CVS commit: [pkgsrc-2021Q3] pkgsrc/graphics/libexif

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Sun Oct  3 17:55:56 UTC 2021

Modified Files:
        pkgsrc/graphics/libexif [pkgsrc-2021Q3]: Makefile distinfo

Log Message:
Pullup ticket #6502 - requested by wiz
graphics/libexif: security fix

Revisions pulled up:
- graphics/libexif/Makefile                                     1.49
- graphics/libexif/distinfo                                     1.33

---
   Module Name: pkgsrc
   Committed By:        wiz
   Date:                Wed Sep 29 08:42:57 UTC 2021

   Modified Files:
        pkgsrc/graphics/libexif: Makefile distinfo

   Log Message:
   libexif: update to 0.6.23.

   libexif-0.6.23 (2021-09-12):

     * Translation updates: es, pl, uk, fr
     * EXIF_TAG_SENSITIVITY_TYPE decoder added, added some more Exif 2.3 tags:
       - EXIF_TAG_STANDARD_OUTPUT_SENSITIVITY
       - EXIF_TAG_RECOMMENDED_EXPOSURE_INDEX
       - EXIF_TAG_ISO_SPEED
       - EXIF_TAG_ISO_SPEEDLatitudeYYY
       - EXIF_TAG_ISO_SPEEDLatitudeZZZ
       - EXIF_TAG_OFFSET_TIME
       - EXIF_TAG_OFFSET_TIME_ORIGINAL
       - EXIF_TAG_OFFSET_TIME_DIGITIZED
       - EXIF_TAG_IMAGE_DEPTH
     * be more relaxed to out of order JPG / EXIF dataheaders in files generated by some tools
     * default GPS IFD table added
     * Decode more Nikon Makernote tag names
     * Added Apple iOS Makernote
     * Security fixes:
       * CVE-2020-0198: unsigned integer overflow in exif_data_load_data_content
       * CVE-2020-0452: compiler optimization could remove an a
         bufferoverflow check, making a buffer overflow possible with some
         EXIF tags
       * some more denial of service (compute time or stack exhaustion) counter-measures
         added that avoid minutes of decoding time with malformed files found
         by OSS-Fuzz


To generate a diff of this commit:
cvs rdiff -u -r1.48 -r1.48.12.1 pkgsrc/graphics/libexif/Makefile
cvs rdiff -u -r1.32 -r1.32.12.1 pkgsrc/graphics/libexif/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/graphics/libexif/Makefile
diff -u pkgsrc/graphics/libexif/Makefile:1.48 pkgsrc/graphics/libexif/Makefile:1.48.12.1
--- pkgsrc/graphics/libexif/Makefile:1.48       Tue May 19 11:20:00 2020
+++ pkgsrc/graphics/libexif/Makefile    Sun Oct  3 17:55:56 2021
@@ -1,10 +1,10 @@
-# $NetBSD: Makefile,v 1.48 2020/05/19 11:20:00 nia Exp $
+# $NetBSD: Makefile,v 1.48.12.1 2021/10/03 17:55:56 bsiegert Exp $
 
-DISTNAME=      libexif-0.6.22
+DISTNAME=      libexif-0.6.23
 CATEGORIES=    graphics
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=libexif/}
 GITHUB_PROJECT=        libexif
-GITHUB_RELEASE=        ${DISTNAME:S/./_/g}-release
+GITHUB_RELEASE=        v${PKGVERSION_NOREV}
 EXTRACT_SUFX=  .tar.xz
 
 MAINTAINER=    adam%NetBSD.org@localhost

Index: pkgsrc/graphics/libexif/distinfo
diff -u pkgsrc/graphics/libexif/distinfo:1.32 pkgsrc/graphics/libexif/distinfo:1.32.12.1
--- pkgsrc/graphics/libexif/distinfo:1.32       Tue May 19 11:20:00 2020
+++ pkgsrc/graphics/libexif/distinfo    Sun Oct  3 17:55:56 2021
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.32 2020/05/19 11:20:00 nia Exp $
+$NetBSD: distinfo,v 1.32.12.1 2021/10/03 17:55:56 bsiegert Exp $
 
-SHA1 (libexif-0.6.22.tar.xz) = b396c562dbf44567ef796f324e7760b15e657523
-RMD160 (libexif-0.6.22.tar.xz) = e34ce907a658d4883894655bd11c6dff2b06cf9d
-SHA512 (libexif-0.6.22.tar.xz) = 0a9e7bf0258ed98a794b667d45e8fc65299101a2a2d2e39c358715b20b003beff258782f0736cd5b53978428a2f878a989f303bee249a978850a065f33c534af
-Size (libexif-0.6.22.tar.xz) = 1347040 bytes
+SHA1 (libexif-0.6.23.tar.xz) = e8439ad25f19b53874b685c3a9e80e6d883c1b2a
+RMD160 (libexif-0.6.23.tar.xz) = e6950f3939bb63f9782933bfa6b6741110a998aa
+SHA512 (libexif-0.6.23.tar.xz) = bf8adbe91ae14a69a83d16712c6067b06b05dfe2af66badf0de3414ee214c1d79a16529eb17bcdbac41ef8e9701d9e2c7a7ea4531e939af4050f9781b8302751
+Size (libexif-0.6.23.tar.xz) = 1327916 bytes