[packages/exif] Add missing CVE-2021-27815 patch, refresh exif-ac.patch to 0.6.22

[arekm]

commit 0291c66cb43e3b1bd360c4acbe397e2a8f550bb3
Author: Arkadiusz Miśkiewicz <arekm at maven.pl>
Date:   Sun Aug 9 13:06:52 2026 +0200

    Add missing CVE-2021-27815 patch, refresh exif-ac.patch to 0.6.22

 exif-CVE-2021-27815.patch | 18 ++++++++++++++++++
 exif-ac.patch             |  8 ++++----
 2 files changed, 22 insertions(+), 4 deletions(-)
---
diff --git a/exif-CVE-2021-27815.patch b/exif-CVE-2021-27815.patch
new file mode 100644
index 0000000..98d1e71
--- /dev/null
+++ b/exif-CVE-2021-27815.patch
@@ -0,0 +1,18 @@
+# Fix CVE-2021-27815: NULL pointer write in escape_xml() when an EXIF tag value
+# is empty (or NULL) - the static output buffer is still unallocated, so the
+# trailing NUL terminator is stored at address 0. Reachable via "exif -x" on a
+# crafted JPEG.
+# https://github.com/libexif/exif/commit/f6334d9d32437ef13dc902f0a88a2be0063d9d1c
+# https://github.com/libexif/exif/commit/eb84b0e3c5f2a86013b6fcfb800d187896a648fa
+# https://github.com/libexif/exif/commit/2d1c0f3edb9eaabf63e0b9203af3000452bba254
+--- exif-0.6.22/exif/actions.c.orig	2020-05-20 07:31:32.000000000 +0200
++++ exif-0.6.22/exif/actions.c	2026-08-09 12:59:50.691972532 +0200
+@@ -661,6 +661,8 @@
+ 	char *out;
+ 	size_t len;
+ 
++	if (!text || !*text) return "";
++
+ 	for (out=escaped, len=0; *text; ++len, ++out, ++text) {
+ 		/* Make sure there's plenty of room for a quoted character */
+ 		if ((len + 8) > escaped_size) {
diff --git a/exif-ac.patch b/exif-ac.patch
index 742c150..53111a5 100644
--- a/exif-ac.patch
+++ b/exif-ac.patch
@@ -1,7 +1,7 @@
---- exif-0.6.15/configure.ac.orig	2007-05-23 15:17:43.000000000 +0200
-+++ exif-0.6.15/configure.ac	2007-05-26 20:15:20.188668054 +0200
-@@ -42,7 +42,6 @@
- ALL_LINGUAS="de es fr pl"
+--- exif-0.6.22/configure.ac.orig	2020-05-20 07:31:32.000000000 +0200
++++ exif-0.6.22/configure.ac	2026-08-09 13:01:27.266306081 +0200
+@@ -31,7 +31,6 @@
+ ALL_LINGUAS="ast cs da de eo es fi fr fur gl hr id is it ja ko lv ms nl pl pt pt_BR ro ru sk sr sv tr uk vi zh_CN"
  AM_GNU_GETTEXT_VERSION([0.14.1])
  AM_GNU_GETTEXT([external])
 -AM_PO_SUBDIRS()
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/exif.git/commitdiff/0291c66cb43e3b1bd360c4acbe397e2a8f550bb3