libexiv2-26-0.26-150400.9.27.1 < > , ̉ id2p9|=hM牷r 7 3k`U!% -54
vzD#_N% iLz(H;bfUds: WR
nW
qe Mr7"!ݿ\.9~x=<ZtE[=?^ަ #a`Ѭ.TEje#e daR)rXo5OzLXukt}^<
ZwKX-9 ȓB=ڲ `I@ AFt > @ ) ? ) d ! B ! 2 H N X ` d
h p
L ( 9 8 @ 9 : K > & @ & F & G & H & I & X & Y & \ ' ] ' ^ '* b '6 c ' d (d e (i f (l l (n u ( v ( w ) x ) y )( z ) ) ) ) ) C libexiv2-26 0.26 150400.9.27.1 Library to access image metadata libexiv2 is a C++ library with a C compatibility interface to access
image metadata, esp from Exif tags. id2h04-ch1b 1SUSE Linux Enterprise 15 SUSE LLC GPL-2.0-or-later https://www.suse.com/ System/Libraries http://www.exiv2.org/ linux x86_64 1 id0id1 ef6723d5691a510e51d0f005ba1857036986d5eefbf6d755902ae16ebf029717 libexiv2.so.26.0.0 root root root root exiv2-0_26-0.26-150400.9.27.1.src.rpm libexiv2-26 libexiv2-26(x86-64) libexiv2.so.26()(64bit) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/sbin/ldconfig /sbin/ldconfig libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libdl.so.2()(64bit) libdl.so.2(GLIBC_2.2.5)(64bit) libexpat.so.1()(64bit) libgcc_s.so.1()(64bit) libgcc_s.so.1(GCC_3.0)(64bit) libm.so.6()(64bit) libm.so.6(GLIBC_2.27)(64bit) libm.so.6(GLIBC_2.29)(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.2.5)(64bit) libstdc++.so.6()(64bit) libstdc++.so.6(CXXABI_1.3)(64bit) libstdc++.so.6(GLIBCXX_3.4)(64bit) libstdc++.so.6(GLIBCXX_3.4.11)(64bit) libstdc++.so.6(GLIBCXX_3.4.15)(64bit) libstdc++.so.6(GLIBCXX_3.4.20)(64bit) libstdc++.so.6(GLIBCXX_3.4.21)(64bit) libstdc++.so.6(GLIBCXX_3.4.9)(64bit) libz.so.1()(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 cr-c[@cY!@c47@c2c1@b@^y@[[6 @[@Z YY@Y[@YV=@W+5UK@UJ@UUUa@UQ@Tء@dmueller@suse.com dmueller@suse.com dmueller@suse.com dmueller@suse.com dmueller@suse.com dmueller@suse.com dmueller@suse.com dmueller@suse.com dmueller@suse.com tchvatal@suse.com dmueller@suse.com cfeck@kde.org dmueller@suse.com wbauer@tmo.at wbauer@tmo.at wbauer@tmo.at suse-beta@cboltz.de jengelh@inai.de dmueller@suse.com tittiatcoke@gmail.com dimstar@opensuse.org gernot@hillier.de dmueller@suse.com nico.kruber@gmail.com - add CVE-2021-29473.patch (CVE-2021-29473, bsc#1186231):
avoid out-of-bounds read in Exiv2:Jp2Image:doWriteMetadata
- add CVE-2019-17402.patch (CVE-2019-17402, bsc#1153577):
improper validation of the total size to the offset and size leads to a crash in Exiv2::getULong in types.cpp
- add CVE-2019-13109.patch (CVE-2019-13109, bsc#1142677):
denial of service in PngImage:readMetadata
- add CVE-2018-20099.patch (CVE-2018-20099, bsc#1119559):
fix infinite loop in Exiv2::Jp2Image::encodeJp2Header
this includes CVE-2018-20098, bsc#1119560
- add CVE-2018-20097.patch (CVE-2018-20097, bsc#1119562):
avoid null pointer dereference in TiffParserWorker::findPrimaryGroups
- add CVE-2018-17581.patch (CVE-2018-17581, bsc#1110282):
avoid recursion in CiffDirectory::readDirectory()
- add CVE-2021-32815.patch (CVE-2021-32815, bsc#1189337):
avoid assertion failure in crwimage - add CVE-2021-34334.patch (CVE-2021-34334, bsc#1189338) - add CVE-2019-13111.patch (CVE-2019-13111, bsc#1142679)
- add CVE-2021-29463.patch (CVE-2021-29463, bsc#1185913)
- add webp-alpha-detection.patch
- add improve-pngchunk-bounds-checking.patch - add exiv2 0.26 library for compatibility (jsc#PED-1393) - add CVE-2021-37621.patch (CVE-2021-37621, bsc#1189333)
- add CVE-2021-32617.patch (CVE-2021-32617, bsc#1186192)
- add CVE-2020-19716.patch (CVE-2020-19716, bsc#1188645)
- add CVE-2019-14368.patch (CVE-2019-14368, bsc#1143278)
- add CVE-2019-20421.patch (CVE-2019-20421, bsc#1161901) - add CVE-2018-10772.patch (CVE-2018-10772, bsc#1092096)
- add CVE-2018-18915.patch (CVE-2018-18915, bsc#1114690)
- add CVE-2021-37620.patch (CVE-2021-37620, bsc#1189332)
- add CVE-2021-29470.patch (CVE-2021-29470, bsc#1185447) - add CVE-2018-5772.patch (CVE-2018-5772, bsc#1076579)
- add CVE-2018-8976.patch (CVE-2018-8976, bsc#1086810)
- add CVE-2018-8977.patch (CVE-2018-8977, bsc#1086798)
- add CVE-2020-18898.patch (CVE-2020-18898, bsc#1189780)
- add CVE-2021-31291.patch (CVE-2021-29457 and CVE-2021-31291, bsc#1185002 and bsc#1188733)
- add CVE-2021-31292.patch (CVE-2021-31292, bsc#1188756)
- add CVE-2021-37618.patch (CVE-2021-37618, bsc#1189330)
- add CVE-2021-37619.patch (CVE-2021-37619, bsc#1189331)
- add CVE-2020-18899.patch (CVE-2020-18899, bsc#1189636) - add 0001-Avoid-null-pointer-exception-due-to-NULL-return-valu.patch (bsc#1142684, CVE-2019-13114):
* fixes null-pointer dereference in http.c causing denial of service
- add 0001-IptcData-printStructure-Remove-buffer-overrun.patch (bsc#1088424, CVE-2018-9305):
* fixes an out-of-bounds read in IptcData::printStructure in iptc.c
- add 0001-Fix-SEGV-in-DataValue-Copy.patch (bsc#1109299, CVE-2018-17282):
* fixes null pointer dereference in Exiv2:DataValue:copy in value.cpp
- add 0001-PSD-Use-Safe-add-for-preventing-overflows-in-PSD-fil.patch,
0002-PSD-enforce-Length-of-image-resource-section-file-si.patch (CVE-2018-19108, bsc#1115364):
* fixes denial of service in Exiv2::PsdImage::readMetadata
- add 0001-Fix-561.-Use-proper-counter-for-the-idx-variable.patch (CVE-2018-19607, bsc#1117513):
* fixes a denial of service (NULL pointer dereference and application crash) - update to latest 0.26 branch:
* Includes fix for CVE-2019-14982 (bsc#1146294)
* Fixes CVE-2018-12264, CVE-2018-12265 (bsc#1097599)
* Fixes CVE-2017-9239 (bsc#1040973): null pointer dereference in doWriteImage
* Fixes CVE-2018-17229 (bsc#1109175): (Heap buffer overflow in Exiv2::d2Data)
* Fixes CVE-2018-17230 (bsc#1109176): (heap-based buffer overflow in Exiv2::ul2Data)
* Fixes CVE-2017-1000126 (Stack out of bounds read in webp parser) (bsc#1068873)
* jpgimage.cpp ICC support (CVE-2025-55304, bsc#1248963). - Fix build on python3 only system by making sure we use
python3 when building - update to latest 0.26 branch:
* obsoletes 0001-Use-more-GNUInstallDirs.patch
d4e4288d839d0d9546a05986771f8738c382060c.patch
gcc-version-check.patch
7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
fix-crash.patch
* adds exiv2-update-to-0.26-branch.patch
* Fixes CVE-2017-14864 (bsc#1060995),
CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
CVE-2017-11591 (bsc#1050257), CVE-2018-11531 (bsc#1095070),
CVE-2019-13110 (bsc#1142678) - split developer documentation into separate package - add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
CVE-2017-14864 bsc#1060995,
CVE-2017-14862 bsc#1060996,
CVE-2017-14859 bsc#1061000) - Add fix-crash.patch to prevent crashes in gwenview with certain
images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
upstream - Fix baselibs.conf - Update to version 0.26
* See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
* exiv2-cmake-libsuffix.patch
* exiv2_r3889_r3890_fix_boo964344.diff - add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344) - Adjust RPM groups
- Put manpage in proper subpackage - readd parallel-build-dep.patch - Update to version 0.25
* exivsimple has array index errors when stripping quotes form
trivial input strings
* Use SVN eol-style LF on all files
* Access violation on IptcData::operator[] when key is invalid
* PNG images with tiff tags throw exceptions
* Plasma kde crashes when specific jpeg is on the Desktop
* TIFF parser,Binary array elements should be decoded using the
Makernote's endianness, not that of the image
* Coverity scan : Issue CID 981992 , 981993
* Wrong key name in output of addmodel sample
* Printing tags does not honor multi-byte label widths correctly
* Wrong ApertureValue written
* pyexiv2 fails on cifs shares on an Ubuntu client
* TIFF parser,Parse TIFF PageNumber
* Add new sample applications exifdata and exivvalue
* Add option -K Key (--key Key) to specify one or more keys to
output
* "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
metadata packet
* Sony NEX Lens Information
* Handle Pentax makernotes in samsung-rebranded cameras
* Olympus XZ-1 FocusDistance incorrect
* Support Panasonic Makernote
* detection of Pentax DA 35/2.4 lens
* Canon EOS M EF-M lenses
* Lens matching on Canon
* Tamron 18-270 is not detected anymore
* Wrong aperture for Tamron 70-300?
* Recognize Samsung NX 10mm Fisheye
* Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
* See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
* fix-overflow-in-info-tags-r3264.patch
* fix-video-timescale-handling.patch
* parallel-build-dep.patch
* fix-parallel-build.patch - Switch to cmake build system: there are various code snips that
use variables that are only defined in the cmake build system
(e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
which is not done with configure. With gcc5 this results now in
a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
the respective archs. - add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos. - add parallel-build-dep.patch: Fix build dependencies - fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
(fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449). /sbin/ldconfig /sbin/ldconfig h04-ch1b 1768211506 0.26-150400.9.27.1 0.26-150400.9.27.1 libexiv2.so.26 libexiv2.so.26.0.0 /usr/lib64/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:42204/SUSE_SLE-15-SP4_Update/7a664bb9c074752640b908e61d139b9f-exiv2-0_26.SUSE_SLE-15-SP4_Update drpm xz 5 x86_64-suse-linux ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=99ada2b498cab58867746b001c7f7ddb238f1e5c, stripped P R R
R R R R R R R R R R R R R R R R R R R R
R R "ZRAyo #~ utf-8 0e553d96d3dcf43e4a850b359c2a12688559f4d0d37242456c1ce8e6ea2477e1 ? 7zXZ
! t/of] "k%]d|HICP/E[-1Y1F /Dtd0 \8;k ep
_V9 8 &:em¢#O/$(c|jC ȌZvu퇴]ht,Y)еu&
Z$$Ȗ Ud=?[nbYu,..Rcrغvkߌ?3Ln<dT`
?1r4b+:G@Iܻ:Ne^fn:[w19M
H}ҡV5g<L~#$//Ni_@ &~#L-5Bt||! C&rSťbnқښIl%rS⌆Va0E\"mAS/1f6Щ hQ{w {eLtA;!ʄ Ci6 M] %=Db"EԑY$D4Zh`H*HC-6TK~Sb:w'[~MfuO|b}zHX!1q>tTNT*d~ Z|w8fF#^,jaAKkR@}6 !]xPR4 2[~"|t9,g06 00u*V3GG#{on'>G6[i2ey4 S/@'5wn<=[yz/&er|xhW1Y%F&+]Rl71X'prw@U`)9
4h5Yi)xrՁco4ӉaP LtgLN~S]D,|Қj~Lke/Vc ^YNaLgJK7 H$]!VEO]S-X,mg= 5ߴ)H}AC % cXk:K|Lqp 5U*z&yrx͍4$1*S4Y 0ꑩ@
5% # @Ei
tPN[ @qtzFsR& 0[&F%3upz?>5y1L0W*LEWGq&K?3 zy 4SO4H{L%o&aش?Z#Ty4~.9/by]iqs#ٸ6}E.aF3d(sF=yw)nٸ&i^eFU >v$( `ӿ)-FވSͣXq^G+yąF+dϐٝ(c
cW~-]k S'?b* QҾX=vn^vrprw~enM
^ [/2u}G!pvM-T,nM m{*jyvcBZ5>CP`AԽ'ly"21 MCE"kuR6r ~8b5G R 44Պ
R4o56n1mbA<{CS3d5fIkL|g'SޕI(շ2* (*uB$iǠvZTLKv.SmA`x K̍꿿!$ =O/Rs ~ƙu'LKXYWȒg4վ)1,y̥VJo^80 mCg s+TT$I/wq#"]yFn ƦJx당g dY XC%.y*K.nSZy
hH2͊%L%%u i0'h\ kh3eˎBV7*kvgD.^áՄU DEqإjb6\rvKFC]4(W`ʏ kێ߶M_X|2/w߸{Cw i2%Z^Y3\B5[ [j6HDhIBx* *[w[$ýypHhp棼sX6 5 :s֍/4wOgR'mWكO/@6Z0p]F) ;@$HO>? THU :aXP* {*Ԏ6;#E%)TX^q(Ogz gzWBj.itܚ |l pB['$Hjmiz7`x 0ZS$+x[P=kMg!M9 aΑ?sf6^V,~%j .$zN*ޘ$y3! d)*Xk &\p1)~g33 Kx") Kr{;e{;UbA4 SfR; 1{?$ z準3LȊYg7y _i :ޢ/b-" :F#G)Aw L 1YL
3]6{}
8H]nj3 陊S$tRPy;-i1+ %sm65# Wa] BvaMOk HO .qf>C֩2 |!?n(,Ahw
ɢ7]JǎZ4'@S1 sJ2E) kr{P p Nj1 (In2$*Ȁ =MhԶ
l'p{y&>MNWrmgzכw[q13.qbnx2oM RlיO u{1vR%~ "q!ۙ2p1VNOsOǨSxHN(DmQ{g[a!)a
~8eՂό^t^|12@{%,U}OUOy7w^)2NG`g٠ A/Ucw𠹚v}w
H9ZSFL.u62,͚p8ާ
X(a&_ 8fjs,r5H'@\1s_7C3%zm^ժŏ*ri]ォYڞS Amg#o@]w#-FOG֛O7Lq]R@#^-OdXd2uwy0%,d\]
շ
Wզ|{wtK(8 , +/ 6;"
Z0jۇ`2S76A8X-o ZԶ 12qzɯZͺONg0dyI zF[CB\n~o-!FV
'L ħ ^Z4
=ߏVyvACD#jqrѡHhyfJy(3:lPOfzg-hc?#D&wÕ졽G]j\(a[%$S; bXV3o:_GވJ҇3ek3` 6 X'k&oz{%Hh~q W-'
* B_ xw PΔwm$H1`D철ouz6UJ@ J
g.bqs_*bu[o >V:l>a#-W%BcPQ==kN*(QC#RIDdֆQx̟s^&yɪ![6h&W^Ϭ@ G% m=>^~[H˒CD<=:{.G ^g, /CBiS哽?1 n2arGqx7AmcU1MCP/T]>lA |\3d )C7l]>YA3Zz }:M6&m\d5|2h"+! hy"Pp9 iz%ĨToRSh 2meO!AA/א'=;SrL1OZ_~ JX&
e+Zp)9(N3<~_$i
>ۿ
7! 9=e^&m
;,2|KƩ8jD8F^l+`~me8,lUq 4Ui'b`O{Hv]/? v'uc<ލw Safëao6q`bTS̷P{Q^w㤂c8NhFvYVsBrpO:75Jm) 7!(uG%v6)\g@P)o&Jx5wȻn@KuӸܞ6g&T (!̀QwFWn7 mK vy| (
|HǠ[|SWKXX=eXQdӥɢ@+e^slPP:%p-Qn_8IRv]KnvϹNAamNP&3kAU6ReP<]{>n%:i +cOm-
Zf
: hCHxG(q$ h0/4.N3Eq@utƕ{wKN<]R
zG\PDc 27$BQadX
gyb@
/{tzhn]m6i ޝCDWb~A@ɾ@8`X:=O{ Bc
h8;ޚjD=F__
nnw\VA$+]$+pBuA ^(hIAPq8SO K/H%|]%7bޫ i"lȅ9'm6
ԓ.zP$|*H㱎w@GA O=nI2z mˏ/% ZI"=6mƦ;KM'eG2vԷ@nZ & XE 9HE2SK,J4՚lЯ`rФ;_\Ped*MLp`gk NQ߆(@j B'XkcIw`,'Q'nOM$H_WPB|*
nj&mv S{wKj%3eʼv B(
.e$Sy(o@ho:\(!{r>ZJt:5iXo.OrVqť^kk(ScyDB̾lcsBj8GHE z
Uma qZRأ9SZ $V+w3KցAÝXUruƇxOnb ,32+@4:j= ,Vc:_ 1ۺ U_l)ݞtV'jeDoBb}mR^ueK(BZ>ubˎ
&'p0Q=v.'/.@o*
70˃`]R' kw1ogw3SP+~߱0+}!!ҖZ2턉tM¶#UM:?o6U418 yQ8J7 :MCZ[ F= 0ͯCTY9yA3
zy0Xgř=C"̸hf |JF@8=¯Ml<}6NmF.O&yΉ _ D06o5gJ5nƎnh+u[> AkOI6S蛙Em$>|:>[kD/BP߿I`21{w {*FE~˪A R)=1 ~0!kLٌINl[{b' U!DRᐃV% W)>3%:+ f:~MAx쟃~BV8jV
b
x~X_ u OmAܼlc]vk>낃.;z Gpj2DpqBt_HR:W+ HL2'xUbuX1i}ZpVlo&]y,VЩi7Nu,,c"Y[_M֔ wiRmOoN*cՔ\rvrPeb;_@r]^N~3,1Û_{: 4MX&g +udly7%h },@mO"}-b0`ӫ,3 (DBDT9Hr +إO3~J\ZEu5Gbl>ɓ a2WC\彂ef&<::Sr V ;*֭]Q} ` "3Xy;Yh Thk`\+a^ #ȵw*zד/NfH,Ej#a".>+V7 s;2g"s|6` bXM%c%v .p=^wxKs7O{Őf6S|E(}xtF\yQ܃U5]!q/c[t{kk+t=tPc8%U6}k;KBJ~bR4k-BjN>L|gy5kwu_ٖ Y]e,
q:8ff*#h
'*XnX-- HkKN.)7V,Ě
.$
:bnHV`|ƋPVlߺwA Ȧr+{ (8m'WSC5C.p 5 ֚uud&w^ОաÝK^qXn[צաKr'W/1ʹOLK{ڄl<-,kS=wgENyÞԊQn?ۧ Y96գh UvTB Nm#"d; _,2˙B3 ˶_D J= =` DE'V
m7Z#,KVTV1ǔ |x_AѤ+gVJ/lclI)RV|t6,͟ LݫJ.](gbWE ՙzqR@~bxErejѾ
ƌ" h'kb @J2[?_a(V?:P,EWH3+WK %U4ﲭP n (5|JL46=7Prӭ&5̌c$iW!
\rK6zGcB.CNu 2Dț9 y'\ <^)" .DZ!w*"#ܕ@NtcC Ve*i'`tOn;ԠHw EAe*FP?HIEp! *p~u4˲D)P[l]C k_*QDg,a"Y|n b$#+Zgmگ7`S9 ]jq+/QvJ,kz**'ɸg (IU
0C%f
7Q 2=?\Q~P-'ЕlӛQH,>