• Files Changed
• Browse Source

    CVE-2018-5819,CVE-2021-32142
    bsc#1120515,bsc#1120516,bsc#1120517,bsc#1120519,bsc#1208470)

• Files Changed
• Browse Source

- security update
- added patches
  fix CVE-2020-22628 [bsc#1215308], stretch() function in libraw/src/postprocessing/aspect_ratio.cpp
  + libraw-CVE-2020-22628.patch

• Files Changed
• Browse Source

- security update
- added patches
  fix CVE-2023-1729 [bsc#1210720], a heap-buffer-overflow in raw2image_ex()
  + libraw-CVE-2023-1729.patch

• Files Changed
• Browse Source

- update to 0.21.1:
  * fixed typo in panasonic metadata parser
  * Multiple fixes inspired by oss-fuzz project
  * Phase One/Leaf IIQ-S v2 support
  * Canon CR3 filmrolls
  * Canon CRM (movie) files
  * Tiled bit-packed (and 16-bit unpacked) DNGs
  * (non-standard) Deflate-compressed integer DNG files are allowed
  * Canon EOS R3, R7 and R10
  * Fujifilm X-H2S, X-T30 II
  * OM System OM-1
  * Leica M11
  * Sony A7-IV (ILCE-7M4)
  * DJI Mavic 3
  * Nikon Z9: standard compression formats only (forwarded request 1059316 from dirkmueller)

• Files Changed
• Browse Source

- Update to 0.21.0:
  * Camera format support:
    + Phase One/Leaf IIQ-S v2 support
    + Canon CR3 filmrolls/RawBurst
    + Canon CRM (movie) files
    + Tiled bit-packed (and 16-bit unpacked) DNGs
    + (non-standard) Deflate-compressed integer DNG files are allowed
  * Camera support:
    + Canon EOS R3, R7 and R10
    + Fujifilm X-H2S, X-T30 II
    + OM System OM-1
    + Leica M11
    + Sony A7-IV (ILCE-7M4)
    + DJI Mavic 3
    + Nikon Z9: standard compression formats only
  * Multiple (resultion) thumbnails support
  * Misc:
    + Nikon makernotes: read NEFCompression tag for HE/HE* files
    + Nikon orientation tag: more fixed offsets for known cameras
    + Adobe DNG SDK 1.6 support (meaning, just an additional patch for GPR SDK)
  * Bugs fixed:
    + Fixed possible out-of-buffer read in Nikon orientation tag parser
    + Out-of-range read-only array access in postprocessing if output_color is set to 0 (raw color)
    + Minolta Z2 was not recognized correctly on 32-bit systems
    + Fixed possible buffer overflow in Kodak C330 decoder
    + dcraw_process(): check for buffer allocation results to avoid NULL deref
    + Multiple bugfixes inspired by oss-fuzz project (forwarded request 1055251 from polslinux)

• Files Changed
• Browse Source

- previous version updates fixed also:
  * CVE-2018-20337,CVE-2018-20363,CVE-2018-20364,CVE-2018-20365,
    CVE-2018-5815,CVE-2018-5816,CVE-2018-5817,CVE-2018-5818,
    CVE-2018-5819
   (bsc#1097975,bsc#1103206,bsc#1120498,bsc#1120499,bsc#1120500,
    bsc#1120515,bsc#1120516,bsc#1120517,bsc#1120519)

• Files Changed
• Browse Source

Hardening: link as PIE (bsc#1184123). (forwarded request 887317 from wfrisch)

• Files Changed
• Browse Source

- baselibs required by ImageMagick
- added sources
  + baselibs.conf

• Files Changed
• Browse Source

- update to 0.20.2:
  * corrected GPS EXIF output
  * Olympus XZ-1: do not provide linear_max 
  * Pentax Optio 33WR: maker index was incorrect
  * dcraw_emu: corrected help line for -6 option.
  * raw-identify: corrected range check for color matrices print
  * use_camera_matrix option: fixed a bug introduced when making compiler more happy
  * multiple camera support improvements (forwarded request 844032 from dirkmueller)

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch

• Files Changed
• Browse Source

- version update to 0.19.5
  * LibRaw 0.19.5
  * WB coefficients check was too strong, weakened
  * Fixed possible buffer underrun in modern Samsung loader
  * LibRaw 0.19.4
  * CRW/metadata loop prevention code is rolled back due to ABI
    incompatibility. To enable, use -DLIBRAW_METADATA_LOOP_PREVENTION=1
    compile flag for LibRaw and ALL APPS.
  * Fixed possible buffer underflow
  * LibRaw 0.19.3
  * Several fixes inspired by OSS-Fuzz
- deleted patches
  - libraw-half-size-allocation-buffer-overflow.patch (upstreamed)

• Files Changed
• Browse Source

- drop JPEG2000 support [bsc#1144252]

- Use FAT LTO objects in order to provide proper static library.

• Files Changed
• Browse Source

- supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
  + libraw-half-size-allocation-buffer-overflow.patch

- asan_build: build ASAN included
- debug_build: build more suitable for debugging

• Files Changed
• Browse Source

- Updated to version 0.19.2
 * Fixed possible buffer overrun at Fuji makernotes parser
 * Fixed possible write to NULL pointer at raw2image/raw2image_ex calls.
- ./configure not present in sources

• Files Changed
• Browse Source

- Updated to version 0.19.1
  * Finally: got Sinar 4shot sample, works fine now
  * OpenMP critical sections for malloc/free; extra #ifdefs
    removed; bin/dcraw_dist could be built again using Makefile.devel
  * additional checks in parse_phase_one()
  * more checks on file offsets/tag len in parse_minolta
  * more checks in parse_ciff
  * Mempool check reworked
  * Old Leaf (16bit/3color/TIFF) support
  * Fix cameraWB->autoWB fallback
  * Polaroid x530 channel swap; get metadata pointer for Foveon files
  * Fixed Secunia Advisory SA86384
    - possible infinite loop in unpacked_load_raw()
    - possible infinite loop in parse_rollei()
    - possible infinite loop in parse_sinar_ia()
- removed libraw-CVE-2018-5813.patch (upstreamed)

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch

- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun

• Files Changed
• Browse Source

- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits 
- Dropped libraw-glibc-2.27.patch: No longer needed (forwarded request 585017 from kbabioch)

• Files Changed
• Browse Source