Fabrice Fontaine
1a05b7cc7c
package/libraw: security bump to version 0.20.2
...
Fix CVE-2020-24890: libraw 20.0 has a null pointer dereference
vulnerability in parse_tiff_ifd in src/metadata/tiff.cpp, which may
result in context-dependent arbitrary code execution.
https://www.libraw.org/news/libraw-0-20-2-Release
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-10-24 22:57:16 +02:00
Fabrice Fontaine
fd50e0f93f
package/libraw: security bump to version 0.20.0
...
- Fix CVE-2020-15503: LibRaw before 0.20-RC1 lacks a thumbnail size
range check. This affects decoders/unpack_thumb.cpp,
postprocessing/mem_image.cpp, and utils/thumb_utils.cpp. For example,
malloc(sizeof(libraw_processed_image_t)+T.tlength) occurs without
validating T.tlength.
- zlib is an optional dependency since
https://github.com/LibRaw/LibRaw/commit/b63f017b063edb5e7091e3952ee20cb4d002edbe
Also update indentation in hash file (two spaces) as well as README.md
hash, no license changes:
- https://github.com/LibRaw/LibRaw/commit/d1975cb0e055d2bfe58c9d845c9a3e57c346a2f9
- https://github.com/LibRaw/LibRaw/commit/d38361b76e1a405a25b11165a1ee5495fc899246
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2020-09-07 23:10:27 +02:00
Bernd Kuhls
75ff15f38b
package/libraw: bump version to 0.19.5
...
Release notes: https://www.libraw.org/news/libraw-0-19-5-release
Updated hash of README.md after upstream commit:
https://github.com/LibRaw/LibRaw/commit/292c2763c93352f606fb1d7ab3ab57b6de883903
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2019-10-07 23:12:19 +02:00
Fabrice Fontaine
23fd8458fd
package/libraw: security bump to version 0.19.2
...
- Fixes CVE-2018-5815 and CVE-2018-5816
- README has been renamed into README.md
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2019-03-02 21:27:54 +01:00
Fabrice Fontaine
6232e9f894
libraw: bump to version 0.18.11
...
- Remove all patches (already in version)
- Since version 0.18 (2016-12-07), there is no
'LibRaw Software License 27032010' licensing anymore (and all signed
agreements have expired). LibRaw is now dual-licensed: LGPL 2.1 or
CDDL 1.0
- Add hash for license files
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com >
2018-06-03 20:39:53 +02:00
Arnout Vandecappelle
97fe953bf6
package/libraw: fix gcc-6 build
...
Grab the patch from Debian.
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be >
Cc: Thomas Petazzoni <thomas.petazzoni@free-electrons.com >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com >
2016-08-27 14:45:21 +02:00
Bernd Kuhls
7d1feadb19
package/libraw: bump version to 0.17.1
...
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de >
Signed-off-by: Peter Korsgaard <peter@korsgaard.com >
2016-01-31 14:19:15 +01:00
Gustavo Zacarias
48436e081f
libraw: add hash file
...
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar >
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com >
2015-07-28 22:32:56 +02:00
Fabrice Fontaine