[Bug 277146] graphics/exiv2: Update to 0.28.2
- Reply: bugzilla-noreply_a_freebsd.org: "maintainer-feedback requested: [Bug 277146] graphics/exiv2: Update to 0.28.2"
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 277146] graphics/exiv2: Update to 0.28.2"
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 277146] graphics/exiv2: Update to 0.28.2"
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 277146] graphics/exiv2: Update to 0.28.2"
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 277146] graphics/exiv2: Update to 0.28.2"
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Sun, 18 Feb 2024 18:50:21 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=277146 Bug ID: 277146 Summary: graphics/exiv2: Update to 0.28.2 Product: Ports & Packages Version: Latest Hardware: Any URL: https://github.com/Exiv2/exiv2/blob/v0.28.2/doc/Change Log OS: Any Status: New Severity: Affects Only Me Priority: --- Component: Individual Port(s) Assignee: multimedia@FreeBSD.org Reporter: diizzy@FreeBSD.org CC: dumbbell@FreeBSD.org, fuz@FreeBSD.org, mandree@FreeBSD.org Assignee: multimedia@FreeBSD.org Flags: maintainer-feedback?(multimedia@FreeBSD.org) Created attachment 248573 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=248573&action=edit Patch for exiv2 Fixes CVE-2024-24826, CVE-2024-25112 and CVE-2023-44398 (0.28.1) Compile and runtime tested on FreeBSD 14.0-RELEASE (aarch64) (make, make check-plist, make test) Compile and runtime tested on FreeBSD 14.0-RELEASE (amd64) (make, make check-plist, make test) References: https://www.cve.org/CVERecord?id=CVE-2024-24826 https://www.cve.org/CVERecord?id=CVE-2024-25112 https://www.cve.org/CVERecord?id=CVE-2023-44398 Poudriere testport OK 14.0-RELEASE (amd64) Poudriere testport OK 13.2-RELEASE (amd64) Tested with following consumers in 14.0-RELEASE (amd64) using Poudriere: graphics/gimp-lensfun-plugin astro/gpscorrelate astro/merkaartor astro/siril astro/stellarium deskutils/gnome-photos deskutils/pinot devel/kf5-kfilemetadata graphics/art graphics/darktable graphics/digikam graphics/filmulator graphics/geeqie graphics/gexiv2 graphics/gthumb graphics/gwenview graphics/gwenview-devel graphics/hugin graphics/kphotoalbum graphics/krita graphics/libkexiv2 graphics/libkexiv2-devel graphics/luminance-qt5 graphics/lux graphics/nomacs graphics/oyranos graphics/photivo graphics/photoqt graphics/phototonic graphics/qgis graphics/qgis-ltr graphics/rawstudio graphics/shotwell graphics/ufraw graphics/viewnior multimedia/mythtv net/gerbera sysutils/bulk_extractor sysutils/krename -- You are receiving this mail because: You are the assignee for the bug.