diff --git a/NEWS b/NEWS index d472165a0..5a7e0869d 100644 --- a/NEWS +++ b/NEWS @@ -3,9 +3,50 @@ libgphoto2 2.5.33.1 development ptp2: * new Canon EOS SDRAM capture method added * new Nikon Z series property code list method added +* Sony generation 2 vs 3 handling enhanced +* Security issues fixed: + * CVE-2026-40333: information disclosure and denial of service via + unbounded reads in ptp unpack EOS events + * CVE-2026-40334: information disclosure and denial of service via + missing null terminator ptp_unpack_Canon_FE + * CVE-2026-40335: information disclosure via out-of-bounds read + in ptp_unpack_DPV + * CVE-2026-40336: memory leak in ptp_unpack_Sony_DPD() can lead to + denial of service + * CVE-2026-40338: information disclosure and denial of service + via out-of-bounds read in the PTP_DPFF_Enumeration case of + ptp_unpack_Sony_DPD() + * CVE-2026-40339: information disclosure via out-of-bounds read in + ptp_unpack_Sony_DPD() + * CVE-2026-40340: information disclosure and denial of service via + out-of-bounds read in ptp_unpack_OI() + * CVE-2026-40341: denial of service via out-of-bounds read from + untrusted USB devices in ptp_unpack_EOS_FocusInfoEx +* chdk: several bugfixes for liveview +* configs: + * nikon: flashready, infodisperrstatus added + * sony: exposureprogram mode3, focusdistancemeters, shutter lag timing, focus indication, shutter type, drange optimizer added, silent mode + * canon eos: remoterelease config values changed + * panasonic: bulb added +* leica: detect not yet listed leicas better in generic mode +* added ids: + * Sony: ILCE-1M2 + * Nikon: CoolPix P1100, S3500, Z50_2, + * Canon: EOS R1, R6 Mark III + * Fuji Finepix S4200, X-E5, + * Leica SL3 + +jd11: +* allow TIFF / DNG export +* needs libtiff library to work + +all: +* some bugfixes +* replaced various strcpy with strncpy translations: * updated gregorian, spanish +* added arabic ------------------------------------------------------------------------------ libgphoto2 2.5.33 release