Hello community, here is the log from the commit of package librsvg for openSUSE:11.4 checked in at Tue Sep 20 12:09:56 CEST 2011. -------- --- old-versions/11.4/all/librsvg/librsvg.changes 2010-11-17 16:10:04.000000000 +0100 +++ /mounts/work_src_done/11.4/librsvg/librsvg.changes 2011-09-09 14:42:57.000000000 +0200 @@ -1,0 +2,6 @@ +Fri Sep 9 12:42:32 UTC 2011 - vuntz@opensuse.org + +- Add librsvg-CVE-2011-3146.patch: fix a crash (bnc#714980, + CVE-2011-3146). + +------------------------------------------------------------------- Package does not exist at destination yet. Using Fallback old-versions/11.4/all/librsvg Destination is old-versions/11.4/UPDATES/all/librsvg calling whatdependson for 11.4-i586 New: ---- librsvg-CVE-2011-3146.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ librsvg.spec ++++++ --- /var/tmp/diff_new_pack.UJQp7e/_old 2011-09-20 12:09:36.000000000 +0200 +++ /var/tmp/diff_new_pack.UJQp7e/_new 2011-09-20 12:09:36.000000000 +0200 @@ -1,7 +1,7 @@ # -# spec file for package librsvg (Version 2.32.1) +# spec file for package librsvg # -# Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -20,7 +20,7 @@ Name: librsvg Version: 2.32.1 -Release: 1 +Release: 3.<RELEASE4> License: GPLv2+ Summary: A Library for Rendering SVG Data Url: http://librsvg.sourceforge.net/ @@ -30,6 +30,8 @@ # PATCH-FIX-OPENSUSE librsvg-gdk-pixbuf-query-loaders-64.patch vuntz@opensuse.org -- Fix check for gdk-pixbuf-query-loaders on 64bit systems Patch0: librsvg-gdk-pixbuf-query-loaders-64.patch Patch1: env-paths.diff +# PATCH-FIX-UPSTREAM librsvg-CVE-2011-3146.patch bnc#714980 bgo#658014 CVE-2011-3146 vuntz@opensuse.org -- Crash on NULL dereference +Patch2: librsvg-CVE-2011-3146.patch BuildRequires: pkgconfig(cairo) BuildRequires: pkgconfig(fontconfig) BuildRequires: pkgconfig(freetype2) @@ -54,6 +56,7 @@ %package -n librsvg-2-2 License: GPLv2+ Summary: A Library for Rendering SVG Data +Group: System/Libraries # bug437293 %ifarch ppc64 Obsoletes: librsvg-64bit @@ -111,6 +114,8 @@ %if %{build_gtk3_support} %package -n gtk3-engine-svg + + License: LGPLv2.1+ Summary: SVG-based GTK+ 3 Theme Engine Group: System/Libraries @@ -138,6 +143,7 @@ touch aclocal.m4 %endif %patch1 +%patch2 -p1 %build %configure\ ++++++ librsvg-CVE-2011-3146.patch ++++++ ++++ 1086 lines (skipped) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org