f58c61f7c1- Update to 0.21.3: * new compile-time define LIBRAW_CALLOC_RAWSTORE If defined: calloc() will be used for all big buffer allocations to prevent uninitialized heap data leak * Small allocations: calloc() instead of malloc() to prevent uninitialized heap data leak * Support for 4-component JPEG-compressed DNG files * CR3-Qstep table: avoid wrong 64-bit code generation * Fixed several bugs related to specially-crafted files processing (thanks to OSS-Fuzz project)Petr Gajdos2025-01-31 08:13:14 +00:00
ab9161749c- security update - added patches fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow + libraw-CVE-2020-15503.patchPetr Gajdos2020-07-07 15:00:30 +00:00
c4d57e1859- version update to 0.19.5 * LibRaw 0.19.5 * WB coefficients check was too strong, weakened * Fixed possible buffer underrun in modern Samsung loader * LibRaw 0.19.4 * CRW/metadata loop prevention code is rolled back due to ABI incompatibility. To enable, use -DLIBRAW_METADATA_LOOP_PREVENTION=1 compile flag for LibRaw and ALL APPS. * Fixed possible buffer underflow * LibRaw 0.19.3 * Several fixes inspired by OSS-Fuzz - deleted patches - libraw-half-size-allocation-buffer-overflow.patch (upstreamed)Petr Gajdos2019-12-20 09:49:25 +00:00
1e0c8e559c- Updated to version 0.19.2 * Fixed possible buffer overrun at Fuji makernotes parser * Fixed possible write to NULL pointer at raw2image/raw2image_ex calls. - ./configure not present in sourcesPetr Gajdos2018-12-31 15:38:58 +00:00
c2cd305880- Updated to version 0.19.1 * Finally: got Sinar 4shot sample, works fine now * OpenMP critical sections for malloc/free; extra #ifdefs removed; bin/dcraw_dist could be built again using Makefile.devel * additional checks in parse_phase_one() * more checks on file offsets/tag len in parse_minolta * more checks in parse_ciff * Mempool check reworked * Old Leaf (16bit/3color/TIFF) support * Fix cameraWB->autoWB fallback * Polaroid x530 channel swap; get metadata pointer for Foveon files * Fixed Secunia Advisory SA86384 - possible infinite loop in unpacked_load_raw() - possible infinite loop in parse_rollei() - possible infinite loop in parse_sinar_ia()Petr Gajdos2018-12-11 08:56:25 +00:00
bf698e2497- new upstream branch, version 0.19.x * fixes CVE-2018-10529 and CVE-2018-10528, hence removing . libraw-CVE-2018-10528.patch . libraw-CVE-2018-10529.patch * the rest of changes at https://www.libraw.org/download#stablePetr Gajdos2018-08-01 10:16:21 +00:00
190b1818b5- updated to 0.18.5: Fix for possible buffer overrun in kodak_65000 decoder Fix for possible heap overrun in Canon makernotes parser Fix for CVE-2017-13735 CVE-2017-14265: Additional check for X-Trans CFA pattern data - remove upstreamed libraw-out-of-bounds-kodak.patchPetr Gajdos2017-09-25 12:52:49 +00:00
cb174e895e- updated to 0.18.4: * Fix for possible heap overrun in Canon makernotes parser * Fix for CVE-2017-13735 * CVE-2017-14265: Additional check for X-Trans CFA pattern data - remove libraw-CVE-2017-6887,6886.patch and libraw-CVE-2017-6890,6899.patch: no need to patch dcraw.c, it is not usedPetr Gajdos2017-09-15 09:35:46 +00:00
42297d1b65- added missing parts of the fix for CVE-2017-6887 and CVE-2017-6886 + libraw-CVE-2017-6887,6886.patch - added missing fix for CVE-2017-6890 and CVE-2017-6899 + libraw-CVE-2017-6890,6899.patchPetr Gajdos2017-05-23 07:48:34 +00:00
6ca3ea7ce2- updated to 0.18.2: Fixed several errors (Secunia advisory SA75000) ACES colorspace output option included in dcraw_emu help page Avoided possible 32-bit overflows in Sony metadata parser Phase One flat field code called even for half-size output Camera Support: Sigma Quattro H Fixed bug in FujiExpoMidPointShift parser Fixed wrong black level in Sony A350 Added standard integer types for VisualStudio 2008 and earlierPetr Gajdos2017-05-23 06:55:24 +00:00
Ana Guerrero
Petr Gajdos
Dominique Leuenberger
Dirk Stoecker
Richard Brown
Marcus Meissner
Jan Engelhardt
Marcus Rueckert
Stephan Kulow