Hello community,
here is the log from the commit of package libidn2 for openSUSE:Factory checked in at 2016-10-26 21:48:32
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/libidn2 (Old)
and /work/SRC/openSUSE:Factory/.libidn2.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libidn2"
Changes:
--------
New Changes file:
--- /dev/null 2016-09-15 12:42:18.240042505 +0200
+++ /work/SRC/openSUSE:Factory/.libidn2.new/libidn2.changes 2016-10-26 21:48:33.000000000 +0200
@@ -0,0 +1,399 @@
+-------------------------------------------------------------------
+Fri Oct 21 09:40:22 UTC 2016 - tchvatal@suse.com
+
+- Convert to libidn2 package started to being used, namely by curl
+- Alternative implementation based on new specification from 2008
+ + completely different codebase with no ties to libidn
+
+-------------------------------------------------------------------
+Wed Jul 20 21:01:13 UTC 2016 - astieger@suse.com
+
+- libidn 1.33:
+ * bnc#990189 CVE-2015-8948 CVE-2016-6262
+ * bnc#990190 CVE-2016-6261
+ * bnc#990191 CVE-2016-6263
+ * libidn: Fix out-of-bounds stack read in idna_to_ascii_4i.
+ * idn: Solve out-of-bounds-read when reading one zero byte as input.
+ * libidn: stringprep_utf8_nfkc_normalize reject invalid UTF-8.
+
+-------------------------------------------------------------------
+Thu Aug 13 19:10:23 UTC 2015 - mpluskal@suse.com
+
+- Update to 1.32
+ * libidn: Fix crash in idna_to_unicode_8z8z and
+ idna_to_unicode_8zlz. This problem was introduced in 1.31.
+ * API and ABI is backwards compatible with the previous version.
+- Update gpg keyring
+
+-------------------------------------------------------------------
+Thu Jul 9 08:22:18 UTC 2015 - tchvatal@suse.com
+
+- Add Apache-2.0 license to the license line. Under this is the
+ java code, but we don't build it -> just the sources license
+
+-------------------------------------------------------------------
+Thu Jul 9 07:54:25 UTC 2015 - tchvatal@suse.com
+
+- Version bump to 1.31:
+ * Fixes bnc#923241 CVE-2015-2059 out-of-bounds read with stringprep on
+ invalid UTF-8
+ * Few other triv changes
+
+-------------------------------------------------------------------
+Fri Mar 13 13:49:20 UTC 2015 - tchvatal@suse.com
+
+- Version bump to 1.30:
+ * punycode.{c,h} files were reimported
+- Cleanup with spec-cleaner
+
+-------------------------------------------------------------------
+Mon Oct 20 13:10:56 UTC 2014 - i@marguerite.su
+
+- update version 1.29:
+ * libidn: Mark internal variable "g_utf8_skip" as static.
+ * idn: Flush stdout to simplify for tools that buffer too heavily.
+ * i18n: Added Brazilian Portuguese translation.
+ * Update gnulib files.
+ * API and ABI is backwards compatible with the previous version.
+
+-------------------------------------------------------------------
+Thu Dec 19 12:22:05 UTC 2013 - coolo@suse.com
+
+- disable gpg-offline again to avoid build cycles
+
+-------------------------------------------------------------------
+Wed Dec 18 09:50:29 UTC 2013 - mvyskocil@suse.com
+
+- Verify source tarball via gpg-offline
+
+-------------------------------------------------------------------
+Sat Dec 14 16:57:39 UTC 2013 - uweigand@de.ibm.com
+
+- Fix gnulib test failure due to SUSE_ASNEEDED.
+
+-------------------------------------------------------------------
+Mon Sep 23 14:35:40 UTC 2013 - tchvatal@suse.com
+
+- Version bump to 1.28:
+ * java buildfixes
+ * translation updates
+ * improved unit-tests
+ * for more read NEWS file
+
+-------------------------------------------------------------------
+Fri Sep 21 16:21:41 UTC 2012 - jengelh@inai.de
+
+- Employ shared library package naming
+
+-------------------------------------------------------------------
+Tue Jun 5 08:41:26 UTC 2012 - vdziewiecki@suse.com
+
+-Update to 1.25:
+ * MSVC: Build fixes related to _GL_ATTRIBUTE_CONST and
+ _GL_ATTRIBUTE_PURE.
+ Reported by Bartosz Brachaczek .
+ * examples: Fix compiler warning about ignoring return value from
+ fgets.
+ * tests: Ship with a valgrind suppressions file for the strlen
+ issue.
+ * Update gnulib files and translations.
+ * API and ABI is backwards compatible with the previous version.
+
+-------------------------------------------------------------------
+Sun May 13 11:40:34 UTC 2012 - Nico.Laus.2001@gmx.de
+
+- Upgrade to version 1.24
+ * Libraries are re-licensed from LGPLv2+ to dual-GPLv2+|LGPLv3+.
+ * build: Fix parallel Windows builds.
+ Reported by René Berber
+ * libidn: Fix potential infloop in pr29 code.
+ Reported by Jon Nelson in
+ http://lists.gnu.org/archive/html/help-libidn/2012-01/msg00008.html
+ * libidn: Add 'const' keyword to 'stringprep_ucs4_nfkc_normalize' function.
+ * Sync glib NFKC code and improve copyright/license statements.
+ * Update gnulib files and translations.
+ * API and ABI is backwards compatible with the previous version.
+
+-------------------------------------------------------------------
+Mon Dec 26 16:02:38 UTC 2011 - jengelh@medozas.de
+
+- Remove redundant tags/sections
+
+-------------------------------------------------------------------
+Mon Dec 26 14:01:29 UTC 2011 - crrodriguez@opensuse.org
+
+- fix URL
+
+-------------------------------------------------------------------
+Mon Dec 26 05:47:14 UTC 2011 - crrodriguez@opensuse.org
+
+- Update to version 1.23
+- Run spec cleaner
+
+-------------------------------------------------------------------
+Sat Oct 1 01:39:54 UTC 2011 - crrodriguez@opensuse.org
+
+- Do not build gtk-docs
+- make check hangs in qemu-arm, workaround the bugs.
+
+-------------------------------------------------------------------
+Fri Jun 10 09:20:15 UTC 2011 - andrea.turrini@gmail.com
+
+- Fixed typo in description of libidn.spec
+
+-------------------------------------------------------------------
+Sat May 7 00:16:43 UTC 2011 - crrodriguez@opensuse.org
+
+- Upgrade to version 1.22
+ * Fix memory leak when idna_to_ascii_4i fails
+ * Fix ToUnicode case-insensitivity bug
+ * Avoid some warnings to make it build with modern gcc on amd64.
+
+-------------------------------------------------------------------
+Tue Dec 15 19:58:00 CET 2009 - jengelh@medozas.de
+
+- add baselibs.conf as a source
+
+-------------------------------------------------------------------
+Tue Oct 6 16:28:16 UTC 2009 - crrodriguez@opensuse.org
+
+- update to version 1.15
+ * support GCC visibility features
+
+-------------------------------------------------------------------
+Wed Jan 7 12:34:56 CET 2009 - olh@suse.de
+
+- obsolete old -XXbit packages (bnc#437293)
+
+-------------------------------------------------------------------
+Tue Oct 14 21:16:52 CEST 2008 - crrodriguez@suse.de
+
+- disable static libraries
+
+-------------------------------------------------------------------
+Tue Oct 7 10:17:16 CEST 2008 - stbinner@suse.de
+
+- update to 1.10:
+ * idn: accept -n as short form for --nfkc.
+ * Fix compiler warnings, updated gnulib files and translations
+
+-------------------------------------------------------------------
+Mon Jul 21 15:09:40 CEST 2008 - stbinner@suse.de
+
+- update to 1.9:
+ * idn: fix error message when NFKC fails, and other translations
+ * Remove more non-free text from doc/specifications/rfc3454.txt.
+
+-------------------------------------------------------------------
+Thu Apr 24 10:18:31 CEST 2008 - stbinner@suse.de
+
+- update to 1.8: no functional changes
+
+-------------------------------------------------------------------
+Mon Apr 14 08:28:55 CEST 2008 - stbinner@suse.de
+
+- update to 1.7:
+ * new parameter --nfkc to process string with Unicode v3.2 NFKC
+
++++ 202 more lines (skipped)
++++ between /dev/null
++++ and /work/SRC/openSUSE:Factory/.libidn2.new/libidn2.changes
New:
----
baselibs.conf
libidn2-0.10.tar.gz
libidn2-no-examples-build.patch
libidn2.changes
libidn2.spec
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ libidn2.spec ++++++
#
# spec file for package libidn
#
# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via http://bugs.opensuse.org/
#
%define lname libidn2-0
Name: libidn2
Version: 0.10
Release: 0
Summary: Support for Internationalized Domain Names (IDN) based on IDNA2008
License: GPL-3.0+
Group: Development/Libraries/C and C++
Url: https://www.gnu.org/software/libidn/#libidn2
Source0: http://alpha.gnu.org/gnu/libidn/%{name}-%{version}.tar.gz
Source3: baselibs.conf
# PATCH-FIX-UPSTREAM: do not build non-installed examples needlessly
Patch0: libidn2-no-examples-build.patch
BuildRequires: pkgconfig
Requires(post): %{install_info_prereq}
BuildRoot: %{_tmppath}/%{name}-%{version}-build
%description
An implementation of the IDNA2008 specifications (RFCs 5890, 5891, 5892, 5893)
%package tools
Summary: Command line utility to convert Int. Domain Names
Group: Productivity/Networking/DNS/Utilities
%description tools
An implementation of the IDNA2008 specifications (RFCs 5890, 5891, 5892, 5893)
%package -n %{lname}
Summary: Support for Internationalized Domain Names (IDN)
Group: System/Libraries
%description -n %{lname}
An implementation of the IDNA2008 specifications (RFCs 5890, 5891, 5892, 5893)
%package devel
Summary: Include Files and Libraries mandatory for Development
Group: Development/Libraries/C and C++
Requires: %{lname} = %{version}
%description devel
An implementation of the IDNA2008 specifications (RFCs 5890, 5891, 5892, 5893)
%prep
%setup -q
%patch0 -p1
%build
%configure \
--disable-rpath \
--disable-silent-rules \
--disable-static \
--disable-gtk-doc
make %{?_smp_mflags}
%install
make %{?_smp_mflags} DESTDIR=%{buildroot} install
find %{buildroot} -type f -name "*.la" -delete -print
# Do not bother with partial gtkdoc
rm -rf %{buildroot}/%{_datadir}/gtk-doc/
%check
make check %{?_smp_mflags}
%post tools
%install_info --info-dir=%{_infodir} %{_infodir}/libidn2.info.*
%preun tools
%install_info_delete --info-dir=%{_infodir} %{_infodir}/libidn2.info.*
%post -n %{lname} -p /sbin/ldconfig
%postun -n %{lname} -p /sbin/ldconfig
%files tools
%defattr(-,root,root)
%doc AUTHORS COPYING* ChangeLog NEWS README
%{_infodir}/libidn*
%{_bindir}/idn2
%{_mandir}/man1/idn2.1%{ext_man}
%files -n %{lname}
%defattr(-,root,root)
%{_libdir}/libidn2.so.*
%files devel
%defattr(-,root,root)
%{_libdir}/libidn2.so
%{_includedir}/*.h
%{_mandir}/man3/*
%changelog
++++++ baselibs.conf ++++++
libidn2-0
++++++ libidn2-no-examples-build.patch ++++++
Index: libidn2-0.10/Makefile.am
===================================================================
--- libidn2-0.10.orig/Makefile.am
+++ libidn2-0.10/Makefile.am
@@ -15,7 +15,7 @@
DISTCHECK_CONFIGURE_FLAGS = --enable-gtk-doc
-SUBDIRS = gl . src doc examples tests
+SUBDIRS = gl . src doc tests
ACLOCAL_AMFLAGS = -I m4 -I gl/m4
EXTRA_DIST = gl/m4/gnulib-cache.m4
Index: libidn2-0.10/Makefile.in
===================================================================
--- libidn2-0.10.orig/Makefile.in
+++ libidn2-0.10/Makefile.in
@@ -596,7 +596,7 @@ top_build_prefix = @top_build_prefix@
top_builddir = @top_builddir@
top_srcdir = @top_srcdir@
DISTCHECK_CONFIGURE_FLAGS = --enable-gtk-doc
-SUBDIRS = gl . src doc examples tests
+SUBDIRS = gl . src doc tests
ACLOCAL_AMFLAGS = -I m4 -I gl/m4
EXTRA_DIST = gl/m4/gnulib-cache.m4 gen-tables-from-rfc5892.pl \
gen-tables-from-iana.pl