Files
buildroot/package/exiv2/exiv2.mk
Bernd Kuhls 1c3aa5f977 package/exiv2: security bump version to 0.28.8
https://exiv2.org/whatsnew.html
https://github.com/Exiv2/exiv2/blob/v0.28.8/doc/ChangeLog

This release fixes three low-severity vulnerabilities:

CVE-2026-25884: Out-of-bounds read in CrwMap::decode0x0805
CVE-2026-27596: Integer overflow in LoaderNative::getData() causes out-of-bounds read
CVE-2026-27631: Uncaught exception: cannot create std::vector larger than max_size()

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-04 22:27:20 +01:00

61 lines
1.4 KiB
Makefile

################################################################################
#
# exiv2
#
################################################################################
EXIV2_VERSION = 0.28.8
EXIV2_SITE = $(call github,Exiv2,exiv2,v$(EXIV2_VERSION))
EXIV2_INSTALL_STAGING = YES
EXIV2_LICENSE = GPL-2.0+
EXIV2_LICENSE_FILES = COPYING
EXIV2_CPE_ID_VENDOR = exiv2
EXIV2_CONF_OPTS += \
-DBUILD_WITH_STACK_PROTECTOR=OFF \
-DEXIV2_BUILD_SAMPLES=OFF
ifeq ($(BR2_PACKAGE_EXIV2_BROTLI),y)
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_BROTLI=ON
EXIV2_DEPENDENCIES += brotli
else
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_BROTLI=OFF
endif
ifeq ($(BR2_PACKAGE_EXIV2_INIH),y)
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_INIH=ON
EXIV2_DEPENDENCIES += inih
else
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_INIH=OFF
endif
ifeq ($(BR2_PACKAGE_EXIV2_LENSDATA),y)
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_LENSDATA=ON
else
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_LENSDATA=OFF
endif
ifeq ($(BR2_PACKAGE_EXIV2_PNG),y)
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_PNG=ON
EXIV2_DEPENDENCIES += zlib
else
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_PNG=OFF
endif
ifeq ($(BR2_PACKAGE_EXIV2_XMP),y)
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_XMP=ON
EXIV2_DEPENDENCIES += expat
else
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_XMP=OFF
endif
EXIV2_DEPENDENCIES += $(TARGET_NLS_DEPENDENCIES)
ifeq ($(BR2_SYSTEM_ENABLE_NLS),y)
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_NLS=ON
else
EXIV2_CONF_OPTS += -DEXIV2_ENABLE_NLS=OFF
endif
$(eval $(cmake-package))