Hello community, here is the log from the commit of package libdevil for openSUSE:Factory checked in at 2013-10-02 20:23:26 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libdevil (Old) and /work/SRC/openSUSE:Factory/.libdevil.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "libdevil" Changes: -------- New Changes file: --- /dev/null 2013-09-21 22:50:09.852032506 +0200 +++ /work/SRC/openSUSE:Factory/.libdevil.new/libdevil.changes 2013-10-02 20:23:27.000000000 +0200 @@ -0,0 +1,83 @@ +------------------------------------------------------------------- +Sat Sep 7 13:48:01 UTC 2013 - tchvatal@suse.com + +- Kill the mandriva code as they are not using it anyway. +- Add missing deps to build all features possible +- Move the ilur binary to separate tools package as it is GPL-3.0+ + licensed. + +------------------------------------------------------------------- +Mon Aug 26 08:47:05 UTC 2013 - tchvatal@suse.com + +- Fix wrong require on -devel package. + +------------------------------------------------------------------- +Fri Aug 23 14:13:23 CEST 2013 - mhrusecky@suse.cz + +- Renamed spec and main package to be consistent + +------------------------------------------------------------------- +Sun Feb 19 10:04:45 UTC 2012 - jengelh@medozas.de + +- Remove redundant tags/sections from specfile + +------------------------------------------------------------------- +Tue Aug 30 18:02:19 UTC 2011 - reddwarf@opensuse.org + +- Remove false Requires from the devel package +- Add the full URL to the Source tag +- Use the original tarball without recompression + +------------------------------------------------------------------- +Thu Jul 22 09:49:23 UTC 2010 - bitshuffler@opensuse.org + +- Use %_smp_mflags +- Clean up .spec +- Make .spec compatible with Mandriva + +------------------------------------------------------------------- +Tue Jun 29 17:35:55 UTC 2010 - cmorve69@yahoo.es + +- Remove static libs +- Fix compilation with libpng 1.4 +- Fix CVE-2009-3994 + +------------------------------------------------------------------- +Wed Apr 8 00:00:00 CEST 2009 - dominique-obs@leuenberger.net + +- Actually do not mistype --enable-ILUT and also add --enable-ILU (which is + not, as mentioned in the help, implied with --enable-ILUT). +- Added patch DevIL-%{version}-return-random-data.patch +------------------------------------------------------------------- +Tue Apr 7 00:00:00 CEST 2009 - dominique-obs@leuenberger.net + +- --enable-iLUT (bnc#492294#c3) +- Exclude the *.la files. +------------------------------------------------------------------- +Mon Apr 6 00:00:00 CEST 2009 - dominique-obs@leuenberger.net + +- Upgrade to version 1.7.8 (bnc#492294) + For the entire NEWS, see (to long to be copied here, 5 versions) + http://openil.svn.sourceforge.net/viewvc/openil/trunk/DevIL/NEWS?revision=15... +- Package renames: libdevil1 => libIL1 (SHLib policy) +- Package renames: libdevil-devel => DevIL-devel +------------------------------------------------------------------- +Mon Dec 1 00:00:00 CET 2008 - dominique-obs@leuenberger.net + +- inlcude the entire %{includeir}/IL directory, not only it's content to claim + directory ownership. +------------------------------------------------------------------- +Fri Nov 28 00:00:00 CET 2008 - dominique-obs@leuenberger.net + +- Drop the self-generated libtool and link the one from /usr/bin + (this fixes builds on openSUSE Factory) +------------------------------------------------------------------- +Tue Sep 30 00:00:00 CEST 2008 - dominique-obs@leuenberger.net + +- Upgraded to version 1.7.2 + +------------------------------------------------------------------- +Tue Jul 15 00:00:00 CEST 2008 - dominique-obs@leuenberger.net + +- Added post and postun sections and other rpmlint fixes (bnc#408847) + New: ---- DevIL-1.7.8-CVE-2009-3994.patch DevIL-1.7.8-libpng14.patch DevIL-1.7.8-return-random-data.patch DevIL-1.7.8.tar.gz libdevil.changes libdevil.spec ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libdevil.spec ++++++ # # spec file for package libdevil # # Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed # upon. The license for this file, and modifications and additions to the # file, is the same license as for the pristine package itself (unless the # license for the pristine package is not an Open Source License, in which # case the license is the MIT License). An "Open Source License" is a # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. # Please submit bugfixes or comments via http://bugs.opensuse.org/ # # SONAME Version tags (*.so.$NUM) %define libIL 1 Summary: A full featured cross platform image library License: LGPL-2.1 Group: System/Libraries Name: libdevil Version: 1.7.8 Release: 1.1 BuildRoot: %{_tmppath}/%{name}-%{version}-build Url: http://openil.sourceforge.net/ Source: http://sourceforge.net/projects/openil/files/DevIL/1.7.8/DevIL-%{version}.tar.gz Patch0: DevIL-%{version}-return-random-data.patch # From Gentoo Patch1: DevIL-%{version}-CVE-2009-3994.patch # From Gentoo Patch2: DevIL-%{version}-libpng14.patch BuildRequires: Mesa-devel BuildRequires: OpenEXR-devel BuildRequires: SDL-devel BuildRequires: freeglut-devel BuildRequires: gcc-c++ BuildRequires: giflib-devel BuildRequires: libjasper-devel BuildRequires: libjpeg-devel BuildRequires: liblcms-devel BuildRequires: libmng-devel BuildRequires: libpng-devel BuildRequires: libtiff-devel BuildRequires: zlib-devel BuildRequires: pkgconfig(x11) BuildRequires: pkgconfig(xext) BuildRequires: pkgconfig(xpm) BuildRequires: pkgconfig(xrender) %description Developer's Image Library (DevIL) is a programmer's library to develop applications with very powerful image loading capabilities, yet is easy for a developer to learn and use. Ultimate control of images is left to the developer, so unnecessary conversions, etc. are not performed. DevIL utilizes a simple, yet powerful, syntax. DevIL can load, save, convert, manipulate, filter and display a wide variety of image formats. Currently, DevIL can load .bmp, .cut, .dds, .doom, .gif, .ico, .jpg, .lbm, .mdl, .mng, .pal, .pbm, .pcd, .pcx, .pgm, .pic, .png, .ppm, .psd, .psp, .raw, .sgi, .tga and .tif .hdr files. Formats supported for saving include .bmp, .dds, .h, .jpg, .pal, .pbm, .pcx, .hdr, .pgm,.png, .ppm, .raw, .sgi, .tga and .tif. DevIL currently supports the following APIs for display: OpenGL, Windows GDI, SDL, DirectX and Allegro. Compilers that can compile DevIL or use it include Djgpp, MSVC++, Linux gcc, Delphi, Visual Basic, Power Basic and Dev-C++. %package tools Summary: Tools that can be used when using DevIL libraries License: LGPL-2.1 and GPL-3.0+ Group: System/Libraries Requires: libIL%{libIL} = %{version} %description tools Tools that can be used to work with DevIL libraries and convert various formats. %package -n libIL%{libIL} Provides: libdevil1 = %{version} Obsoletes: libdevil1 < %{version} Summary: A full featured cross platform image library License: LGPL-2.1 Group: System/Libraries %if 0%{?suse_version} PreReq: %install_info_prereq %endif %description -n libIL%{libIL} Developer's Image Library (DevIL) is a programmer's library to develop applications with very powerful image loading capabilities, yet is easy for a developer to learn and use. Ultimate control of images is left to the developer, so unnecessary conversions, etc. are not performed. DevIL utilizes a simple, yet powerful, syntax. DevIL can load, save, convert, manipulate, filter and display a wide variety of image formats. Currently, DevIL can load .bmp, .cut, .dds, .doom, .gif, .ico, .jpg, .lbm, .mdl, .mng, .pal, .pbm, .pcd, .pcx, .pgm, .pic, .png, .ppm, .psd, .psp, .raw, .sgi, .tga and .tif .hdr files. Formats supported for saving include .bmp, .dds, .h, .jpg, .pal, .pbm, .pcx, .hdr, .pgm,.png, .ppm, .raw, .sgi, .tga and .tif. DevIL currently supports the following APIs for display: OpenGL, Windows GDI, SDL, DirectX and Allegro. Compilers that can compile DevIL or use it include Djgpp, MSVC++, Linux gcc, Delphi, Visual Basic, Power Basic and Dev-C++. %package -n DevIL-devel Summary: Development package License: LGPL-2.1 Group: Development/Libraries/C and C++ Requires: libIL%{libIL} = %{version} Provides: libdevil-devel = %{version} Obsoletes: libdevil-devel < %{version} %description -n DevIL-devel Developer's Image Library (DevIL) is a programmer's library to develop applications with very powerful image loading capabilities, yet is easy for a developer to learn and use. Ultimate control of images is left to the developer, so unnecessary conversions, etc. are not performed. DevIL utilizes a simple, yet powerful, syntax. DevIL can load, save, convert, manipulate, filter and display a wide variety of image formats. Currently, DevIL can load .bmp, .cut, .dds, .doom, .gif, .ico, .jpg, .lbm, .mdl, .mng, .pal, .pbm, .pcd, .pcx, .pgm, .pic, .png, .ppm, .psd, .psp, .raw, .sgi, .tga and .tif .hdr files. Formats supported for saving include .bmp, .dds, .h, .jpg, .pal, .pbm, .pcx, .hdr, .pgm,.png, .ppm, .raw, .sgi, .tga and .tif. DevIL currently supports the following APIs for display: OpenGL, Windows GDI, SDL, DirectX and Allegro. Compilers that can compile DevIL or use it include Djgpp, MSVC++, Linux gcc, Delphi, Visual Basic, Power Basic and Dev-C++. This package contains the development libraries and headers. %prep %setup -q -n devil-%{version} %patch0 %patch1 %patch2 -p1 # FIXME: src-IL/src/il_wdp.c unclear license: https://jxrlib.codeplex.com can stand as replacement %build %configure \ --disable-static \ --enable-shared \ --enable-ILUT \ --enable-ILU \ --disable-sse3 make %{?_smp_mflags} %install make install DESTDIR=%{buildroot} rm -f %{buildroot}%{_libdir}/*.la %post -n libIL%{libIL} /sbin/ldconfig %install_info --info-dir=%{_infodir} %{_infodir}/DevIL_manual.info.gz %postun -n libIL%{libIL} /sbin/ldconfig %install_info_delete --info-dir=%{_infodir} %{_infodir}/DevIL_manual.info.gz %files -n libIL%{libIL} %defattr(-,root,root) %{_libdir}/lib*.so.* %doc AUTHORS COPYING CREDITS NEWS README README.unix TODO %{_infodir}/DevIL_manual.info.* %files -n DevIL-devel %defattr(-,root,root) %{_libdir}/lib*.so %{_includedir}/IL %{_libdir}/pkgconfig/IL*.pc %files tools %defattr(-,root,root) %{_bindir}/ilur %changelog ++++++ DevIL-1.7.8-CVE-2009-3994.patch ++++++ http://bugs.gentoo.org/297760 --- src-IL/src/il_dicom.c +++ src-IL/src/il_dicom.c @@ -427,9 +427,11 @@ ILboolean GetUID(ILubyte *UID) return IL_FALSE; ValLen = GetLittleUShort(); + if (ValLen > 64) + return IL_FALSE; if (iread(UID, ValLen, 1) != 1) return IL_FALSE; - UID[64] = 0; // Just to make sure that our string is terminated. + UID[ValLen] = 0; // Just to make sure that our string is terminated. return IL_TRUE; } ++++++ DevIL-1.7.8-libpng14.patch ++++++ diff -Nur devil-1.7.8.orig/src-IL/src/il_icon.c devil-1.7.8/src-IL/src/il_icon.c --- devil-1.7.8.orig/src-IL/src/il_icon.c 2009-03-08 09:10:09.000000000 +0200 +++ devil-1.7.8/src-IL/src/il_icon.c 2010-01-17 00:54:09.000000000 +0200 @@ -525,7 +525,7 @@ // Expand low-bit-depth grayscale images to 8 bits if (ico_color_type == PNG_COLOR_TYPE_GRAY && bit_depth < 8) { - png_set_gray_1_2_4_to_8(ico_png_ptr); + png_set_expand_gray_1_2_4_to_8(ico_png_ptr); } // Expand RGB images with transparency to full alpha channels diff -Nur devil-1.7.8.orig/src-IL/src/il_png.c devil-1.7.8/src-IL/src/il_png.c --- devil-1.7.8.orig/src-IL/src/il_png.c 2009-03-08 09:10:09.000000000 +0200 +++ devil-1.7.8/src-IL/src/il_png.c 2010-01-17 00:55:26.000000000 +0200 @@ -105,7 +105,7 @@ Read = iread(Signature, 1, 8); iseek(-Read, IL_SEEK_CUR); - return png_check_sig(Signature, 8); + return png_sig_cmp(Signature, 0, 8) == 0; } @@ -278,7 +278,7 @@ // Expand low-bit-depth grayscale images to 8 bits if (png_color_type == PNG_COLOR_TYPE_GRAY && bit_depth < 8) { - png_set_gray_1_2_4_to_8(png_ptr); + png_set_expand_gray_1_2_4_to_8(png_ptr); } // Expand RGB images with transparency to full alpha channels ++++++ DevIL-1.7.8-return-random-data.patch ++++++ diff -Naur src-ILU/ilur/ilur.c src-ILU/ilur/ilur.c --- src-ILU/ilur/ilur.c 2009-04-03 06:15:19.000000000 +0200 +++ src-ILU/ilur/ilur.c 2009-04-08 09:32:18.000000000 +0200 @@ -195,6 +195,8 @@ /* Here we copy the stuff to the output parameter */ nonwhitespaced[i - num_whitespaced] = string[i]; } + + return 0; } /** How to fill our Params structure? @@ -273,6 +275,8 @@ /* clean the mess... */ free(fun_to_call); fun_to_call = 0; + + return 0; } void print_help() -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org