS RP, EOS 90D, EOS 250D,  EOS M6 Mark II, EOS M50, EOS M200
    + EOS 1DX Mark III (lossless files only)
    + DJI Mavic Air, Osmo Action
    + FujiFilm GFX 100, X-A7, X-Pro3, X100V,
      X-T4 (uncompressed/lossless compressed only), X-T200
    + GoPro Fusion, HERO5, HERO6, HERO7, HERO8
    + Hasselblad L1D-20c, X1D II 50C
    + Leica D-LUX7, Q-P, Q2, V-LUX5, C-Lux / CAM-DC25, SL2, M10 Monochrom
    + Nikon D780, Z50, P950
    + Olympus TG-6, E-M5 Mark III, E-PL10, E-M1 Mark III,
    + Panasonic DC-FZ1000 II, DC-G90, DC-S1, DC-S1R, DC-S1H, DC-TZ95
    + PhaseOne IQ4 150MP
    + Ricoh GR III
    + Sony A7R IV, A9 II, ILCE-6100, ILCE-6600, RX0 II, RX100 VII
    + Zenit M
  * minor/unsorted changes
    + Add support for zlib during configure
    + Fixed multiple problems found by OSS-Fuzz
    + Lots of changes in imgdata.makernotes
    + DNG whitelevel calculated via BitsPerSample if not set via tags
    + DNG: support for LinearDNG w/ BlackLevelRepeat.. pattern
    + better support for Nikon Coolscan 16-bit NEF files
    + Bayer images: ensure that even margins have the same COLOR()
      for both the active sensor area and the full sensor area.
    + fixed several bugs
- removed libraw-Add-Sony-ILCE-7M3.patch
- removed libraw-CVE-2020-15503.patch

OBS-URL: https://build.opensuse.org/request/show/822595
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=139
2020-08-03 12:38:49 +00:00
92633f5e40 - security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=137
2020-07-07 15:00:30 +00:00
68496295fd - version update to 0.19.5
* LibRaw 0.19.5
  * WB coefficients check was too strong, weakened
  * Fixed possible buffer underrun in modern Samsung loader
  * LibRaw 0.19.4
  * CRW/metadata loop prevention code is rolled back due to ABI
    incompatibility. To enable, use -DLIBRAW_METADATA_LOOP_PREVENTION=1
    compile flag for LibRaw and ALL APPS.
  * Fixed possible buffer underflow
  * LibRaw 0.19.3
  * Several fixes inspired by OSS-Fuzz
- deleted patches
  - libraw-half-size-allocation-buffer-overflow.patch (upstreamed)

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=135
2019-12-20 09:49:25 +00:00
3b9b45c7ec - drop JPEG2000 support [bsc#1144252]
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=133
2019-08-21 13:03:10 +00:00
6c8b5e7485 Accepting request 720466 from home:marxin:static
- Use FAT LTO objects in order to provide proper static library.

OBS-URL: https://build.opensuse.org/request/show/720466
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=132
2019-08-05 08:18:35 +00:00
b84b1c7654 - supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
+ libraw-half-size-allocation-buffer-overflow.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=130
2019-01-10 10:59:36 +00:00
adcfddcf92 - asan_build: build ASAN included
- debug_build: build more suitable for debugging

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=126
2019-01-08 13:23:50 +00:00
70dc414e79 - Updated to version 0.19.2
* Fixed possible buffer overrun at Fuji makernotes parser
 * Fixed possible write to NULL pointer at raw2image/raw2image_ex calls.
- ./configure not present in sources

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=124
2018-12-31 15:38:58 +00:00
3d8c2bc4f3 - Updated to version 0.19.1
* Finally: got Sinar 4shot sample, works fine now
  * OpenMP critical sections for malloc/free; extra #ifdefs
    removed; bin/dcraw_dist could be built again using Makefile.devel
  * additional checks in parse_phase_one()
  * more checks on file offsets/tag len in parse_minolta
  * more checks in parse_ciff
  * Mempool check reworked
  * Old Leaf (16bit/3color/TIFF) support
  * Fix cameraWB->autoWB fallback
  * Polaroid x530 channel swap; get metadata pointer for Foveon files
  * Fixed Secunia Advisory SA86384
    - possible infinite loop in unpacked_load_raw()
    - possible infinite loop in parse_rollei()
    - possible infinite loop in parse_sinar_ia()

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=121
2018-12-11 08:56:25 +00:00
3698b245c8 Accepting request 627249 from home:gladiac:branches:graphics
- Add patch libraw-Add-Sony-ILCE-7M3.patch
  * See https://github.com/LibRaw/LibRaw/pull/145
  * The patch has been cut, the tarball from the download section
    doesn't match the git tag. dcraw/dcraw.c is totall different.
- Use %license tag

OBS-URL: https://build.opensuse.org/request/show/627249
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=119
2018-08-03 12:14:16 +00:00
c9b25e63e1 OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=118 2018-08-01 12:20:41 +00:00
afaf050774 * CVE-2018-5815 [bsc#1103206]
+ libraw-CVE-2018-5815.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=117
2018-08-01 11:43:03 +00:00
e1b5817de3 - security update
* CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=116
2018-08-01 11:19:18 +00:00
8e814fb1ad - new upstream branch, version 0.19.x
* fixes CVE-2018-10529 and CVE-2018-10528, hence removing
    . libraw-CVE-2018-10528.patch
    . libraw-CVE-2018-10529.patch
  * the rest of changes at
    https://www.libraw.org/download#stable

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=115
2018-08-01 10:16:21 +00:00
c3cb886aa2 - security update
* CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch

- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=113
2018-04-30 09:43:09 +00:00
0c2e0514b3 Accepting request 585017 from home:kbabioch:branches:graphics
- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits 
- Dropped libraw-glibc-2.27.patch: No longer needed

OBS-URL: https://build.opensuse.org/request/show/585017
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=111
2018-03-09 16:02:58 +00:00
99552b461f - fix build with glibc 2.27
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=107
2018-02-09 18:02:43 +00:00
d350ca6054 Accepting request 568785 from home:avindra
- updated to 0.18.7:
  * All legacy (RGB raw) image loaders checks for imgdata.image is
    not NULL
  * kodak_radc_load_raw: check image size before processing
  * legacy memory allocator:
    allocate max(widh, raw_width) * max(height, raw_height)
- partial cleanup with spec-cleaner
- other spec fixes:
  * switch to https site
  * remove executable bit from copyright
  * remove outdated comment about build parallelism

OBS-URL: https://build.opensuse.org/request/show/568785
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=105
2018-01-24 07:59:34 +00:00
34f6fd22fe - updated to 0.18.6:
* Fixed fuji_width handling if file is neither fuji nor DNG
  * Fixed xtrans interpolate for broken xtrans pattern
  * Fixed panasonic decoder

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=103
2017-12-14 12:30:00 +00:00
77089a8cae - updated to 0.18.5:
Fix for possible buffer overrun in kodak_65000 decoder
    Fix for possible heap overrun in Canon makernotes parser
    Fix for CVE-2017-13735
    CVE-2017-14265: Additional check for X-Trans CFA pattern data 
- remove upstreamed libraw-out-of-bounds-kodak.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=101
2017-09-25 12:52:49 +00:00
4ba6e1c1ea OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=98 2017-09-15 16:25:00 +00:00
d5362c2d87 - add libraw-CVE-2017-14348.patch [bsc#1058467]
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=97
2017-09-15 10:16:13 +00:00
c2a66f92ff - updated to 0.18.4:
* Fix for possible heap overrun in Canon makernotes parser
 * Fix for CVE-2017-13735
 * CVE-2017-14265: Additional check for X-Trans CFA pattern data
- remove libraw-CVE-2017-6887,6886.patch and
         libraw-CVE-2017-6890,6899.patch:
  no need to patch dcraw.c, it is not used

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=96
2017-09-15 09:35:46 +00:00
2a363e1fd3 - added missing parts of the fix for CVE-2017-6887
and CVE-2017-6886
    + libraw-CVE-2017-6887,6886.patch
- added missing fix for CVE-2017-6890 and CVE-2017-6899
  + libraw-CVE-2017-6890,6899.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=92
2017-05-23 07:48:34 +00:00
69bf0becdd - updated to 0.18.2:
Fixed several errors (Secunia advisory SA75000)
    ACES colorspace output option included in dcraw_emu help page
    Avoided possible 32-bit overflows in Sony metadata parser
    Phase One flat field code called even for half-size output  
    Camera Support: Sigma Quattro H
    Fixed bug in FujiExpoMidPointShift parser
    Fixed wrong black level in Sony A350
    Added standard integer types for VisualStudio 2008 and earlier

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=91
2017-05-23 06:55:24 +00:00
0de87bdcc7 - renaming libraw15 to libraw16 and amend spec file to avoid such
inconsistency [bsc#1021327]

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=89
2017-01-30 15:16:16 +00:00
4a572e43e1 LDFLAGS is wrong, must use LIBS
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=87
2017-01-11 10:48:03 +00:00
a5cc3d54b9 Accepting request 449647 from home:NicoK:branches:graphics
update to 0.18.0

looks like some disabled repos build just fine and could be re-enabled if desired, e.g. SLE_12

OBS-URL: https://build.opensuse.org/request/show/449647
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=85
2017-01-11 10:42:44 +00:00
144162e56f Accepting request 407664 from home:NicoK:branches:KDE:Extra
update to 0.17.2

OBS-URL: https://build.opensuse.org/request/show/407664
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=83
2016-07-10 22:39:00 +00:00
af37c4d226 Accepting request 397788 from home:1Antoine1:branches:graphics
- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well

OBS-URL: https://build.opensuse.org/request/show/397788
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=81
2016-05-24 22:44:32 +00:00
47a3041ed5 Accepting request 397758 from home:1Antoine1:branches:graphics
- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch

(See openSUSE:Factory:Staging:A:DVD/libraw)

OBS-URL: https://build.opensuse.org/request/show/397758
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=80
2016-05-24 16:54:39 +00:00
d368b5b930 - updated to 1.17.1:
* fixed two errors found by fuzzer
* phase_one_correct always returns value; handle P1 return codes 
  in postprocessing
- removed upstreamedretval.diff

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=77
2015-12-03 14:00:23 +00:00
b54f86a05e - bump so version
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=74
2015-11-17 01:10:30 +00:00
845fb22859 - Update to new upstream release 0.17.0
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=73
2015-11-13 16:31:18 +00:00
38065c676b libraw-0.16.2
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=71
2015-06-06 19:12:46 +00:00
732f1228b2 - updated to 0.16.1:
* Fix for dcraw ljpeg_start() vulnerability.

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=69
2015-05-11 14:39:23 +00:00
b856e7a30c - updated to 0.16.0:
* removed 0001-build-fix-return-of-random-data.patch (upstreamed)
  * Support for new cameras:
    Baumer TXG14
    Blackmagic Cinema
    Canon EOS 70D, C500, S120, G16
    Fujifilm X-M1, X-A1, XE2, XQ1
    Hasselblad Lunar, Stellar
    Leica C, X VARIO
    Nikon D5200, P7800, D5300, D610, Df, 1 AW1
    Nokia Lumia 1020, 1520
    Olympus E-P5,E-M1, STYLUS1
    OmniVision OV5647 (Raspberry Pi)
    Panasonic LF1, GX7, GF6, GM1
    Pentax K-50, K-500, Q7,K-3
    Richon GR
    Samsung NX300, NX1100, NX2000, Galaxy NX (EK-GN120)

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=67
2014-01-30 13:55:49 +00:00
74b7cf35d1 - updated to 0.15.4:
Additional checks to data to prevent broken file opening
    New camera/format support:
        Richon GR
        Panasonic LF1
        Canon EOS 70D
        Sony RX100II, RX1R
        Olympus E-P5

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=65
2013-09-09 13:34:50 +00:00
ca65349860 - updated to 0.15.3:
* New camera/format support:
     OmniVision OV5647 (Raspberry Pi)
     Nikon D5200
     Panasonic DMC-GF6
  * Fixed decoding error for some Canon sRAW files.

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=63
2013-07-29 09:16:56 +00:00
c31288b39a - remove libraw-gcc27.patch, it is upstreamed yet
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=61
2013-06-12 11:00:26 +00:00
3f4cd9a299 Accepting request 178542 from home:jengelh:branches:graphics
- Update to new upstream release 0.15.2

OBS-URL: https://build.opensuse.org/request/show/178542
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=60
2013-06-11 13:52:33 +00:00
OBS User mrdocs
8314fed608 Accepting request 147957 from home:jengelh:branches:graphics
- SONAME changed in 0.14, but prior update omitted package name
  change libraw2 -> libraw5. Do it now.
- Use more robust make install call
- Remove redundant %clean section, and remove unused .la files
- Run fdupes to hardlink duplicate files

OBS-URL: https://build.opensuse.org/request/show/147957
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=58
2013-01-10 21:51:04 +00:00