Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency com.drewnoakes:metadata-extractor to v2.13.0 - autoclosed #12

Conversation

dev-mend-for-github.aaakk.us.kg[bot]
Copy link

@dev-mend-for-github.aaakk.us.kg dev-mend-for-github.aaakk.us.kg bot commented Dec 10, 2023

This PR contains the following updates:

Package Type Update Change
com.drewnoakes:metadata-extractor (source) compile minor 2.8.0 -> 2.13.0

By merging this PR, the issue #67 will be automatically resolved and closed:

Severity CVSS Score CVE Reachability
High High 8.7 CVE-2019-14262

Release Notes

drewnoakes/metadata-extractor (com.drewnoakes:metadata-extractor)

v2.13.0

Compare Source

  • Fix java.lang.NoClassDefFoundError: java.awt.Point on Android (#​409)
  • Set epoch to UTC in MP4 (#​410)
  • Fix potential stack overflow in PanasonicRawWbInfo2 (#​420)
  • Change detectFileType to take FilterInputStream (#​425)
  • Fix build under Java 11 (#​432)
  • Support ISO-8859-1 encoding (#​436)
  • Make MP4/QuickTime handlers safe for parallel use (#​438)
  • Correctly close EPS file stream (400ce16)
  • Improve file type detection's use of streams (#​450)
  • Fix unit tests on Windows (#​452)
  • Improve MP3 detection (#​454)
  • Support MP4 UUID and MOV XMP boxes (#​451, #​455)

v2.12.0

Compare Source

  • Add HEIF support (#​314)
  • Support MP4 duration in seconds (#​321)
  • Support QuickTime duration in seconds (#​322)
  • Fix null return from PngDescriptor.getBackgroundColorDescription() (#​325)
  • Remove XMP array and struct parent properties (#​326)
  • Fix MOV/MP4 parsing issues (#​330)
  • Improve Quicktime Metadata Atom handling (#​331)
  • Exif GPS directory and descriptor updates (#​333)
  • Basic support for MP3 files (without ID3) (#​337)
  • Add several private ICC tags used by Apple (#​340)
  • Support extraction of ICC Profile and Photoshop settings embedded in IFD0 of TIFF file (#​341)
  • Show XMP tags in ImageMetadataReader main method (#​342)
  • Add Exif 2.31 tags (#​343)
  • Add getDateModified() methods to get composite values from multiple Exif tags (#​344)
  • Calculate rotation from track header box (tkhd) (#​349)
  • Fix getFlashDescription() when flash is off (#​356)
  • Fix NikonType2 getPowerUpTimeDescription (#​366)
  • Fix bug in getLong64() (#​365)
  • Ignore invalid GIF XMP blocks (#​367)
  • Support AVI/MOV date times (5c5756f)
  • Remove duplicate tags (91d800e)
  • Use "km/h" over "kph" in descriptions (6f9fb56)
  • Add ExifDirectoryBase.TAG_PHOTOSHOP_SETTINGS name (6df33da)
  • Set parent dir for ICC/Photoshop dirs in Exif (cfd2a10)
  • Fix some null pointer exceptions in MP4 code (#​369)
  • Fix for "Auto" noise reduction setting on Olympus cameras (#​339)
  • Update xmpcore to 6.0.6 (#​382)
  • Fix slow XMP parsing by limiting photoshop:DocumentAncestors node size (#​394)
  • Fix frame rate calculation using handler duration (#​387)

v2.11.0

Compare Source

  • Add support for AVI files
  • Add support for MP4 files
  • Add support for QuickTime files
  • Add support for EPS files
  • Add support for WAV files
  • Add support for encrypted Nikon makernote tags
  • Add support for IPTC Extended DataSet Tags
  • Add support for PhotoShop paths
  • Extend BMP format support
  • Extend GIF format support
  • Extend detected file types
  • Extend FileType enum to include friendly name, MIME type and expected file extensions
  • Rename FileMetadataReader to FileSystemMetadataReader
  • Various bug fixes

Thanks to all contributors, but especially to @​payton who is responsible for the vast majority of work in this release.

v2.10.1

Compare Source

v2.10.0

Compare Source

Exif
  • Remove storage of thumbnail data in directories
GIF
  • Significant extension of GIF support, including embedded comments, XMP and ICC (#​222)
IPTC
  • Fix parsing IPTC dates in Directory.getDate (#​212)
JPEG
PNG
  • Improve error recovery when invalid PNG chunk 4CC seen (#​206, #​207)
TIFF
  • Support multi-page TIFF (#​228)
XMP
  • Remove XMP tags (see 5b07a49)
  • Support extended XMP decoding in JPEG, where XMP data is too large for a single JPEG segment (#​184, #​204)
  • Update XMPCore dependency from version 5.1.2 to 5.1.3 (#​194, #​188)
Makernotes
  • Support Reconyx Hyper and UltraFire makernotes (#​227)
  • Considerably extend Olympus RAW support (#​210)
  • Only treat Canon makernote tags as embedded directories if they have the correct type (#​116)
  • Extend Sony, Leica, Samsung and Panasonic support (#​214)
  • Add support for Apple makernotes
  • Extend Makernote support for Canon, including lens IDs
  • Fix capitalisation in OlympusEquipmentMakernoteDescriptor
  • Fix typo in CanonMakernoteDirectory.TAG_FOCUS_CONTINUOUS descriptor output
  • Don't require IFD0 to be present in order to process makernotes
Miscellaneous
  • Defer string charset decoding until after extraction, allowing clients to specify alternate encodings (#​135, #​165#, #​166, #​191, #​192)
  • Improved null value tracking and NRE prevention
  • Use Euclidean Algorithm to simplify Rational values (#​226)
  • Introduce Rational.isZero()
  • Make Rational implement Comparable<Rational>
  • Don't share thread-unsafe DecimalFormat instances (#​237)
  • Make JAR file executable via Main-Class (#​176)
  • Raise minimum Java version from 1.5 to 1.6 (#​218)
  • Fix Javadoc for JDK 1.8
  • Remove Ant build file

v2.9.1

Compare Source

Fixes:

Features:

  • Track some hierarchy between Directory instances via getParent().

v2.9.0

Compare Source

This release contains fixes across the entire project uncovered during the creation of the official .NET port of this project. This new implementation was originally ported from Java to C# by Yakov Danilov (for Imazen LLC). Since then it's been heavily refactored. Going forward, it will be kept functionally equivalent to the Java implementation.

Full diff: drewnoakes/metadata-extractor@2.8.1...2.9.0

New features

Fixes

Description formats

  • Standardisation of f-stop descriptions 45f1e10 0b5d3f9 f796031
  • Change formatting of focal length descriptions 120cd80
  • Use offset in date descriptions, not timezone name 8e4ffb2
  • ICC value formats e6ab7b4 40d60fb
  • Fix typo in 'fluorescent' in ExifDescriptorBase 21a5391
  • Remove trailing space in PhotoshopDescriptor output 674c609
  • Remove trailing full stop in ExifDescriptorBase output d7a0cf3
  • Number formatting in Olympus makernote descriptions fb1997e
  • Don't show lens f-stop range when upper and lower values are identical b74aca1
  • Update shutter speed value formatting e879944
  • Describe ExifDescriptorBase.TAG_LENS_SPECIFICATION be55336
  • Capitalise the name of XmpDirectory 4777af1

API changes

  • Deprecate ExifThumbnailDirectory.TAG_THUMBNAIL_COMPRESSION 825c439 12f023a 4e084ca
  • Remove unused class DefaultTagDescriptor feafc8f
  • Fix typos in some OlympusMakernoteDescriptor description methods 3162299
  • In GifHeaderDirectory replace TAG_TRANSPARENT_COLOR_INDEX with TAG_BACKGROUND_COLOR_INDEX f27dc5d 7ac3b9a #​142
  • In JfifDirectory replace getImageWidth/Height with getResX/Y e458489 #​143
  • Deprecate ExifDirectoryBase's TAG_LIGHT_SOURCE in favour of TAG_WHITE_BALANCE e298fde

Performance

  • Considerable improvement when reading large TIFF files (such as raw files) using ImageMetadataReader 0c7c577 #​164
  • Perform type check outside loop b3e2f9b
  • Use Collections.singletonList instead of Arrays.asList with single item 4cb5200
  • Slightly reduce allocations in PNG reader 455a83a
  • Simplify Tag.getTagTypeHex() 54cb1a8

Miscellaneous changes

  • Metadata stores and returns Directory instances in the order they were created bb9a290
  • FileTypeDetector throws if stream doesn't support mark/reset 6a6727c
  • unexpected PNG ICC compression method is registered as an error e2b6a39
  • Project now has an SVG logo which looks better on high DPI displays b4572a3
  • Bump junit version 8debfd8
  • Make Javadoc compilable under Java 8 1ef9bf9 #​137
  • Many documentation and internal fixes

v2.8.1

Compare Source

  • When a parsing date with no timezone specified, don't use default (assume UTC/GMT) (#​97)
  • Formatting of f/stop descriptions changed to f/2.8 instead of F2.8(#​97)
  • Extend Exif exposure program decoding (#​97)
  • Add Canon LensType tag (#​97)
  • Handle XMP data with different (erroneous yet common) preamble in JPEG files (#​102)

  • If you want to rebase/retry this PR, check this box

@dev-mend-for-github.aaakk.us.kg dev-mend-for-github.aaakk.us.kg bot added the security fix Security fix generated by Mend label Dec 10, 2023
@dev-mend-for-github.aaakk.us.kg dev-mend-for-github.aaakk.us.kg bot changed the title Update dependency com.drewnoakes:metadata-extractor to v2.13.0 Update dependency com.drewnoakes:metadata-extractor to v2.13.0 - autoclosed Sep 10, 2024
@dev-mend-for-github.aaakk.us.kg dev-mend-for-github.aaakk.us.kg bot deleted the whitesource-remediate/com.drewnoakes-metadata-extractor-2.x branch September 10, 2024 15:34
@dev-mend-for-github.aaakk.us.kg dev-mend-for-github.aaakk.us.kg bot changed the title Update dependency com.drewnoakes:metadata-extractor to v2.13.0 - autoclosed Update dependency com.drewnoakes:metadata-extractor to v2.13.0 Sep 11, 2024
@dev-mend-for-github.aaakk.us.kg dev-mend-for-github.aaakk.us.kg bot restored the whitesource-remediate/com.drewnoakes-metadata-extractor-2.x branch September 11, 2024 07:11
@dev-mend-for-github.aaakk.us.kg dev-mend-for-github.aaakk.us.kg bot force-pushed the whitesource-remediate/com.drewnoakes-metadata-extractor-2.x branch from 4fdb217 to a24a181 Compare September 11, 2024 07:13
@dev-mend-for-github.aaakk.us.kg dev-mend-for-github.aaakk.us.kg bot changed the title Update dependency com.drewnoakes:metadata-extractor to v2.13.0 Update dependency com.drewnoakes:metadata-extractor to v2.13.0 - autoclosed Jan 16, 2025
@dev-mend-for-github.aaakk.us.kg dev-mend-for-github.aaakk.us.kg bot deleted the whitesource-remediate/com.drewnoakes-metadata-extractor-2.x branch January 16, 2025 12:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by Mend
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants