Commit Graph

64 Commits

Author SHA256 Message Date
ab9161749c - security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=137
2020-07-07 15:00:30 +00:00
c4d57e1859 - version update to 0.19.5
* LibRaw 0.19.5
  * WB coefficients check was too strong, weakened
  * Fixed possible buffer underrun in modern Samsung loader
  * LibRaw 0.19.4
  * CRW/metadata loop prevention code is rolled back due to ABI
    incompatibility. To enable, use -DLIBRAW_METADATA_LOOP_PREVENTION=1
    compile flag for LibRaw and ALL APPS.
  * Fixed possible buffer underflow
  * LibRaw 0.19.3
  * Several fixes inspired by OSS-Fuzz
- deleted patches
  - libraw-half-size-allocation-buffer-overflow.patch (upstreamed)

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=135
2019-12-20 09:49:25 +00:00
dafbaf02b5 - drop JPEG2000 support [bsc#1144252]
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=133
2019-08-21 13:03:10 +00:00
c7febdbe5f Accepting request 720466 from home:marxin:static
- Use FAT LTO objects in order to provide proper static library.

OBS-URL: https://build.opensuse.org/request/show/720466
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=132
2019-08-05 08:18:35 +00:00
197c7d72fe - supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
+ libraw-half-size-allocation-buffer-overflow.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=130
2019-01-10 10:59:36 +00:00
07185dde95 OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=129 2019-01-09 12:22:19 +00:00
2fba2715ca - complete fix for CVE-2018-20365 [bsc#1120500]
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=127
2019-01-09 10:07:31 +00:00
292e14c9ed - asan_build: build ASAN included
- debug_build: build more suitable for debugging

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=126
2019-01-08 13:23:50 +00:00
1e0c8e559c - Updated to version 0.19.2
* Fixed possible buffer overrun at Fuji makernotes parser
 * Fixed possible write to NULL pointer at raw2image/raw2image_ex calls.
- ./configure not present in sources

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=124
2018-12-31 15:38:58 +00:00
6867ad1b1d - removed libraw-CVE-2018-5813.patch (upstreamed)
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=122
2018-12-11 08:57:13 +00:00
c2cd305880 - Updated to version 0.19.1
* Finally: got Sinar 4shot sample, works fine now
  * OpenMP critical sections for malloc/free; extra #ifdefs
    removed; bin/dcraw_dist could be built again using Makefile.devel
  * additional checks in parse_phase_one()
  * more checks on file offsets/tag len in parse_minolta
  * more checks in parse_ciff
  * Mempool check reworked
  * Old Leaf (16bit/3color/TIFF) support
  * Fix cameraWB->autoWB fallback
  * Polaroid x530 channel swap; get metadata pointer for Foveon files
  * Fixed Secunia Advisory SA86384
    - possible infinite loop in unpacked_load_raw()
    - possible infinite loop in parse_rollei()
    - possible infinite loop in parse_sinar_ia()

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=121
2018-12-11 08:56:25 +00:00
61ceba12d2 Accepting request 627249 from home:gladiac:branches:graphics
- Add patch libraw-Add-Sony-ILCE-7M3.patch
  * See https://github.com/LibRaw/LibRaw/pull/145
  * The patch has been cut, the tarball from the download section
    doesn't match the git tag. dcraw/dcraw.c is totall different.
- Use %license tag

OBS-URL: https://build.opensuse.org/request/show/627249
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=119
2018-08-03 12:14:16 +00:00
dbea602fbb OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=118 2018-08-01 12:20:41 +00:00
129f943f5f * CVE-2018-5815 [bsc#1103206]
+ libraw-CVE-2018-5815.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=117
2018-08-01 11:43:03 +00:00
002f02bcd4 - security update
* CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=116
2018-08-01 11:19:18 +00:00
bf698e2497 - new upstream branch, version 0.19.x
* fixes CVE-2018-10529 and CVE-2018-10528, hence removing
    . libraw-CVE-2018-10528.patch
    . libraw-CVE-2018-10529.patch
  * the rest of changes at
    https://www.libraw.org/download#stable

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=115
2018-08-01 10:16:21 +00:00
8834ddc7f5 - security update
* CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch

- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=113
2018-04-30 09:43:09 +00:00
978b862ceb Accepting request 585017 from home:kbabioch:branches:graphics
- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits 
- Dropped libraw-glibc-2.27.patch: No longer needed

OBS-URL: https://build.opensuse.org/request/show/585017
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=111
2018-03-09 16:02:58 +00:00
adb82506af + libraw-glibc-2.27.patch
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=109
2018-02-09 18:06:35 +00:00
790dfa1453 - fix build with glibc 2.27 [bsc#1079853]
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=108
2018-02-09 18:03:11 +00:00
8e96815577 - fix build with glibc 2.27
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=107
2018-02-09 18:02:43 +00:00
b907e4716c Accepting request 568785 from home:avindra
- updated to 0.18.7:
  * All legacy (RGB raw) image loaders checks for imgdata.image is
    not NULL
  * kodak_radc_load_raw: check image size before processing
  * legacy memory allocator:
    allocate max(widh, raw_width) * max(height, raw_height)
- partial cleanup with spec-cleaner
- other spec fixes:
  * switch to https site
  * remove executable bit from copyright
  * remove outdated comment about build parallelism

OBS-URL: https://build.opensuse.org/request/show/568785
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=105
2018-01-24 07:59:34 +00:00
2e65ae6c8b - updated to 0.18.6:
* Fixed fuji_width handling if file is neither fuji nor DNG
  * Fixed xtrans interpolate for broken xtrans pattern
  * Fixed panasonic decoder

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=103
2017-12-14 12:30:00 +00:00
190b1818b5 - updated to 0.18.5:
Fix for possible buffer overrun in kodak_65000 decoder
    Fix for possible heap overrun in Canon makernotes parser
    Fix for CVE-2017-13735
    CVE-2017-14265: Additional check for X-Trans CFA pattern data 
- remove upstreamed libraw-out-of-bounds-kodak.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=101
2017-09-25 12:52:49 +00:00
09a466b1ac * Fix for possible heap overrun in Canon makernotes parser
(CVE-2017-14348)
- add libraw-out-of-bounds-kodak.patch, upstream bug #101

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=99
2017-09-15 16:26:49 +00:00
76376ed0fa - add libraw-CVE-2017-14348.patch [bsc#1058467]
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=97
2017-09-15 10:16:13 +00:00
cb174e895e - updated to 0.18.4:
* Fix for possible heap overrun in Canon makernotes parser
 * Fix for CVE-2017-13735
 * CVE-2017-14265: Additional check for X-Trans CFA pattern data
- remove libraw-CVE-2017-6887,6886.patch and
         libraw-CVE-2017-6890,6899.patch:
  no need to patch dcraw.c, it is not used

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=96
2017-09-15 09:35:46 +00:00
42297d1b65 - added missing parts of the fix for CVE-2017-6887
and CVE-2017-6886
    + libraw-CVE-2017-6887,6886.patch
- added missing fix for CVE-2017-6890 and CVE-2017-6899
  + libraw-CVE-2017-6890,6899.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=92
2017-05-23 07:48:34 +00:00
6ca3ea7ce2 - updated to 0.18.2:
Fixed several errors (Secunia advisory SA75000)
    ACES colorspace output option included in dcraw_emu help page
    Avoided possible 32-bit overflows in Sony metadata parser
    Phase One flat field code called even for half-size output  
    Camera Support: Sigma Quattro H
    Fixed bug in FujiExpoMidPointShift parser
    Fixed wrong black level in Sony A350
    Added standard integer types for VisualStudio 2008 and earlier

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=91
2017-05-23 06:55:24 +00:00
8616ef6eb1 - renaming libraw15 to libraw16 and amend spec file to avoid such
inconsistency [bsc#1021327]

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=89
2017-01-30 15:16:16 +00:00
577e60a0a1 trim parts irrelevant to users
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=86
2017-01-11 10:45:41 +00:00
dce1fcfd0d Accepting request 449647 from home:NicoK:branches:graphics
update to 0.18.0

looks like some disabled repos build just fine and could be re-enabled if desired, e.g. SLE_12

OBS-URL: https://build.opensuse.org/request/show/449647
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=85
2017-01-11 10:42:44 +00:00
8107d83e49 Accepting request 407664 from home:NicoK:branches:KDE:Extra
update to 0.17.2

OBS-URL: https://build.opensuse.org/request/show/407664
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=83
2016-07-10 22:39:00 +00:00
1182e7b846 Accepting request 397788 from home:1Antoine1:branches:graphics
- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well

OBS-URL: https://build.opensuse.org/request/show/397788
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=81
2016-05-24 22:44:32 +00:00
060797b031 Accepting request 397758 from home:1Antoine1:branches:graphics
- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch

(See openSUSE:Factory:Staging:A:DVD/libraw)

OBS-URL: https://build.opensuse.org/request/show/397758
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=80
2016-05-24 16:54:39 +00:00
67c228ae4c * fixed two errors found by fuzzer (CVE-2015-8367)
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=78
2015-12-03 14:01:03 +00:00
88d354148a - updated to 1.17.1:
* fixed two errors found by fuzzer
* phase_one_correct always returns value; handle P1 return codes 
  in postprocessing
- removed upstreamedretval.diff

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=77
2015-12-03 14:00:23 +00:00
1a1f6f55d8 - Add retval.diff to resolve new compiler warnings
fold .changes line

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=75
2015-11-24 09:27:55 +00:00
4ff7a0572e - bump so version
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=74
2015-11-17 01:10:30 +00:00
87d294da36 - Update to new upstream release 0.17.0
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=73
2015-11-13 16:31:18 +00:00
d6d35c685a libraw-0.16.2
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=71
2015-06-06 19:12:46 +00:00
f761fbc998 - updated to 0.16.1:
* Fix for dcraw ljpeg_start() vulnerability.

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=69
2015-05-11 14:39:23 +00:00
32080b6922 - updated to 0.16.0:
* removed 0001-build-fix-return-of-random-data.patch (upstreamed)
  * Support for new cameras:
    Baumer TXG14
    Blackmagic Cinema
    Canon EOS 70D, C500, S120, G16
    Fujifilm X-M1, X-A1, XE2, XQ1
    Hasselblad Lunar, Stellar
    Leica C, X VARIO
    Nikon D5200, P7800, D5300, D610, Df, 1 AW1
    Nokia Lumia 1020, 1520
    Olympus E-P5,E-M1, STYLUS1
    OmniVision OV5647 (Raspberry Pi)
    Panasonic LF1, GX7, GF6, GM1
    Pentax K-50, K-500, Q7,K-3
    Richon GR
    Samsung NX300, NX1100, NX2000, Galaxy NX (EK-GN120)

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=67
2014-01-30 13:55:49 +00:00
1598797373 - updated to 0.15.4:
Additional checks to data to prevent broken file opening
    New camera/format support:
        Richon GR
        Panasonic LF1
        Canon EOS 70D
        Sony RX100II, RX1R
        Olympus E-P5

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=65
2013-09-09 13:34:50 +00:00
084a58e4c6 - updated to 0.15.3:
* New camera/format support:
     OmniVision OV5647 (Raspberry Pi)
     Nikon D5200
     Panasonic DMC-GF6
  * Fixed decoding error for some Canon sRAW files.

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=63
2013-07-29 09:16:56 +00:00
5f35ba2b30 - remove libraw-gcc27.patch, it is upstreamed yet
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=61
2013-06-12 11:00:26 +00:00
bddc343606 Accepting request 178542 from home:jengelh:branches:graphics
- Update to new upstream release 0.15.2

OBS-URL: https://build.opensuse.org/request/show/178542
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=60
2013-06-11 13:52:33 +00:00
OBS User mrdocs
10bae8af1c Accepting request 147957 from home:jengelh:branches:graphics
- SONAME changed in 0.14, but prior update omitted package name
  change libraw2 -> libraw5. Do it now.
- Use more robust make install call
- Remove redundant %clean section, and remove unused .la files
- Run fdupes to hardlink duplicate files

OBS-URL: https://build.opensuse.org/request/show/147957
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=58
2013-01-10 21:51:04 +00:00
20f2b83a9c Accepting request 127641 from home:NicoK:branches:graphics
update to 0.14.7

OBS-URL: https://build.opensuse.org/request/show/127641
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=56
2012-07-11 16:21:03 +00:00
0bbb62e01c Accepting request 109341 from home:dimstar:gcc47
Fix build with gcc 4.7 - Please work with upstream to resolve it in upstream code base. There is also a chance that a newer version of the package might have this fixed already.

OBS-URL: https://build.opensuse.org/request/show/109341
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=53
2012-03-15 16:38:33 +00:00