Thursday, September 28, 2017

[security] graphics/libraw

This is bugfix release, changes are (compared to 0.18.2):

- Fix for possible buffer overrun in kodak_65000 decoder
- Fix for possible heap overrun in Canon makernotes parser
- Fix for CVE-2017-13735 CVE-2017-14265: Additional check for X-Trans
CFA pattern data

-- https://www.libraw.org/news/libraw-0-18-5

No shared libs changes detected by nm(1). I'd like to take the
maintainership.

Best regards,

Rafael Sadowksi

Index: Makefile
===================================================================
RCS file: /cvs/ports/graphics/libraw/Makefile,v
retrieving revision 1.27
diff -u -p -u -p -r1.27 Makefile
--- Makefile 26 Jul 2017 22:45:24 -0000 1.27
+++ Makefile 28 Sep 2017 20:13:09 -0000
@@ -4,15 +4,16 @@ BROKEN-hppa = undefined reference to __

COMMENT = library for reading RAW files

-DISTNAME = LibRaw-0.18.2
+DISTNAME = LibRaw-0.18.5
PKGNAME = ${DISTNAME:L}
CATEGORIES = graphics
-REVISION = 0

SHARED_LIBS += raw 2.0 # 15.0
SHARED_LIBS += raw_r 2.0 # 15.0

HOMEPAGE = https://www.libraw.org/
+
+MAINTAINER = Rafael Sadowski <rsadowski@openbsd.org>

# LGPL v2.1 OR CDDL v1.0 OR their own
PERMIT_PACKAGE_CDROM = Yes
Index: distinfo
===================================================================
RCS file: /cvs/ports/graphics/libraw/distinfo,v
retrieving revision 1.7
diff -u -p -u -p -r1.7 distinfo
--- distinfo 3 Jul 2017 17:29:06 -0000 1.7
+++ distinfo 28 Sep 2017 20:13:09 -0000
@@ -1,2 +1,2 @@
-SHA256 (LibRaw-0.18.2.tar.gz) = zjZrs4wRRBMHN+sW6RkDiTe03BqxZReaIl1ehHryq8Y=
-SIZE (LibRaw-0.18.2.tar.gz) = 1281674
+SHA256 (LibRaw-0.18.5.tar.gz) = +ip9FNnfr2s2j5WKdteSZrP1jCvDZ766tW4RuqlNoXg=
+SIZE (LibRaw-0.18.5.tar.gz) = 1280046

No comments:

Post a Comment