Commit Graph

146 Commits

Author SHA256 Message Date
Dominique Leuenberger
d1067d179d Accepting request 824129 from graphics
OBS-URL: https://build.opensuse.org/request/show/824129
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=56
2020-08-28 19:11:58 +00:00
Dirk Stoecker
ce7f7845b0 Accepting request 822595 from home:polslinux:branches:graphics
- version update to 0.20.0
  * Camera Format support
    + Canon CR3
    + GoPro (via GPR SDK)
    + Panasonic 14-bit
    + Fujifilm compressed/16bit
    + Rapsberry Pi RAW+JPEG format (if USE_6BY9RPI defined)
  * Camera support (+59, 1131 total)
    + Canon: PowerShot G5 X Mark II, G7 X Mark III, SX70 HS,
    + EOS R, EOS RP, EOS 90D, EOS 250D,  EOS M6 Mark II, EOS M50, EOS M200
    + EOS 1DX Mark III (lossless files only)
    + DJI Mavic Air, Osmo Action
    + FujiFilm GFX 100, X-A7, X-Pro3, X100V,
      X-T4 (uncompressed/lossless compressed only), X-T200
    + GoPro Fusion, HERO5, HERO6, HERO7, HERO8
    + Hasselblad L1D-20c, X1D II 50C
    + Leica D-LUX7, Q-P, Q2, V-LUX5, C-Lux / CAM-DC25, SL2, M10 Monochrom
    + Nikon D780, Z50, P950
    + Olympus TG-6, E-M5 Mark III, E-PL10, E-M1 Mark III,
    + Panasonic DC-FZ1000 II, DC-G90, DC-S1, DC-S1R, DC-S1H, DC-TZ95
    + PhaseOne IQ4 150MP
    + Ricoh GR III
    + Sony A7R IV, A9 II, ILCE-6100, ILCE-6600, RX0 II, RX100 VII
    + Zenit M
  * minor/unsorted changes
    + Add support for zlib during configure
    + Fixed multiple problems found by OSS-Fuzz
    + Lots of changes in imgdata.makernotes
    + DNG whitelevel calculated via BitsPerSample if not set via tags
    + DNG: support for LinearDNG w/ BlackLevelRepeat.. pattern
    + better support for Nikon Coolscan 16-bit NEF files
    + Bayer images: ensure that even margins have the same COLOR()
      for both the active sensor area and the full sensor area.
    + fixed several bugs
- removed libraw-Add-Sony-ILCE-7M3.patch
- removed libraw-CVE-2020-15503.patch

OBS-URL: https://build.opensuse.org/request/show/822595
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=139
2020-08-03 12:38:49 +00:00
Dominique Leuenberger
438a7e57b0 Accepting request 819256 from graphics
- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch

OBS-URL: https://build.opensuse.org/request/show/819256
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=55
2020-07-15 09:24:32 +00:00
ab9161749c - security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=137
2020-07-07 15:00:30 +00:00
Dominique Leuenberger
81d10021ea Accepting request 758470 from graphics
- version update to 0.19.5
  * LibRaw 0.19.5
  * WB coefficients check was too strong, weakened
  * Fixed possible buffer underrun in modern Samsung loader
  * LibRaw 0.19.4
  * CRW/metadata loop prevention code is rolled back due to ABI
    incompatibility. To enable, use -DLIBRAW_METADATA_LOOP_PREVENTION=1
    compile flag for LibRaw and ALL APPS.
  * Fixed possible buffer underflow
  * LibRaw 0.19.3
  * Several fixes inspired by OSS-Fuzz
- deleted patches
  - libraw-half-size-allocation-buffer-overflow.patch (upstreamed)

OBS-URL: https://build.opensuse.org/request/show/758470
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=54
2020-01-02 13:39:59 +00:00
c4d57e1859 - version update to 0.19.5
* LibRaw 0.19.5
  * WB coefficients check was too strong, weakened
  * Fixed possible buffer underrun in modern Samsung loader
  * LibRaw 0.19.4
  * CRW/metadata loop prevention code is rolled back due to ABI
    incompatibility. To enable, use -DLIBRAW_METADATA_LOOP_PREVENTION=1
    compile flag for LibRaw and ALL APPS.
  * Fixed possible buffer underflow
  * LibRaw 0.19.3
  * Several fixes inspired by OSS-Fuzz
- deleted patches
  - libraw-half-size-allocation-buffer-overflow.patch (upstreamed)

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=135
2019-12-20 09:49:25 +00:00
Dominique Leuenberger
86664d0a8a Accepting request 725044 from graphics
- drop JPEG2000 support [bsc#1144252]

- Use FAT LTO objects in order to provide proper static library.

OBS-URL: https://build.opensuse.org/request/show/725044
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=53
2019-09-11 08:19:44 +00:00
dafbaf02b5 - drop JPEG2000 support [bsc#1144252]
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=133
2019-08-21 13:03:10 +00:00
c7febdbe5f Accepting request 720466 from home:marxin:static
- Use FAT LTO objects in order to provide proper static library.

OBS-URL: https://build.opensuse.org/request/show/720466
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=132
2019-08-05 08:18:35 +00:00
Dominique Leuenberger
0dd82e78cb Accepting request 664333 from graphics
- supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
  + libraw-half-size-allocation-buffer-overflow.patch

- asan_build: build ASAN included
- debug_build: build more suitable for debugging

OBS-URL: https://build.opensuse.org/request/show/664333
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=52
2019-01-15 08:13:12 +00:00
197c7d72fe - supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
+ libraw-half-size-allocation-buffer-overflow.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=130
2019-01-10 10:59:36 +00:00
07185dde95 OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=129 2019-01-09 12:22:19 +00:00
da5e16073e OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=128 2019-01-09 11:34:08 +00:00
2fba2715ca - complete fix for CVE-2018-20365 [bsc#1120500]
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=127
2019-01-09 10:07:31 +00:00
292e14c9ed - asan_build: build ASAN included
- debug_build: build more suitable for debugging

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=126
2019-01-08 13:23:50 +00:00
Dominique Leuenberger
83a3c53239 Accepting request 662208 from graphics
- Updated to version 0.19.2
 * Fixed possible buffer overrun at Fuji makernotes parser
 * Fixed possible write to NULL pointer at raw2image/raw2image_ex calls.
- ./configure not present in sources

OBS-URL: https://build.opensuse.org/request/show/662208
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=51
2019-01-03 17:04:14 +00:00
1e0c8e559c - Updated to version 0.19.2
* Fixed possible buffer overrun at Fuji makernotes parser
 * Fixed possible write to NULL pointer at raw2image/raw2image_ex calls.
- ./configure not present in sources

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=124
2018-12-31 15:38:58 +00:00
Dominique Leuenberger
b1f79c2504 Accepting request 657091 from graphics
- Updated to version 0.19.1
  * Finally: got Sinar 4shot sample, works fine now
  * OpenMP critical sections for malloc/free; extra #ifdefs
    removed; bin/dcraw_dist could be built again using Makefile.devel
  * additional checks in parse_phase_one()
  * more checks on file offsets/tag len in parse_minolta
  * more checks in parse_ciff
  * Mempool check reworked
  * Old Leaf (16bit/3color/TIFF) support
  * Fix cameraWB->autoWB fallback
  * Polaroid x530 channel swap; get metadata pointer for Foveon files
  * Fixed Secunia Advisory SA86384
    - possible infinite loop in unpacked_load_raw()
    - possible infinite loop in parse_rollei()
    - possible infinite loop in parse_sinar_ia()
- removed libraw-CVE-2018-5813.patch (upstreamed)

OBS-URL: https://build.opensuse.org/request/show/657091
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=50
2018-12-19 12:26:21 +00:00
6867ad1b1d - removed libraw-CVE-2018-5813.patch (upstreamed)
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=122
2018-12-11 08:57:13 +00:00
c2cd305880 - Updated to version 0.19.1
* Finally: got Sinar 4shot sample, works fine now
  * OpenMP critical sections for malloc/free; extra #ifdefs
    removed; bin/dcraw_dist could be built again using Makefile.devel
  * additional checks in parse_phase_one()
  * more checks on file offsets/tag len in parse_minolta
  * more checks in parse_ciff
  * Mempool check reworked
  * Old Leaf (16bit/3color/TIFF) support
  * Fix cameraWB->autoWB fallback
  * Polaroid x530 channel swap; get metadata pointer for Foveon files
  * Fixed Secunia Advisory SA86384
    - possible infinite loop in unpacked_load_raw()
    - possible infinite loop in parse_rollei()
    - possible infinite loop in parse_sinar_ia()

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=121
2018-12-11 08:56:25 +00:00
Dominique Leuenberger
6e52953079 Accepting request 627331 from graphics
OBS-URL: https://build.opensuse.org/request/show/627331
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=49
2018-09-04 20:46:55 +00:00
61ceba12d2 Accepting request 627249 from home:gladiac:branches:graphics
- Add patch libraw-Add-Sony-ILCE-7M3.patch
  * See https://github.com/LibRaw/LibRaw/pull/145
  * The patch has been cut, the tarball from the download section
    doesn't match the git tag. dcraw/dcraw.c is totall different.
- Use %license tag

OBS-URL: https://build.opensuse.org/request/show/627249
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=119
2018-08-03 12:14:16 +00:00
dbea602fbb OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=118 2018-08-01 12:20:41 +00:00
129f943f5f * CVE-2018-5815 [bsc#1103206]
+ libraw-CVE-2018-5815.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=117
2018-08-01 11:43:03 +00:00
002f02bcd4 - security update
* CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=116
2018-08-01 11:19:18 +00:00
bf698e2497 - new upstream branch, version 0.19.x
* fixes CVE-2018-10529 and CVE-2018-10528, hence removing
    . libraw-CVE-2018-10528.patch
    . libraw-CVE-2018-10529.patch
  * the rest of changes at
    https://www.libraw.org/download#stable

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=115
2018-08-01 10:16:21 +00:00
Dominique Leuenberger
c5880ab9e9 Accepting request 602481 from graphics
- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch

- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun

OBS-URL: https://build.opensuse.org/request/show/602481
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=48
2018-05-06 12:56:15 +00:00
8834ddc7f5 - security update
* CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch

- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=113
2018-04-30 09:43:09 +00:00
Dominique Leuenberger
6404839287 Accepting request 585106 from graphics
- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits 
- Dropped libraw-glibc-2.27.patch: No longer needed (forwarded request 585017 from kbabioch)

OBS-URL: https://build.opensuse.org/request/show/585106
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=47
2018-03-12 11:03:11 +00:00
978b862ceb Accepting request 585017 from home:kbabioch:branches:graphics
- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits 
- Dropped libraw-glibc-2.27.patch: No longer needed

OBS-URL: https://build.opensuse.org/request/show/585017
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=111
2018-03-09 16:02:58 +00:00
Dominique Leuenberger
60ed70dc24 Accepting request 574785 from graphics
- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch

OBS-URL: https://build.opensuse.org/request/show/574785
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=46
2018-02-13 09:26:12 +00:00
adb82506af + libraw-glibc-2.27.patch
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=109
2018-02-09 18:06:35 +00:00
790dfa1453 - fix build with glibc 2.27 [bsc#1079853]
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=108
2018-02-09 18:03:11 +00:00
8e96815577 - fix build with glibc 2.27
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=107
2018-02-09 18:02:43 +00:00
Dominique Leuenberger
f9132a00f6 Accepting request 568826 from graphics
- updated to 0.18.7:
  * All legacy (RGB raw) image loaders checks for imgdata.image is
    not NULL
  * kodak_radc_load_raw: check image size before processing
  * legacy memory allocator:
    allocate max(widh, raw_width) * max(height, raw_height)
- partial cleanup with spec-cleaner
- other spec fixes:
  * switch to https site
  * remove executable bit from copyright
  * remove outdated comment about build parallelism (forwarded request 568785 from avindra)

OBS-URL: https://build.opensuse.org/request/show/568826
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=45
2018-01-26 12:56:27 +00:00
b907e4716c Accepting request 568785 from home:avindra
- updated to 0.18.7:
  * All legacy (RGB raw) image loaders checks for imgdata.image is
    not NULL
  * kodak_radc_load_raw: check image size before processing
  * legacy memory allocator:
    allocate max(widh, raw_width) * max(height, raw_height)
- partial cleanup with spec-cleaner
- other spec fixes:
  * switch to https site
  * remove executable bit from copyright
  * remove outdated comment about build parallelism

OBS-URL: https://build.opensuse.org/request/show/568785
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=105
2018-01-24 07:59:34 +00:00
Dominique Leuenberger
92f3153425 Accepting request 559097 from graphics
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/559097
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=44
2017-12-28 23:02:07 +00:00
2e65ae6c8b - updated to 0.18.6:
* Fixed fuji_width handling if file is neither fuji nor DNG
  * Fixed xtrans interpolate for broken xtrans pattern
  * Fixed panasonic decoder

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=103
2017-12-14 12:30:00 +00:00
Dominique Leuenberger
fd36790d5f Accepting request 528639 from graphics
- updated to 0.18.5:
    Fix for possible buffer overrun in kodak_65000 decoder
    Fix for possible heap overrun in Canon makernotes parser
    Fix for CVE-2017-13735
    CVE-2017-14265: Additional check for X-Trans CFA pattern data 
- remove upstreamed libraw-out-of-bounds-kodak.patch

OBS-URL: https://build.opensuse.org/request/show/528639
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=43
2017-10-02 14:51:11 +00:00
190b1818b5 - updated to 0.18.5:
Fix for possible buffer overrun in kodak_65000 decoder
    Fix for possible heap overrun in Canon makernotes parser
    Fix for CVE-2017-13735
    CVE-2017-14265: Additional check for X-Trans CFA pattern data 
- remove upstreamed libraw-out-of-bounds-kodak.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=101
2017-09-25 12:52:49 +00:00
Dominique Leuenberger
a32889deaa Accepting request 526402 from graphics
- updated to 0.18.4:
 * Fix for possible heap overrun in Canon makernotes parser 
   (CVE-2017-14348)
 * Fix for CVE-2017-13735
 * CVE-2017-14265: Additional check for X-Trans CFA pattern data
- add libraw-out-of-bounds-kodak.patch, upstream bug #101
- remove libraw-CVE-2017-6887,6886.patch and
         libraw-CVE-2017-6890,6899.patch:
  no need to patch dcraw.c, it is not used

OBS-URL: https://build.opensuse.org/request/show/526402
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=42
2017-09-18 17:51:08 +00:00
09a466b1ac * Fix for possible heap overrun in Canon makernotes parser
(CVE-2017-14348)
- add libraw-out-of-bounds-kodak.patch, upstream bug #101

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=99
2017-09-15 16:26:49 +00:00
0bbd9ae4f3 OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=98 2017-09-15 16:25:00 +00:00
76376ed0fa - add libraw-CVE-2017-14348.patch [bsc#1058467]
OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=97
2017-09-15 10:16:13 +00:00
cb174e895e - updated to 0.18.4:
* Fix for possible heap overrun in Canon makernotes parser
 * Fix for CVE-2017-13735
 * CVE-2017-14265: Additional check for X-Trans CFA pattern data
- remove libraw-CVE-2017-6887,6886.patch and
         libraw-CVE-2017-6890,6899.patch:
  no need to patch dcraw.c, it is not used

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=96
2017-09-15 09:35:46 +00:00
Dominique Leuenberger
5f1247f28d Accepting request 497438 from graphics
- updated to 0.18.2:
    Fixed several errors (Secunia advisory SA75000)
    ACES colorspace output option included in dcraw_emu help page
    Avoided possible 32-bit overflows in Sony metadata parser
    Phase One flat field code called even for half-size output  
    Camera Support: Sigma Quattro H
    Fixed bug in FujiExpoMidPointShift parser
    Fixed wrong black level in Sony A350
    Added standard integer types for VisualStudio 2008 and earlier
- added missing parts of the fix for CVE-2017-6887 
  and CVE-2017-6886
    + libraw-CVE-2017-6887,6886.patch
- added missing fix for CVE-2017-6890 and CVE-2017-6899
  + libraw-CVE-2017-6890,6899.patch

OBS-URL: https://build.opensuse.org/request/show/497438
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libraw?expand=0&rev=41
2017-06-02 08:29:29 +00:00
b99517535d OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=94 2017-05-23 09:16:14 +00:00
25e3a98c17 OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=93 2017-05-23 08:33:35 +00:00
42297d1b65 - added missing parts of the fix for CVE-2017-6887
and CVE-2017-6886
    + libraw-CVE-2017-6887,6886.patch
- added missing fix for CVE-2017-6890 and CVE-2017-6899
  + libraw-CVE-2017-6890,6899.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=92
2017-05-23 07:48:34 +00:00
6ca3ea7ce2 - updated to 0.18.2:
Fixed several errors (Secunia advisory SA75000)
    ACES colorspace output option included in dcraw_emu help page
    Avoided possible 32-bit overflows in Sony metadata parser
    Phase One flat field code called even for half-size output  
    Camera Support: Sigma Quattro H
    Fixed bug in FujiExpoMidPointShift parser
    Fixed wrong black level in Sony A350
    Added standard integer types for VisualStudio 2008 and earlier

OBS-URL: https://build.opensuse.org/package/show/graphics/libraw?expand=0&rev=91
2017-05-23 06:55:24 +00:00