26321acb6e
exiv2: Upgrade 0.27.6 -> 0.28.0
...
- add required dependencies on brotli and libinih
Signed-off-by: Markus Volk <f_l_k@t-online.de >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2023-09-22 23:57:50 -07:00
00a7d4b284
exiv2: Upgrade to 0.27.6
...
Drop backported patches
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2023-01-21 10:02:02 -08:00
8f05d9c2db
exiv2: Fix buildpaths warning.
...
Remove the build path from file exiv2Config.cmake.
Signed-off-by: Lei Maohui <leimaohui@fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2022-09-14 23:51:48 -07:00
14c7d8a0d7
recipes: Update LICENSE variable to use SPDX license identifiers
...
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2022-03-04 17:41:45 -08:00
a9aecd2c32
exiv2: Fix CVE-2021-29473
...
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29473
The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file.
An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2,
if they can trick the victim into running Exiv2 on a crafted image file.
Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/pull/1587/commits/e6a0982f7cd9282052b6e3485a458d60629ffa0b ]
CVE: CVE-2021-29473
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-19 09:17:49 -07:00
bb1400efda
exiv2: Fix CVE-2021-29470
...
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29470
The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file.
An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2,
if they can trick the victim into running Exiv2 on a crafted image file.
Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/pull/1581/commits/6628a69c036df2aa036290e6cd71767c159c79ed ]
CVE: CVE-2021-29470
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-19 09:17:49 -07:00
8c9470bdfa
exiv2: Fix CVE-2021-29464
...
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29464
The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file.
An attacker could potentially exploit the vulnerability to gain code execution, if they can
trick the victim into running Exiv2 on a crafted image file.
Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/commit/f9308839198aca5e68a65194f151a1de92398f54 ]
CVE: CVE-2021-29464
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-19 09:17:49 -07:00
9e7c2c9713
exiv2: Fix CVE-2021-3482
...
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3482
Improper input validation of the rawData.size property in Jp2Image::readMetadata() in jp2image.cpp
can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data.
Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/pull/1523/commits/22ea582c6b74ada30bec3a6b15de3c3e52f2b4da ]
CVE: CVE-2021-3482
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-19 09:17:49 -07:00
8e63ac6c86
exiv2: Fix CVE-2021-29463
...
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29463
The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file.
An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2,
if they can trick the victim into running Exiv2 on a crafted image file.
Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/commit/783b3a6ff15ed6f82a8f8e6c8a6f3b84a9b04d4b ]
CVE: CVE-2021-29463
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-19 09:17:49 -07:00
f0d83c14d9
exiv2: Fix CVE-2021-29458
...
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29458
The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file.
An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2,
if they can trick the victim into running Exiv2 on a crafted image file.
Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/pull/1536/commits/06d2db6e5fd2fcca9c060e95fc97f8a5b5d4c22d ]
CVE: CVE-2021-29458
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-19 09:17:49 -07:00
5be7269309
exiv2: Fix CVE-2021-29457
...
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29457
The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file.
An attacker could potentially exploit the vulnerability to gain code execution, if they can
trick the victim into running Exiv2 on a crafted image file.
Upstream-Status: Accepted [https://github.com/Exiv2/exiv2/commit/0230620e6ea5e2da0911318e07ce6e66d1ebdf22 ]
CVE: CVE-2021-29457
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2021-05-19 09:17:49 -07:00
6443044ca9
exiv2: upgrade 0.27.1 -> 0.27.3
...
Signed-off-by: Andreas Müller <schnitzeltony@gmail.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2020-07-31 13:22:53 -07:00
5077cd45b8
exiv2: initial add 0.27.1
...
* exiv2 lives in meta-luneos and meta-qt5-extra currently. Soon meta-gnome will require it for nautilus -> gexiv2
=> move it up in layer hierarchy
* This recipe was taken from meta-qt5-extra
* There is a version 0.27.2 but from my experience as soon as upstream will
create a successor of 0.27.2 they move tarballs from builds [1] -> archive [2]
To avoid missing sources let's stick on 0.27.1.
[1] https://exiv2.org/builds/
[2] https://www.exiv2.org/archive.html
Signed-off-by: Andreas Müller <schnitzeltony@gmail.com >
Signed-off-by: Khem Raj <raj.khem@gmail.com >
2019-10-13 11:18:39 -07:00
Markus Volk
Khem Raj
Lei Maohui
wangmy
Andreas Müller