Changelog for libraw23-0.21.2-1.2.x86_64.rpm :

* Thu Dec 28 2023 Dirk Müller - update to 0.21.2:
* New compile-defined limit LIBRAW_MAX_PROFILE_SIZE_MB: limits allocation/read size for embedded color profile Embedded color profile allocation/read size: limited by input file size.
* Multiple fixes (mostly inspired by oss-fuzz) to improve library stability and/or input checks.
* raw-identify: use fallback if PATH_MAX not available
* Disabled color conversion for Canon 16-bit thumbnails
* docs/changelog: explained the case when no thumbnail is found in specific file
* swapXX renamed to libraw_swapXX to avoid name conflict
* better striped thumbnails handling- drop libraw-CVE-2023-1729.patch (upstream)
* Thu Sep 14 2023 pgajdosAATTsuse.com- security update- added patches fix CVE-2020-22628 [bsc#1215308], stretch() function in libraw/src/postprocessing/aspect_ratio.cpp + libraw-CVE-2020-22628.patch
* Tue May 02 2023 pgajdosAATTsuse.com- security update- added patches fix CVE-2023-1729 [bsc#1210720], a heap-buffer-overflow in raw2image_ex() + libraw-CVE-2023-1729.patch
* Wed Jan 18 2023 Dirk Müller - update to 0.21.1:
* fixed typo in panasonic metadata parser
* Multiple fixes inspired by oss-fuzz project
* Phase One/Leaf IIQ-S v2 support
* Canon CR3 filmrolls
* Canon CRM (movie) files
* Tiled bit-packed (and 16-bit unpacked) DNGs
* (non-standard) Deflate-compressed integer DNG files are allowed
* Canon EOS R3, R7 and R10
* Fujifilm X-H2S, X-T30 II
* OM System OM-1
* Leica M11
* Sony A7-IV (ILCE-7M4)
* DJI Mavic 3
* Nikon Z9: standard compression formats only
* Wed Jan 04 2023 Paolo Stivanin - Update to 0.21.0:
* Camera format support: + Phase One/Leaf IIQ-S v2 support + Canon CR3 filmrolls/RawBurst + Canon CRM (movie) files + Tiled bit-packed (and 16-bit unpacked) DNGs + (non-standard) Deflate-compressed integer DNG files are allowed
* Camera support: + Canon EOS R3, R7 and R10 + Fujifilm X-H2S, X-T30 II + OM System OM-1 + Leica M11 + Sony A7-IV (ILCE-7M4) + DJI Mavic 3 + Nikon Z9: standard compression formats only
* Multiple (resultion) thumbnails support
* Misc: + Nikon makernotes: read NEFCompression tag for HE/HE
* files + Nikon orientation tag: more fixed offsets for known cameras + Adobe DNG SDK 1.6 support (meaning, just an additional patch for GPR SDK)
* Bugs fixed: + Fixed possible out-of-buffer read in Nikon orientation tag parser + Out-of-range read-only array access in postprocessing if output_color is set to 0 (raw color) + Minolta Z2 was not recognized correctly on 32-bit systems + Fixed possible buffer overflow in Kodak C330 decoder + dcraw_process(): check for buffer allocation results to avoid NULL deref + Multiple bugfixes inspired by oss-fuzz project
* Mon Sep 27 2021 pgajdosAATTsuse.com- previous version updates fixed also:
* CVE-2018-20337,CVE-2018-20363,CVE-2018-20364,CVE-2018-20365, CVE-2018-5815,CVE-2018-5816,CVE-2018-5817,CVE-2018-5818, CVE-2018-5819,CVE-2021-32142 (bsc#1097975,bsc#1103206,bsc#1120498,bsc#1120499,bsc#1120500, bsc#1120515,bsc#1120516,bsc#1120517,bsc#1120519,bsc#1208470)
* Wed Apr 21 2021 Wolfgang Frisch - Hardening: link as PIE (bsc#1184123).
* Fri Feb 19 2021 pgajdosAATTsuse.com- baselibs required by ImageMagick- added sources + baselibs.conf
* Mon Oct 26 2020 Dirk Mueller - update to 0.20.2:
* corrected GPS EXIF output
* Olympus XZ-1: do not provide linear_max
* Pentax Optio 33WR: maker index was incorrect
* dcraw_emu: corrected help line for -6 option.
* raw-identify: corrected range check for color matrices print
* use_camera_matrix option: fixed a bug introduced when making compiler more happy
* multiple camera support improvements
* Fri Jul 24 2020 Paolo Stivanin - version update to 0.20.0
* Camera Format support + Canon CR3 + GoPro (via GPR SDK) + Panasonic 14-bit + Fujifilm compressed/16bit + Rapsberry Pi RAW+JPEG format (if USE_6BY9RPI defined)
* Camera support (+59, 1131 total) + Canon: PowerShot G5 X Mark II, G7 X Mark III, SX70 HS, + EOS R, EOS RP, EOS 90D, EOS 250D, EOS M6 Mark II, EOS M50, EOS M200 + EOS 1DX Mark III (lossless files only) + DJI Mavic Air, Osmo Action + FujiFilm GFX 100, X-A7, X-Pro3, X100V, X-T4 (uncompressed/lossless compressed only), X-T200 + GoPro Fusion, HERO5, HERO6, HERO7, HERO8 + Hasselblad L1D-20c, X1D II 50C + Leica D-LUX7, Q-P, Q2, V-LUX5, C-Lux / CAM-DC25, SL2, M10 Monochrom + Nikon D780, Z50, P950 + Olympus TG-6, E-M5 Mark III, E-PL10, E-M1 Mark III, + Panasonic DC-FZ1000 II, DC-G90, DC-S1, DC-S1R, DC-S1H, DC-TZ95 + PhaseOne IQ4 150MP + Ricoh GR III + Sony A7R IV, A9 II, ILCE-6100, ILCE-6600, RX0 II, RX100 VII + Zenit M
* minor/unsorted changes + Add support for zlib during configure + Fixed multiple problems found by OSS-Fuzz + Lots of changes in imgdata.makernotes + DNG whitelevel calculated via BitsPerSample if not set via tags + DNG: support for LinearDNG w/ BlackLevelRepeat.. pattern + better support for Nikon Coolscan 16-bit NEF files + Bayer images: ensure that even margins have the same COLOR() for both the active sensor area and the full sensor area. + fixed several bugs- removed libraw-Add-Sony-ILCE-7M3.patch- removed libraw-CVE-2020-15503.patch