Hello community, here is the log from the commit of package libredwg for openSUSE:Factory checked in at 2019-12-30 12:35:15 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libredwg (Old) and /work/SRC/openSUSE:Factory/.libredwg.new.6675 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "libredwg" Mon Dec 30 12:35:15 2019 rev:9 rq:759939 version:0.9.3 Changes: -------- --- /work/SRC/openSUSE:Factory/libredwg/libredwg.changes 2019-11-07 23:20:19.564780911 +0100 +++ /work/SRC/openSUSE:Factory/.libredwg.new.6675/libredwg.changes 2019-12-30 12:35:18.371819820 +0100 @@ -1,0 +2,17 @@ +Sun Dec 29 20:45:54 UTC 2019 - Jan Engelhardt <jengelh@inai.de> + +- Update to release 0.9.3 + * Added the -x,--extnames option to dwglayers for r13-r14 DWGs. + * Fixed some leaks: SORTENTSTABLE, PROXY_ENTITY.ownerhandle + for r13. + * Add DICTIONARY.itemhandles[] for r13 and r14. + * Fixed some dwglayers null pointer derefs, and flush its output + for each layer. + * Added several overflow checks from fuzzing + [CVE-2019-20010, boo#1159825], [CVE-2019-20011, boo#1159826], + [CVE-2019-20012, boo#1159827], [CVE-2019-20013, boo#1159828], + [CVE-2019-20014, boo#1159831], [CVE-2019-20015, boo#1159832] + * Disallow illegal SPLINE scenarios + [CVE-2019-20009, boo#1159824] + +------------------------------------------------------------------- Old: ---- libredwg-0.9.1.tar.xz libredwg-0.9.1.tar.xz.sig New: ---- libredwg-0.9.3.tar.gz libredwg-0.9.3.tar.gz.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libredwg.spec ++++++ --- /var/tmp/diff_new_pack.UCbGbA/_old 2019-12-30 12:35:19.111820217 +0100 +++ /var/tmp/diff_new_pack.UCbGbA/_new 2019-12-30 12:35:19.115820219 +0100 @@ -1,7 +1,7 @@ # # spec file for package libredwg # -# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2019 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,17 +17,19 @@ Name: libredwg -Version: 0.9.1 +Version: 0.9.3 Release: 0 Summary: A library to handle DWG files License: GPL-3.0-or-later Group: Development/Libraries/C and C++ URL: https://www.gnu.org/software/libredwg/ -Source: https://ftp.gnu.org/pub/gnu/%{name}/%{name}-%{version}.tar.xz -Source2: https://ftp.gnu.org/pub/gnu/%{name}/%{name}-%{version}.tar.xz.sig + +#Git-Clone: https://github.com/LibreDWG/libredwg/ +Source: https://ftp.gnu.org/pub/gnu/libredwg/%name-%version.tar.gz +Source2: https://ftp.gnu.org/pub/gnu/libredwg/%name-%version.tar.gz.sig Source3: http://savannah.gnu.org/people/viewgpg.php?user_id=101103#/%{name}.keyring Source4: %{name}-rpmlintrc -BuildRequires: pkgconfig +BuildRequires: pkg-config %description GNU LibreDWG is a C library to handle DWG files. It can replace the @@ -67,7 +69,7 @@ OpenDWG libraries. DWG is the native file format of AutoCAD. %prep -%setup -q +%autosetup -p1 %build # No management of SO version despite ABI breaking changes: @@ -99,7 +101,7 @@ %files devel %license COPYING -%doc AUTHORS ChangeLog NEWS README README-alpha TODO +%doc AUTHORS ChangeLog NEWS README TODO %{_includedir}/*.h %{_libdir}/libredwg.so %{_libdir}/pkgconfig/libredwg.pc