Merge pull request #5 from kevinbackhouse/v0.28.2

Exiv2 version 0.28.2
Exiv2 · Feb 13, 2024 · 8c66ee4 · 8c66ee4
2 parents e7575b2 + edd0af2
commit 8c66ee4
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 1 deletion.
diff --git a/.github/workflows/exiv2.org.yml b/.github/workflows/exiv2.org.yml
@@ -13,7 +13,7 @@ jobs:
   deploy:
     strategy:
       matrix:
-        EXIV2TAG: [v0.28.1]
+        EXIV2TAG: [v0.28.2]
     runs-on: ubuntu-22.04
     concurrency:
       group: ${{ github.workflow }}-${{ github.ref }}

diff --git a/website/master/news.xml b/website/master/news.xml
@@ -1,6 +1,20 @@
 <?xml version = '1.0'?>
 <news>
 
+ <newsitem>
+  <date>2024-02-13</date>
+  <title>Exiv2 v0.28.2</title>
+  <abstract>Exiv2 v0.28.2</abstract>
+  <desc>
+   <ol>
+    <li>Minor bugs and fixes</li>
+    <li>Fix for CVE-2024-24826: out-of-bounds read in QuickTimeVideo::NikonTagsDecoder.</li>
+    <li>Fix for CVE-2024-25112: denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder.</li>
+   </ol>
+   <p>More details: <a href="https://github.com/Exiv2/exiv2/issues/2914" _target="_blank">Change List</a></p>
+  </desc>
+ </newsitem>
+
  <newsitem>
   <date>2023-11-06</date>
   <title>Exiv2 v0.28.1</title>