exiv2: upgrade version 0.27.5 -> 0.28.0 (#6226)

* libgexiv2: 0.12.1 -> 0.14.2

Signed-off-by: Muhammad Falak R Wani <falakreyaz@gmail.com>

SPECS-EXTENDED/exiv2/exiv2.signatures.json

@@ -1,5 +1,5 @@
 {
  "Signatures": {
-  "exiv2-0.27.5.tar.gz": "1da1721f84809e4d37b3f106adb18b70b1b0441c860746ce6812bb3df184ed6c"
+  "exiv2-0.28.0.tar.gz": "04c0675caf4338bb96cd09982f1246d588bcbfe8648c0f5a30b56c7c496f1a0b"
  }
 }

SPECS-EXTENDED/exiv2/exiv2.spec

@@ -1,7 +1,7 @@
 
 Summary:        Exif and Iptc metadata manipulation library
 Name:           exiv2
-Version:        0.27.5
+Version:        0.28.0
 Release:        1%{?dist}
 License:        GPLv2+
 Vendor:         Microsoft Corporation
@@ -18,6 +18,7 @@ BuildRequires:  graphviz
 BuildRequires:  libssh2-devel
 BuildRequires:  libxslt
 BuildRequires:  zlib-devel
+BuildRequires:  inih-devel
 Requires:       %{name}-libs%{?_isa} = %{version}-%{release}
 
 %description
@@ -99,7 +100,7 @@ test -x %{buildroot}%{_libdir}/libexiv2.so
 %ldconfig_scriptlets libs
 
 %files libs
-%{_libdir}/libexiv2.so.27*
+%{_libdir}/libexiv2.so.28*
 %{_libdir}/libexiv2.so.%{version}
 
 %files devel
@@ -107,14 +108,23 @@ test -x %{buildroot}%{_libdir}/libexiv2.so
 %{_libdir}/libexiv2.so
 %{_libdir}/pkgconfig/exiv2.pc
 %{_libdir}/cmake/exiv2/
-# todo: -static subpkg?  -- rex
-%{_libdir}/libexiv2-xmp.a
 
 %files doc
 %{_pkgdocdir}/
 
 
 %changelog
+* Mon Sep 18 2023 Muhammad Falak R Wani <mwani@microsoft.com> - 0.28.0-1
+- Upgrade version to address 24 CVE:
+  CVE-2019-13504, CVE-2019-17402, CVE-2019-20421, 
+  CVE-2021-3482, CVE-2021-29457, CVE-2021-29458, 
+  CVE-2021-29463, CVE-2021-29464, CVE-2021-29470,
+  CVE-2021-29473, CVE-2021-29623, CVE-2021-32617,
+  CVE-2021-32815, CVE-2021-34334, CVE-2021-34335,
+  CVE-2021-37615, CVE-2021-37616, CVE-2021-37617,
+  CVE-2021-37618, CVE-2021-37619, CVE-2021-37620,
+  CVE-2021-37621, CVE-2021-37622, CVE-2021-37623,
+
 * Thu Jun 09 2022 Jon Slobodzian <joslobo@microsoft.com> - 0.27.5-1
 - Fixing CVEs
 - License Verified.

SPECS-EXTENDED/libgexiv2/libgexiv2.signatures.json

@@ -1,5 +1,5 @@
 {
  "Signatures": {
-  "gexiv2-0.12.1.tar.xz": "8aeafd59653ea88f6b78cb03780ee9fd61a2f993070c5f0d0976bed93ac2bd77"
+  "libgexiv2-0.14.2.tar.xz": "2a0c9cf48fbe8b3435008866ffd40b8eddb0667d2212b42396fdf688e93ce0be"
  }
 }

SPECS-EXTENDED/libgexiv2/libgexiv2.spec

@@ -1,16 +1,16 @@
 Vendor:         Microsoft Corporation
 Distribution:   Mariner
 Name:           libgexiv2
-Version:        0.12.1
-Release:        3%{?dist}
+Version:        0.14.2
+Release:        1%{?dist}
 Summary:        Gexiv2 is a GObject-based wrapper around the Exiv2 library
 
 License:        GPLv2+
 URL:            https://wiki.gnome.org/Projects/gexiv2
-Source0:        https://download.gnome.org/sources/gexiv2/0.12/gexiv2-%{version}.tar.xz
+Source0:        https://download.gnome.org/sources/gexiv2/0.14/gexiv2-%{version}.tar.xz#/%{name}-%{version}.tar.xz
 
 BuildRequires:  %{_bindir}/xsltproc
-BuildRequires:  exiv2-devel
+BuildRequires:  exiv2-devel >= 0.28.0
 BuildRequires:  gcc-c++
 BuildRequires:  gobject-introspection-devel
 BuildRequires:  meson
@@ -44,7 +44,6 @@ This package contains the python3 bindings for %{name}
 %build
 %meson \
   -Dgtk_doc=false \
-  -Dpython3_girdir=%{python3_sitearch}/gi/overrides \
   %{nil}
 %meson_build
 
@@ -83,6 +82,9 @@ This package contains the python3 bindings for %{name}
 %{python3_sitearch}/gi/overrides/__pycache__/GExiv2*
 
 %changelog
+* Mon Sep 18 2023 Muhammad Falak R Wani <mwani@microsoft.com> - 0.14.2-1
+- Upgrade version to enable build with exiv2 >= 0.28.0
+
 * Mon Mar 21 2022 Pawel Winogrodzki <pawelwi@microsoft.com> - 0.12.1-3
 - Adding BR on '%%{_bindir}/xsltproc'.
 - Disabled gtk doc generation to remove network dependency during build-time.

cgmanifest.json

@@ -3458,8 +3458,8 @@
         "type": "other",
         "other": {
           "name": "exiv2",
-          "version": "0.27.5",
-          "downloadUrl": "https://github.com/Exiv2/exiv2/archive/refs/tags/v0.27.5.tar.gz"
+          "version": "0.28.0",
+          "downloadUrl": "https://github.com/Exiv2/exiv2/archive/refs/tags/v0.28.0.tar.gz"
         }
       }
     },
@@ -9461,8 +9461,8 @@
         "type": "other",
         "other": {
           "name": "libgexiv2",
-          "version": "0.12.1",
-          "downloadUrl": "https://download.gnome.org/sources/gexiv2/0.12/gexiv2-0.12.1.tar.xz"
+          "version": "0.14.2",
+          "downloadUrl": "https://download.gnome.org/sources/gexiv2/0.14/gexiv2-0.14.2.tar.xz"
         }
       }
     },