Files
buildroot/package/exiv2/Config.in
Bernd Kuhls 5e99e8a382 package/exiv2: security bump version to 0.28.7
Changelog:
https://exiv2.org/whatsnew.html
https://github.com/Exiv2/exiv2/blob/v0.28.7/doc/ChangeLog

Release notes of 0.28.0 with a long list of security-related fixes:
https://github.com/Exiv2/exiv2/issues/2406#issuecomment-1529139799

0.28.1 fixed CVE-2023-44398: https://github.com/Exiv2/exiv2/issues/2813

0.28.2 fixed CVE-2024-24826 & CVE-2024-25112:
https://github.com/Exiv2/exiv2/issues/2914

0.28.3 fixed CVE-2024-39695: https://github.com/Exiv2/exiv2/issues/3008

0.28.5 fixed CVE-2025-26623: https://github.com/Exiv2/exiv2/issues/3181

0.28.6 fixed
* [CVE-2025-54080](https://github.com/Exiv2/exiv2/security/advisories/GHSA-496f-x7cq-cq39)
* [CVE-2025-55304](https://github.com/Exiv2/exiv2/security/advisories/GHSA-m54q-mm9w-fp6g)

Please read https://github.com/Exiv2/exiv2/issues/2406 for the discussion
whether these CVEs are relevant and their status of backporting to the
0.27.x branch.

Removed patch which is included in this release.
Switch to github helper due to upstream not providing tarballs anymore.

Added optional support for inih:
43c9ec0f50
and brotli:
557a5cebd5
both introduced in the 0.28.x branch.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-09-05 18:36:19 +02:00

57 lines
1.4 KiB
Plaintext

comment "exiv2 needs a uClibc or glibc toolchain w/ C++, wchar, dynamic library, threads"
depends on BR2_STATIC_LIBS || !BR2_INSTALL_LIBSTDCPP \
|| !BR2_USE_WCHAR || !BR2_TOOLCHAIN_HAS_THREADS \
|| BR2_TOOLCHAIN_USES_MUSL
config BR2_PACKAGE_EXIV2
bool "exiv2"
depends on !BR2_STATIC_LIBS
depends on BR2_INSTALL_LIBSTDCPP
depends on BR2_TOOLCHAIN_HAS_THREADS
depends on !BR2_TOOLCHAIN_USES_MUSL # PTHREAD_RECURSIVE_MUTEX_INITIALIZER_NP
depends on BR2_USE_WCHAR
help
Exiv2 is a C++ library and a command line utility to manage
image metadata. It provides fast and easy read and write
access to the Exif, IPTC and XMP metadata of images in
various formats.
http://www.exiv2.org/
if BR2_PACKAGE_EXIV2
config BR2_PACKAGE_EXIV2_BROTLI
bool "Brotli support"
select BR2_PACKAGE_BROTLI
help
Build with Brotli support for JPEG XL
config BR2_PACKAGE_EXIV2_INIH
bool "Inih support"
select BR2_PACKAGE_INIH
help
Build with inih support
config BR2_PACKAGE_EXIV2_PNG
bool "PNG image support"
select BR2_PACKAGE_ZLIB
help
Build with PNG image support
config BR2_PACKAGE_EXIV2_XMP
bool "XMP support"
select BR2_PACKAGE_EXPAT
help
Build with XMP support
config BR2_PACKAGE_EXIV2_LENSDATA
bool "Nikon lens name database"
help
Integrate Nikon lens name database.
This database comes from a thirdparty and is free to use in
non-commercial, GPL or open source software only.
For more information see src/nikonmn_int.cpp.
endif