|
 |
3f58c5 |
Name: compat-exiv2-026
|
|
|
3f58c5 |
Version: 0.26
|
|
|
d60056 |
Release: 7%{?dist}
|
|
|
3f58c5 |
Summary: Compatibility package with the exiv2 library in version 0.26
|
|
|
3f58c5 |
|
|
|
3f58c5 |
License: GPLv2+
|
|
|
3f58c5 |
URL: http://www.exiv2.org/
|
|
|
3f58c5 |
Source0: https://github.com/Exiv2/%{name}/archive/exiv2-%{version}.tar.gz
|
|
|
3f58c5 |
|
|
|
3f58c5 |
Patch0: exiv2-simplify-compiler-info-in-cmake.patch
|
|
|
3f58c5 |
Patch1: exiv2-do-not-build-documentation.patch
|
|
|
3f58c5 |
|
|
|
3f58c5 |
## upstream patches (lookaside cache)
|
|
|
3f58c5 |
Patch6: 0006-1296-Fix-submitted.patch
|
|
|
3f58c5 |
|
|
|
3f58c5 |
# Security fixes
|
|
|
3f58c5 |
Patch10: exiv2-CVE-2017-17723-1.patch
|
|
|
3f58c5 |
Patch11: exiv2-CVE-2017-17723-2.patch
|
|
|
3f58c5 |
Patch12: exiv2-wrong-brackets.patch
|
|
|
3f58c5 |
Patch13: exiv2-CVE-2017-11683.patch
|
|
|
3f58c5 |
Patch14: exiv2-CVE-2017-14860.patch
|
|
|
3f58c5 |
Patch15: exiv2-CVE-2017-14864-CVE-2017-14862-CVE-2017-14859.patch
|
|
|
3f58c5 |
Patch16: exiv2-CVE-2017-17725.patch
|
|
|
3f58c5 |
Patch17: exiv2-CVE-2017-17669.patch
|
|
|
3f58c5 |
Patch18: exiv2-additional-security-fixes.patch
|
|
|
3f58c5 |
Patch19: exiv2-CVE-2018-10958.patch
|
|
|
3f58c5 |
Patch20: exiv2-CVE-2018-10998.patch
|
|
|
3f58c5 |
Patch21: exiv2-CVE-2018-11531.patch
|
|
|
3f58c5 |
Patch22: exiv2-CVE-2018-12264-CVE-2018-12265.patch
|
|
|
3f58c5 |
Patch23: exiv2-CVE-2018-14046.patch
|
|
|
3f58c5 |
Patch24: exiv2-CVE-2018-5772.patch
|
|
|
3f58c5 |
Patch25: exiv2-CVE-2018-8976.patch
|
|
|
3f58c5 |
Patch26: exiv2-CVE-2018-8977.patch
|
|
|
3f58c5 |
Patch27: exiv2-CVE-2018-16336.patch
|
|
|
2af963 |
Patch28: exiv2-CVE-2021-31291.patch
|
|
|
2af963 |
Patch29: exiv2-CVE-2021-31292.patch
|
|
|
4e7124 |
Patch30: exiv2-CVE-2021-37618.patch
|
|
|
4e7124 |
Patch31: exiv2-CVE-2021-37619.patch
|
|
|
d60056 |
Patch32: exiv2-CVE-2020-18898.patch
|
|
|
3f58c5 |
|
|
|
3f58c5 |
## upstreamable patches
|
|
|
3f58c5 |
|
|
|
3f58c5 |
BuildRequires: cmake
|
|
|
3f58c5 |
BuildRequires: expat-devel
|
|
|
3f58c5 |
BuildRequires: gettext
|
|
|
3f58c5 |
BuildRequires: pkgconfig
|
|
|
3f58c5 |
BuildRequires: pkgconfig(libcurl)
|
|
|
3f58c5 |
BuildRequires: pkgconfig(libssh)
|
|
|
3f58c5 |
BuildRequires: zlib-devel
|
|
|
3f58c5 |
|
|
|
3f58c5 |
Conflicts: exiv2-libs < 0.27
|
|
|
3f58c5 |
|
|
|
3f58c5 |
%description
|
|
|
3f58c5 |
A command line utility to access image metadata, allowing one to:
|
|
|
3f58c5 |
* print the Exif metadata of Jpeg images as summary info, interpreted values,
|
|
|
3f58c5 |
or the plain data for each tag
|
|
|
3f58c5 |
* print the Iptc metadata of Jpeg images
|
|
|
3f58c5 |
* print the Jpeg comment of Jpeg images
|
|
|
3f58c5 |
* set, add and delete Exif and Iptc metadata of Jpeg images
|
|
|
3f58c5 |
* adjust the Exif timestamp (that's how it all started...)
|
|
|
3f58c5 |
* rename Exif image files according to the Exif timestamp
|
|
|
3f58c5 |
* extract, insert and delete Exif metadata (including thumbnails),
|
|
|
3f58c5 |
Iptc metadata and Jpeg comments
|
|
|
3f58c5 |
|
|
|
3f58c5 |
%prep
|
|
|
3f58c5 |
%autosetup -n exiv2-%{version} -p1
|
|
|
3f58c5 |
|
|
|
3f58c5 |
|
|
|
3f58c5 |
%build
|
|
|
3f58c5 |
# exiv2: embedded copy of exempi should be compiled with BanAllEntityUsage
|
|
|
3f58c5 |
# https://bugzilla.redhat.com/show_bug.cgi?id=888769
|
|
|
3f58c5 |
export CPPFLAGS="-DBanAllEntityUsage=1"
|
|
|
3f58c5 |
|
|
|
3f58c5 |
%{cmake} \
|
|
|
3f58c5 |
-DEXIV2_ENABLE_BUILD_PO:BOOL=OFF \
|
|
|
3f58c5 |
-DEXIV2_ENABLE_BUILD_SAMPLES:BOOL=OFF \
|
|
|
3f58c5 |
-DEXIV2_ENABLE_LIBXMP:BOOL=ON .
|
|
|
3f58c5 |
# FIXME: build this because it adds Threads library and it doesn't build without
|
|
|
3f58c5 |
# it from some reason
|
|
|
3f58c5 |
|
|
|
3f58c5 |
make %{?_smp_mflags}
|
|
|
3f58c5 |
|
|
|
3f58c5 |
%install
|
|
|
3f58c5 |
make install/fast DESTDIR=%{buildroot}
|
|
|
3f58c5 |
|
|
|
3f58c5 |
## unpackaged files
|
|
|
3f58c5 |
rm -rf %{buildroot}%{_bindir}/exiv2
|
|
|
3f58c5 |
rm -rf %{buildroot}%{_includedir}/exiv2
|
|
|
3f58c5 |
rm -rf %{buildroot}%{_libdir}/libexiv2.la
|
|
|
3f58c5 |
rm -rf %{buildroot}%{_libdir}/libxmp.a
|
|
|
3f58c5 |
rm -rf %{buildroot}%{_libdir}/pkgconfig/exiv2.pc
|
|
|
3f58c5 |
rm -rf %{buildroot}%{_libdir}/pkgconfig/exiv2.lsm
|
|
|
3f58c5 |
rm -rf %{buildroot}%{_datadir}/locale/*
|
|
|
3f58c5 |
rm -rf %{buildroot}%{_mandir}/*
|
|
|
3f58c5 |
rm -rf mv %{buildroot}%{_libdir}/libexiv2.so
|
|
|
3f58c5 |
|
|
|
3f58c5 |
|
|
|
3f58c5 |
%files
|
|
|
3f58c5 |
%doc COPYING README
|
|
|
3f58c5 |
%{_libdir}/libexiv2.so.26*
|
|
|
3f58c5 |
|
|
|
3f58c5 |
|
|
|
3f58c5 |
%changelog
|
|
|
d60056 |
* Wed Oct 13 2021 Jan Grulich <jgrulich@redhat.com> - 0.26-7
|
|
|
d60056 |
- Fix stack exhaustion issue in the printIFDStructure function
|
|
|
d60056 |
Resolves: bz#2003669
|
|
|
d60056 |
|
|
|
4e7124 |
* Wed Aug 18 2021 Jan Grulich <jgrulich@redhat.com> - 0.26-6
|
|
|
4e7124 |
- Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
|
|
|
4e7124 |
Resolves: bz#1993283
|
|
|
4e7124 |
|
|
|
4e7124 |
- Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
|
|
|
4e7124 |
Resolves: bz#1993246
|
|
|
4e7124 |
|
|
|
4e7124 |
* Thu Aug 05 2021 Jan Grulich <jgrulich@redhat.com> - 0.26-4
|
|
|
2af963 |
- Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
|
|
|
2af963 |
Resolves: bz#1990398
|
|
|
2af963 |
|
|
|
2af963 |
- Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS
|
|
|
2af963 |
Resolves: bz#1990399
|
|
|
2af963 |
|
|
|
3f58c5 |
* Thu Nov 21 2019 Jan Grulich <jgrulich@redhat.com> - 0.26-3
|
|
|
3f58c5 |
- Remove pre-built msvc binaries
|
|
|
3f58c5 |
Resolves: bz#1757349
|
|
|
3f58c5 |
|
|
|
3f58c5 |
* Wed Oct 09 2019 Tomas Pelka <tpelka@redhat.com> - 0.26-2
|
|
|
3f58c5 |
- bump version in order to pick up with gating
|
|
|
3f58c5 |
|
|
|
3f58c5 |
* Mon Oct 07 2019 Jan Grulich <jgrulich@redhat.com> - 0.26-1
|
|
|
3f58c5 |
- Spec file based on exiv2 package to provide old libraries before API change
|
|
|
3f58c5 |
Resolves: bz#1757349
|