CVS commit: pkgsrc/graphics/exiv2

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sun Feb 23 11:24:54 UTC 2025

Modified Files:
        pkgsrc/graphics/exiv2: Makefile PLIST distinfo

Log Message:
exiv2: update to 0.28.5.

This release fixes a use-after-free vulnerability in `tiffcomposite_int.cpp`:

* [CVE-2025-26623](https://github.com/Exiv2/exiv2/security/advisories/GHSA-38h4-fx85-qcx7)

Versions prior to v0.28.0, such as v0.27.7, are not affected by CVE-2025-26623.


To generate a diff of this commit:
cvs rdiff -u -r1.68 -r1.69 pkgsrc/graphics/exiv2/Makefile
cvs rdiff -u -r1.28 -r1.29 pkgsrc/graphics/exiv2/PLIST
cvs rdiff -u -r1.53 -r1.54 pkgsrc/graphics/exiv2/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/graphics/exiv2/Makefile
diff -u pkgsrc/graphics/exiv2/Makefile:1.68 pkgsrc/graphics/exiv2/Makefile:1.69
--- pkgsrc/graphics/exiv2/Makefile:1.68 Sat Feb 22 14:46:11 2025
+++ pkgsrc/graphics/exiv2/Makefile      Sun Feb 23 11:24:54 2025
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.68 2025/02/22 14:46:11 gdt Exp $
+# $NetBSD: Makefile,v 1.69 2025/02/23 11:24:54 wiz Exp $
 
-DISTNAME=      exiv2-0.28.4
-PKGREVISION=   1
+DISTNAME=      exiv2-0.28.5
 CATEGORIES=    graphics
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=Exiv2/}
 GITHUB_TAG=    v${PKGVERSION_NOREV}

Index: pkgsrc/graphics/exiv2/PLIST
diff -u pkgsrc/graphics/exiv2/PLIST:1.28 pkgsrc/graphics/exiv2/PLIST:1.29
--- pkgsrc/graphics/exiv2/PLIST:1.28    Sun Jul 14 12:59:11 2024
+++ pkgsrc/graphics/exiv2/PLIST Sun Feb 23 11:24:54 2025
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.28 2024/07/14 12:59:11 wiz Exp $
+@comment $NetBSD: PLIST,v 1.29 2025/02/23 11:24:54 wiz Exp $
 bin/exiv2
 include/exiv2/asfvideo.hpp
 include/exiv2/basicio.hpp
@@ -49,8 +49,8 @@ include/exiv2/xmp_exiv2.hpp
 include/exiv2/xmpsidecar.hpp
 lib/cmake/exiv2/exiv2Config.cmake
 lib/cmake/exiv2/exiv2ConfigVersion.cmake
-lib/cmake/exiv2/exiv2Export-release.cmake
-lib/cmake/exiv2/exiv2Export.cmake
+lib/cmake/exiv2/exiv2Targets-release.cmake
+lib/cmake/exiv2/exiv2Targets.cmake
 lib/libexiv2.so
 lib/libexiv2.so.${PKGVERSION}
 lib/libexiv2.so.28

Index: pkgsrc/graphics/exiv2/distinfo
diff -u pkgsrc/graphics/exiv2/distinfo:1.53 pkgsrc/graphics/exiv2/distinfo:1.54
--- pkgsrc/graphics/exiv2/distinfo:1.53 Tue Feb 18 10:03:31 2025
+++ pkgsrc/graphics/exiv2/distinfo      Sun Feb 23 11:24:54 2025
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.53 2025/02/18 10:03:31 wiz Exp $
+$NetBSD: distinfo,v 1.54 2025/02/23 11:24:54 wiz Exp $
 
-BLAKE2s (exiv2-0.28.4.tar.gz) = 91b113f324036f6c9c14d645b98940cda435ab4850f4ece761caf7d19837d648
-SHA512 (exiv2-0.28.4.tar.gz) = 2a10a25bd2a6226ecb1faee4fb02bcc9c91143bec73fe9ca5439ce2ed5fe66e68bb407a080916e8902de35efccc904af9eaf83a31a69cfab816adb91fdc0f2a9
-Size (exiv2-0.28.4.tar.gz) = 46932087 bytes
+BLAKE2s (exiv2-0.28.5.tar.gz) = d85495a131a5f00c7cd276486853aff2c0945b3b476e904241c9dafdcc8d7b89
+SHA512 (exiv2-0.28.5.tar.gz) = 43c1d68255ee8df124b3093e1f4101d2f55fd8d6105bb6f20b148fe7d59472b895f0cba914e59f6d1581e84eee9d7033572821b80c16507e92abcb9a738daadc
+Size (exiv2-0.28.5.tar.gz) = 46932602 bytes
 SHA1 (patch-cmake_compilerFlags.cmake) = 9f56d637e5dc99d7377a8d57ca9be9aab5833a76
 SHA1 (patch-src_futils.cpp) = 16f320338ea0071098a892e23c7056ead2e18d16