diff --git a/SOURCES/exiv2-fix-1305.patch b/SOURCES/exiv2-fix-1305.patch new file mode 100644 index 0000000..c7a50d8 --- /dev/null +++ b/SOURCES/exiv2-fix-1305.patch @@ -0,0 +1,22 @@ +From 5405d61623e82896e498c5c8342dd6f42e689115 Mon Sep 17 00:00:00 2001 +From: clanmills +Date: Tue, 12 Sep 2017 09:14:42 +0100 +Subject: [PATCH] Fix http://dev.exiv2.org/issues/1305 + +--- + src/pentaxmn.cpp | 2 ++ + 1 file changed, 2 insertions(+) + +diff --git a/src/pentaxmn.cpp b/src/pentaxmn.cpp +index 4fc38be0a..b22cb43b6 100644 +--- a/src/pentaxmn.cpp ++++ b/src/pentaxmn.cpp +@@ -1167,6 +1167,8 @@ namespace Exiv2 { + + std::ostream& PentaxMakerNote::printShutterCount(std::ostream& os, const Value& value, const ExifData* metadata) + { ++ if ( ! metadata ) return os << "undefined" ; ++ + ExifData::const_iterator dateIt = metadata->findKey( + ExifKey("Exif.PentaxDng.Date")); + if (dateIt == metadata->end()) { diff --git a/SPECS/exiv2.spec b/SPECS/exiv2.spec index d9ad662..6899a73 100644 --- a/SPECS/exiv2.spec +++ b/SPECS/exiv2.spec @@ -2,7 +2,7 @@ Summary: Exif and Iptc metadata manipulation library Name: exiv2 Version: 0.26 -Release: 3%{?dist} +Release: 3%{?dist}.0.1 License: GPLv2+ URL: http://www.exiv2.org/ @@ -18,6 +18,9 @@ Patch12: exiv2-CVE-2017-5772.patch ## upstreamable patches Patch100: exiv2-doxygen.patch +##FastTrack +Patch10001: exiv2-fix-1305.patch + BuildRequires: expat-devel BuildRequires: gettext BuildRequires: pkgconfig @@ -129,6 +132,9 @@ test -x %{buildroot}%{_libdir}/libexiv2.so %doc doc/html %changelog +* Sat Jan 05 2018 Pablo Greco - 0.26-3.0.1 +- Fix https://bugs.centos.org/view.php?id=14882 http://dev.exiv2.org/issues/1305 + * Fri Feb 23 2018 Jan Grulich - 0.26-3 - Fix uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() which can allow a remote attacker to cause a denial of service via a crafted tif file