[pkgsrc/pkgsrc-2021Q3]: pkgsrc/graphics/libexif Pullup ticket #6502 - request...

[bsiegert <bsiegert%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/e2e9bfc110ef
branches:  pkgsrc-2021Q3
changeset: 459328:e2e9bfc110ef
user:      bsiegert <bsiegert%pkgsrc.org@localhost>
date:      Sun Oct 03 17:55:56 2021 +0000

description:
Pullup ticket #6502 - requested by wiz
graphics/libexif: security fix

Revisions pulled up:
- graphics/libexif/Makefile                                     1.49
- graphics/libexif/distinfo                                     1.33

---
   Module Name: pkgsrc
   Committed By:        wiz
   Date:                Wed Sep 29 08:42:57 UTC 2021

   Modified Files:
        pkgsrc/graphics/libexif: Makefile distinfo

   Log Message:
   libexif: update to 0.6.23.

   libexif-0.6.23 (2021-09-12):

     * Translation updates: es, pl, uk, fr
     * EXIF_TAG_SENSITIVITY_TYPE decoder added, added some more Exif 2.3 tags:
       - EXIF_TAG_STANDARD_OUTPUT_SENSITIVITY
       - EXIF_TAG_RECOMMENDED_EXPOSURE_INDEX
       - EXIF_TAG_ISO_SPEED
       - EXIF_TAG_ISO_SPEEDLatitudeYYY
       - EXIF_TAG_ISO_SPEEDLatitudeZZZ
       - EXIF_TAG_OFFSET_TIME
       - EXIF_TAG_OFFSET_TIME_ORIGINAL
       - EXIF_TAG_OFFSET_TIME_DIGITIZED
       - EXIF_TAG_IMAGE_DEPTH
     * be more relaxed to out of order JPG / EXIF dataheaders in files generated by some tools
     * default GPS IFD table added
     * Decode more Nikon Makernote tag names
     * Added Apple iOS Makernote
     * Security fixes:
       * CVE-2020-0198: unsigned integer overflow in exif_data_load_data_content
       * CVE-2020-0452: compiler optimization could remove an a
         bufferoverflow check, making a buffer overflow possible with some
         EXIF tags
       * some more denial of service (compute time or stack exhaustion) counter-measures
         added that avoid minutes of decoding time with malformed files found
         by OSS-Fuzz

diffstat:

 graphics/libexif/Makefile |   6 +++---
 graphics/libexif/distinfo |  10 +++++-----
 2 files changed, 8 insertions(+), 8 deletions(-)

diffs (32 lines):

diff -r f6da92700d40 -r e2e9bfc110ef graphics/libexif/Makefile
--- a/graphics/libexif/Makefile Mon Sep 27 13:22:17 2021 +0000
+++ b/graphics/libexif/Makefile Sun Oct 03 17:55:56 2021 +0000
@@ -1,10 +1,10 @@
-# $NetBSD: Makefile,v 1.48 2020/05/19 11:20:00 nia Exp $
+# $NetBSD: Makefile,v 1.48.12.1 2021/10/03 17:55:56 bsiegert Exp $
 
-DISTNAME=      libexif-0.6.22
+DISTNAME=      libexif-0.6.23
 CATEGORIES=    graphics
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=libexif/}
 GITHUB_PROJECT=        libexif
-GITHUB_RELEASE=        ${DISTNAME:S/./_/g}-release
+GITHUB_RELEASE=        v${PKGVERSION_NOREV}
 EXTRACT_SUFX=  .tar.xz
 
 MAINTAINER=    adam%NetBSD.org@localhost
diff -r f6da92700d40 -r e2e9bfc110ef graphics/libexif/distinfo
--- a/graphics/libexif/distinfo Mon Sep 27 13:22:17 2021 +0000
+++ b/graphics/libexif/distinfo Sun Oct 03 17:55:56 2021 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.32 2020/05/19 11:20:00 nia Exp $
+$NetBSD: distinfo,v 1.32.12.1 2021/10/03 17:55:56 bsiegert Exp $
 
-SHA1 (libexif-0.6.22.tar.xz) = b396c562dbf44567ef796f324e7760b15e657523
-RMD160 (libexif-0.6.22.tar.xz) = e34ce907a658d4883894655bd11c6dff2b06cf9d
-SHA512 (libexif-0.6.22.tar.xz) = 0a9e7bf0258ed98a794b667d45e8fc65299101a2a2d2e39c358715b20b003beff258782f0736cd5b53978428a2f878a989f303bee249a978850a065f33c534af
-Size (libexif-0.6.22.tar.xz) = 1347040 bytes
+SHA1 (libexif-0.6.23.tar.xz) = e8439ad25f19b53874b685c3a9e80e6d883c1b2a
+RMD160 (libexif-0.6.23.tar.xz) = e6950f3939bb63f9782933bfa6b6741110a998aa
+SHA512 (libexif-0.6.23.tar.xz) = bf8adbe91ae14a69a83d16712c6067b06b05dfe2af66badf0de3414ee214c1d79a16529eb17bcdbac41ef8e9701d9e2c7a7ea4531e939af4050f9781b8302751
+Size (libexif-0.6.23.tar.xz) = 1327916 bytes