Hello community, here is the log from the commit of package pspp for openSUSE:Factory checked in at 2017-08-29 11:47:34 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/pspp (Old) and /work/SRC/openSUSE:Factory/.pspp.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "pspp" Tue Aug 29 11:47:34 2017 rev:6 rq:519283 version:1.0.1 Changes: -------- --- /work/SRC/openSUSE:Factory/pspp/pspp.changes 2017-08-10 14:12:50.362234030 +0200 +++ /work/SRC/openSUSE:Factory/.pspp.new/pspp.changes 2017-08-29 11:48:17.500708686 +0200 @@ -1,0 +2,40 @@ +Tue Aug 29 07:46:42 UTC 2017 - opensuse.lietuviu.kalba@gmail.com + +- Update to 1.0.1 version: + * Bug fixes, including fixes for CVE-2017-12958 (bnc#1054585), + CVE-2017-12959 (bnc#1054588), CVE-2017-12960 (bnc#1054587), and + CVE-2017-12961 (bnc#1054586). + * Translation updates. + +------------------------------------------------------------------- +Sun Aug 13 04:24:52 UTC 2017 - opensuse.lietuviu.kalba@gmail.com + +- Update to 0.11.0 version: + * The REGRESSION command now has a /ORIGIN subcommand to perform + regression through the origin. + * The FACTOR command can now analyse matrix files prepared with MATRIX DATA. + * The FACTOR command can now print the anti-image matrices. + * The MATRIX DATA command has been added. + * Some inappropriate properties in selection dialogs have been corrected. + * A bug which could cause the HTML driver to go into a tight loop + has been fixed. + * An error in the FREQUENCIES procedure, where the word "Mean" was + printed when "Variance" was appropriate has been fixed. + * The ncurses library is no longer required or used. + * A bug where the Mann-Whitney test would give misleading results + if run on multiple variables and MISSING=ANALAYSIS was specified + has been fixed. + * Gtk+3.14.5 or later must now be used when building. + * Graphical user interface changes: + * There is a new menu: Edit|Options + * The Non Parametric Statistics Menu has a new item: "K Independent Samples". + * Dialog boxes can now be canceled using the <Escape> key. + * The AUTORECODE command now accepts an optional / before INTO. + * The short form of the VECTOR command can now create string variables. + * Bug fixes, including fixes for CVE-2017-10791 and CVE-2017-10792. +- Drop pspp-0001-sys-file-reader-Avoid-null-dereference-skipping-bad-.patch: + Fix for CVE-2017-10792 included in PSPP 0.11.0 version upstream. +- Drop pspp-0002-sys-file-reader-Fix-integer-overflows-in-parse_long_.patch: + Fix for CVE-2017-10791 included in PSPP 0.11.0 version upstream. + +------------------------------------------------------------------- Old: ---- pspp-0.10.2.tar.gz pspp-0001-sys-file-reader-Avoid-null-dereference-skipping-bad-.patch pspp-0002-sys-file-reader-Fix-integer-overflows-in-parse_long_.patch New: ---- pspp-1.0.1.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ pspp.spec ++++++ --- /var/tmp/diff_new_pack.EGPSp6/_old 2017-08-29 11:48:18.636548593 +0200 +++ /var/tmp/diff_new_pack.EGPSp6/_new 2017-08-29 11:48:18.636548593 +0200 @@ -1,4 +1,4 @@ -# spec file for PSPP 0.10.2 +# spec file for PSPP 1.0.1 # Copyright (c) 2008 Matj Cepl <mcepl@redhat.com> # Copyright (c) 2008 D. Steuer <steuer@hsuhh.de> @@ -14,11 +14,7 @@ # published by the Open Source Initiative. # Usable with currently supported openSUSE releases -# 13.2, 42.1, 42.2, 42.3 - -# Variable gitversion is part of build name, for example, gitversion of 0.7.6-g08d746 is g08d746 -# it help to build from git -# %define gitversion gd7ab35 +# 42.1, 42.2, 42.3, TW %if 0%{?mandriva_version} %define _disable_ld_no_undefined 1 @@ -27,19 +23,14 @@ %endif Name: pspp -Version: 0.10.2 +Version: 1.0.1 Release: 0 Summary: A program for statistical analysis of sampled data Group: Productivity/Scientific/Math License: GPL-3.0+ URL: http://www.gnu.org/software/pspp/ -Source0: ftp://ftp.gnu.org/pub/gnu/pspp/pspp-0.10.2.tar.gz -#ftp://ftp.gnu.org/pub/gnu/pspp/pspp-{version}.tar.gz -# PATCH-FIX-UPSTREAM pspp-0001-sys-file-reader-Avoid-null-dereference-skipping-bad-.patch bnc#1046997 CVE-2017-10792 -Patch1: pspp-0001-sys-file-reader-Avoid-null-dereference-skipping-bad-.patch -# PATCH-FIX-UPSTREAM pspp-0002-sys-file-reader-Fix-integer-overflows-in-parse_long_.patch bnc#1046998 CVE-2017-10791 -Patch2: pspp-0002-sys-file-reader-Fix-integer-overflows-in-parse_long_.patch +Source0: ftp://ftp.gnu.org/pub/gnu/pspp/pspp-%{version}.tar.gz BuildRoot: %{_tmppath}/pspp-root %if 0%{?centos_version} @@ -68,7 +59,7 @@ PreReq: %install_info_prereq %endif %if 0%{?suse_version} -BuildRequires: gtksourceview-devel >= 3.4.2 +BuildRequires: gtksourceview-devel >= 3.14.5 %endif %if 0%{?suse_version} #Next package only for "make check" @@ -80,7 +71,7 @@ BuildRequires: desktop-file-utils BuildRequires: gettext BuildRequires: gsl-devel >= 1.12 -BuildRequires: gtk3-devel >= 3.4.2 +BuildRequires: gtk3-devel >= 3.14.5 BuildRequires: libglade2-devel BuildRequires: libxml2-devel BuildRequires: m4 @@ -130,8 +121,6 @@ %else %setup -n pspp-%{version} %endif -%patch1 -p1 -%patch2 -p1 %if 0%{?fedora} || 0%{?rhel_version} || 0%{?centos_version} || 0%{?mandriva_version} %build ++++++ pspp-0.10.2.tar.gz -> pspp-1.0.1.tar.gz ++++++ /work/SRC/openSUSE:Factory/pspp/pspp-0.10.2.tar.gz /work/SRC/openSUSE:Factory/.pspp.new/pspp-1.0.1.tar.gz differ: char 5, line 1