Bernd Kuhls
5e99e8a382
Changelog: https://exiv2.org/whatsnew.html https://github.com/Exiv2/exiv2/blob/v0.28.7/doc/ChangeLog Release notes of 0.28.0 with a long list of security-related fixes: https://github.com/Exiv2/exiv2/issues/2406#issuecomment-1529139799 0.28.1 fixed CVE-2023-44398: https://github.com/Exiv2/exiv2/issues/2813 0.28.2 fixed CVE-2024-24826 & CVE-2024-25112: https://github.com/Exiv2/exiv2/issues/2914 0.28.3 fixed CVE-2024-39695: https://github.com/Exiv2/exiv2/issues/3008 0.28.5 fixed CVE-2025-26623: https://github.com/Exiv2/exiv2/issues/3181 0.28.6 fixed * [CVE-2025-54080](https://github.com/Exiv2/exiv2/security/advisories/GHSA-496f-x7cq-cq39) * [CVE-2025-55304](https://github.com/Exiv2/exiv2/security/advisories/GHSA-m54q-mm9w-fp6g) Please read https://github.com/Exiv2/exiv2/issues/2406 for the discussion whether these CVEs are relevant and their status of backporting to the 0.27.x branch. Removed patch which is included in this release. Switch to github helper due to upstream not providing tarballs anymore. Added optional support for inih: https://github.com/Exiv2/exiv2/commit/43c9ec0f5095d92e2dd748c6c0b6f7ae4e6c73bf and brotli: https://github.com/Exiv2/exiv2/commit/557a5cebd52ced79d11080089d8e2874126fb038 both introduced in the 0.28.x branch. Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>