Bug#865999: exiv2: Please package exiv2 0.26

[Michael Stone]

exiv2 is now up to 0.27.2, and contains some major usability 
enhancements (e.g., the ability for the user to override lens detection) 
which have knock-on impacts to other packages (e.g., lensfun and all the 
programs which depend on that library). Getting an updated package into 
unstable would be very helpful in moving a lot of other photo processing 
software forward.

Bug#865999: [exiv2] Please package exiv2 0.26

[Richard B. Kreckel]

On Sun, 10 Mar 2019 00:26:43 +0100 "Richard B. Kreckel"
 wrote:
> Raphaël, what makes you sure that these CVEs are not present in earlier
> versions (e.g. in 0.25 currently in testing)?

Never mind. I see now that they're allo triaged by security.

  -richy.
-- 
Richard B. Kreckel

Bug#865999: [exiv2] Please package exiv2 0.26

[Richard B. Kreckel]

On Tue, 26 Sep 2017 17:56:57 +0200 Raphael Hertzog 
wrote:
> Except that version 0.26 is vulnerable to multiple security issues which
> are currently not present in earlier versions [...]
Raphaël, what makes you sure that these CVEs are not present in earlier
versions (e.g. in 0.25 currently in testing)?

They were reported against 0.26 because that version was fuzzed, that's
all, AFICT.

  -richy.
-- 
Richard B. Kreckel

Bug#865999: [exiv2] Please package exiv2 0.26

[Simon Frei]

0.26 is in experimental for quite a while. As far as I can see the
problem is that it needs a transition but that is not happening. I don't
know how that works, but from what I read the next steps would be
opening a transition bug and starting binNMUs against the rdeps. I think
the two versions are ABI compatible, so there shouldn't be any problems.



signature.asc
Description: OpenPGP digital signature

Bug#865999: [exiv2] Please package exiv2 0.26

[Fulano Diego Perez]

Package: exiv2
Version: 0.25-3.1

also adds support for webp images which is currently missing ...

Bug#865999: exiv2: Please package exiv2 0.26

[Simon Frei]

Package: exiv2
Version: 0.25-3.1
Severity: wishlist

There have been many bugs fixed and features added since the last release two 
years ago. There has been progress on topic related to open bugs, so these 
might be fixed. Also digiKam now depends on exiv2 0.26 due to many stability 
improvements - thanks in advance for all your efforts.

-- System Information:
Debian Release: 9.0
  APT prefers testing-debug
  APT policy: (500, 'testing-debug'), (500, 'testing'), (100, 'unstable'), (1, 
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_GB:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages exiv2 depends on:
ii  libc62.24-11
ii  libexiv2-14  0.25-3.1
ii  libgcc1  1:6.3.0-18
ii  libstdc++6   6.3.0-18

exiv2 recommends no packages.

exiv2 suggests no packages.

-- no debconf information