Hello community, here is the log from the commit of package libvorbis for openSUSE:12.1:Update:Test checked in at 2012-02-21 21:42:33 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:12.1:Update:Test/libvorbis (Old) and /work/SRC/openSUSE:12.1:Update:Test/.libvorbis.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libvorbis", Maintainer is "[email protected]" Changes: -------- New Changes file: --- /dev/null 2010-08-26 16:28:41.000000000 +0200 +++ /work/SRC/openSUSE:12.1:Update:Test/.libvorbis.new/libvorbis.changes 2012-02-21 21:42:34.000000000 +0100 @@ -0,0 +1,398 @@ +------------------------------------------------------------------- +Mon Aug 29 19:00:55 UTC 2011 - [email protected] + +- Fix build with no-add-needed + +------------------------------------------------------------------- +Thu May 5 22:56:15 CEST 2011 - [email protected] + +- fix provides/obsoletes in baselibs + +------------------------------------------------------------------- +Thu Dec 9 22:14:53 UTC 2010 - [email protected] + +- Split libvorbisenc2 and libvorbisfile3 from libvorbis0 +- Removed services. + +------------------------------------------------------------------- +Wed Dec 8 15:52:05 UTC 2010 - [email protected] + +- fix the package split + +------------------------------------------------------------------- +Wed Dec 8 04:23:34 UTC 2010 - [email protected] + +- updated to version 1.3.2 + * vorbis: additional proofing against invalid/malicious + streams in floor, residue, and bos/eos packet trimming + code (see SVN for details). + * vorbis: Added programming documentation tree for the + low-level calls + * vorbisfile: Correct handling of serial numbers array + element [0] on non-seekable streams + * vorbisenc: Back out an [old] AoTuV HF weighting that was + first enabled in 1.3.0; there are a few samples where I + really don't like the effect it causes. + * vorbis: return correct timestamp for granule positions + with high bit set. + * vorbisfile: the [undocumented] half-rate decode api made no + attempt to keep the pcm offset tracking consistent in seeks. + Fix and add a testing mode to seeking_example.c to torture + test seeking in halfrate mode. Also remove requirement that + halfrate mode only work with seekable files. + * vorbisfile: Fix a chaining bug in raw_seeks where seeking + out of the current link would fail due to not + reinitializing the decode machinery. + * vorbisfile: improve seeking strategy. Reduces the + necessary number of seek callbacks in an open or seek + operation by well over 2/3. +- updated to version 1.3.1 + * tweak + minor arithmetic fix in floor1 fit + * revert noise norm to conservative 1.2.3 behavior pending + more listening testing +- updated to versio 1.3.0 + * Optimized surround support for 5.1 encoding at 44.1/48kHz + * Added encoder control call to disable channel coupling + * Correct an overflow bug in very low-bitrate encoding on 32 bit + machines that caused inflated bitrates + * Numerous API hardening, leak and build fixes + * Correct bug in 22kHz compand setup that could cause a crash + * Correct bug in 16kHz codebooks that could cause unstable pure + tones at high bitrates +- run spec-cleaner +- removed libvorbis-automake-fix.diff, libvorbis-doc-fixes.diff, + libvorbis-r16326-CVE-2009-3379.diff and + libvorbis-r16597-CVE-2009-3379.diff (upstream fixed) +- follow library packaging policy +- run make check + +------------------------------------------------------------------- +Wed May 26 15:03:32 CEST 2010 - [email protected] + +- VUL-0: libvorbis: memory corruption while parsing ogg files + (bnc#608192, CVE-2009-3379) + +------------------------------------------------------------------- +Wed Dec 16 10:17:40 CET 2009 - [email protected] + +- add baselibs.conf as a source +- enable parallel building +- package documentation as noarch + +------------------------------------------------------------------- +Wed Nov 11 10:56:23 CET 2009 - [email protected] + +- updated to version 1.2.3: + * correct a vorbisfile bug that prevented proper playback of + Vorbis files where all audio in a logical stream is in a + single page + * Additional decode setup hardening against malicious streams + * Add 'OV_EXCLUDE_STATIC_CALLBACKS' define for developers who + wish to avoid avoid unused symbol warnings from the static + callbacks defined in vorbisfile.h + +- updated to version 1.2.2: + * define VENDOR and ENCODER strings + * seek correctly in files bigger than 2 GB (Windows) + * fix regression from CVE-2008-1420; 1.0b1 files work again + * mark all tables as constant to reduce memory occupation + * additional decoder hardening against malicious streams + * substantially reduce amount of seeking performed by Vorbisfile + * Multichannel decode bugfix + * build system updates + * minor specification clarifications/fixes + +- dropped aotuv patch temporarily + +------------------------------------------------------------------- +Thu Jul 23 15:28:13 CEST 2009 - [email protected] + +- updated to aoTuV patch version beta5.7: + * including security fixes + * improved encoding speed of low bitrate mode + * reduced distrotion by clipping at low sampling frequency + * fixed noise control part of impulse block + * tuning of each part was redone + * expanded noise control of the impulse block + * fixed pre-echo reduction code + * noise normalization reviewed + * detailed tuning done again + +------------------------------------------------------------------- +Mon Jun 22 09:47:22 CEST 2009 - [email protected] + +- fix build with automake 1.11 + +------------------------------------------------------------------- +Wed Jan 7 12:34:56 CET 2009 - [email protected] + +- obsolete old -XXbit packages (bnc#437293) + +------------------------------------------------------------------- +Thu Nov 20 16:48:52 CET 2008 - [email protected] + +- Fix the test in libvorbis-m4.dif and adapt libvorbis-lib64.dif. + +------------------------------------------------------------------- +Wed May 14 16:41:31 CEST 2008 - [email protected] + +- VUL-0: Multiple vulnerabilities in libogg and libvorbis + (bnc#372246) + * CVE-2008-1419 vorbis: zero-dim codebooks can cause crash, + infinite loop or heap overflow + * CVE-2008-1420 vorbis: integer overflow in partvals computation + * CVE-2008-1423 vorbis: integer oveflow caused by huge codebooks + +------------------------------------------------------------------- +Mon Apr 28 12:56:34 CEST 2008 - [email protected] + +- fixed dependency in *.pc files (bnc#384153) +- removed old run_ldconfig + +------------------------------------------------------------------- +Thu Apr 10 12:54:45 CEST 2008 - [email protected] + +- added baselibs.conf file to build xxbit packages + for multilib support + +------------------------------------------------------------------- +Thu Aug 2 12:22:21 CEST 2007 - [email protected] + +- updated to version 1.2.0: + * new ov_fopen() convenience call that avoids the common + stdio conflicts with ov_open() and MSVC runtimes. + * libvorbisfile now handles multiplexed streams + * improve robustness to corrupt input streams + * fix a minor encoder bug + * updated RTP draft + * build system updates + * minor corrections to the specification + +------------------------------------------------------------------- +Fri Jul 27 12:56:43 CEST 2007 - [email protected] + +- fix the documentation link (#293784) +- split documentation to doc subpackage +- remove -fno-strict-aliasing gcc option + +------------------------------------------------------------------- +Mon Jul 9 10:48:33 CEST 2007 - [email protected] + +- fix array boundary conditional flaw in mapping (#287124, + CVE-2007-3106) + +------------------------------------------------------------------- +Mon Apr 23 18:06:06 CEST 2007 - [email protected] + +- use aoTuV beta5 patch: + * The action of noise normalization has been improved. + * The threshold of a stereo mode change was calculated + dynamically. + * Noise control of an impulse block was changed (quality 0-10 + / 32-48kHz). And pre-echo decreased slightly. + * Tuning of each part was redone according to above-mentioned + changed part and additional part. + +------------------------------------------------------------------- +Mon Apr 16 15:07:19 CEST 2007 - [email protected] ++++ 201 more lines (skipped) ++++ between /dev/null ++++ and /work/SRC/openSUSE:12.1:Update:Test/.libvorbis.new/libvorbis.changes New: ---- _link baselibs.conf libvorbis-1.3.2.tar.bz2 libvorbis-lib64.dif libvorbis-m4.dif libvorbis-pkgconfig.patch libvorbis.changes libvorbis.spec vorbis-fix-linking.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libvorbis.spec ++++++ # # spec file for package libvorbis # # Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed # upon. The license for this file, and modifications and additions to the # file, is the same license as for the pristine package itself (unless the # license for the pristine package is not an Open Source License, in which # case the license is the MIT License). An "Open Source License" is a # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. # Please submit bugfixes or comments via http://bugs.opensuse.org/ # Name: libvorbis Version: 1.3.2 Release: 10 #to_be_filled_by_service License: BSD3c(or similar) Summary: The Vorbis General Audio Compression Codec Url: http://www.vorbis.com/ Group: System/Libraries # bug437293 (SLES10 -> SLES11 upgrade path) %ifarch ppc64 Obsoletes: libvorbis-64bit %endif # Source: %{name}-%{version}.tar.bz2 Source2: baselibs.conf Patch1: libvorbis-lib64.dif Patch2: libvorbis-m4.dif # URL http://www.geocities.jp/aoyoume/aotuv/ # 'Patch5: libvorbis-%%{version}-aotuv-b5.7.diff' # PATCH-FIX-UPSTREAM libvorbis-pkgconfig.patch https://trac.xiph.org/ticket/1759 [email protected] -- Use Requires/Libs.private to avoid overlinking Patch10: libvorbis-pkgconfig.patch Patch11: vorbis-fix-linking.patch BuildRequires: libogg-devel BuildRequires: fdupes pkgconfig BuildRoot: %{_tmppath}/%{name}-%{version}-build %description Vorbis is a fully open, nonproprietary, patent-and-royalty-free, and general-purpose compressed audio format for audio and music at fixed and variable bit rates from 16 to 128 kbps/channel. The native bitstream format of Vorbis is libogg (Ogg). Alternatively, libmatroska (matroska) can also be used. %package -n libvorbis0 Summary: The Vorbis General Audio Compression Codec Group: System/Libraries License: BSD3c(or similar) # bug437293 (SLES10 -> SLES11 upgrade path) %ifarch ppc64 Obsoletes: libvorbis-64bit %endif # # libvorbis was last used in openSUSE 11.3 Provides: %{name} = 1.3.2 Obsoletes: %{name} < 1.3.2 %description -n libvorbis0 Vorbis is a fully open, nonproprietary, patent-and-royalty-free, and general-purpose compressed audio format for audio and music at fixed and variable bit rates from 16 to 128 kbps/channel. The native bitstream format of Vorbis is libogg (Ogg). Alternatively, libmatroska (matroska) can also be used. %package -n libvorbisenc2 Summary: The Vorbis General Audio Compression Codec Group: System/Libraries License: BSD3c(or similar) %description -n libvorbisenc2 Vorbis is a fully open, nonproprietary, patent-and-royalty-free, and general-purpose compressed audio format for audio and music at fixed and variable bit rates from 16 to 128 kbps/channel. The native bitstream format of Vorbis is libogg (Ogg). Alternatively, libmatroska (matroska) can also be used. %package -n libvorbisfile3 Summary: The Vorbis General Audio Compression Codec Group: System/Libraries License: BSD3c(or similar) %description -n libvorbisfile3 Vorbis is a fully open, nonproprietary, patent-and-royalty-free, and general-purpose compressed audio format for audio and music at fixed and variable bit rates from 16 to 128 kbps/channel. The native bitstream format of Vorbis is libogg (Ogg). Alternatively, libmatroska (matroska) can also be used. %package devel License: BSD3c(or similar) Summary: Include Files and Libraries mandatory for Ogg Vorbis Development Group: Development/Libraries/C and C++ Requires: libvorbis0 = %{version} Requires: libvorbisfile3 = %{version} Requires: libvorbisenc2 = %{version} Requires: glibc-devel Requires: libogg-devel # bug437293 (SLES10 -> SLES11 upgrade path) %ifarch ppc64 Obsoletes: libvorbis-devel-64bit %endif # %description devel This package contains all necessary include files and libraries needed to compile and develop applications that use libvorbis. %package doc License: BSD3c(or similar) Summary: Documentation of Ogg/Vorbis library Group: Documentation/Other %if 0%{?suse_version} >= 1120 BuildArch: noarch %endif %description doc This package contains documents for Ogg/Vorbis library, including the API reference. %prep %setup -q %patch2 # %%patch5 -p1 %patch10 if [ "%{_lib}" == "lib64" ]; then %patch1 fi %patch11 %build autoreconf -fiv %configure --disable-examples --disable-static make %{?_smp_mflags} %install %makeinstall mkdir -p %{buildroot}%{_docdir}/%{name} mv %{buildroot}%{_datadir}/doc/libvorbis-* %{buildroot}%{_docdir}/%{name} install -c -m 0644 doc/Vorbis_I_spec.* %{buildroot}%{_docdir}/%{name} # remove unneeded files rm -f %{buildroot}%{_libdir}/*.la find %{buildroot}%{_docdir}/ -empty -delete %fdupes -s %{buildroot}%{_docdir} %check %__make check %post -n libvorbis0 -p /sbin/ldconfig %postun -n libvorbis0 -p /sbin/ldconfig %post -n libvorbisenc2 -p /sbin/ldconfig %postun -n libvorbisenc2 -p /sbin/ldconfig %post -n libvorbisfile3 -p /sbin/ldconfig %postun -n libvorbisfile3 -p /sbin/ldconfig %clean [ %{buildroot} != "/" ] && rm -rf %{buildroot} %files -n libvorbis0 %defattr(0644,root,root,0755) %{_libdir}/libvorbis.so.0* %files -n libvorbisenc2 %defattr(0644,root,root,0755) %{_libdir}/libvorbisenc.so.2* %files -n libvorbisfile3 %defattr(0644,root,root,0755) %{_libdir}/libvorbisfile.so.3* %files devel %defattr(-,root,root) %doc COPYING AUTHORS README *.txt %{_datadir}/aclocal/*.m4 %{_includedir}/vorbis %{_libdir}/lib*.so %{_libdir}/pkgconfig/*.pc %files doc %defattr(-,root,root) %doc %{_docdir}/%{name} %changelog ++++++ _link ++++++ <link project="openSUSE:12.1" baserev="6308fb5378b12bf74e8acf2c6f8e5953"> <patches> <branch/> </patches> </link> ++++++ baselibs.conf ++++++ libvorbis0 targettype 32bit provides "libvorbis-<targettype> = 1.3.2" targettype 64bit obsoletes "libvorbis-<targettype> < 1.3.2" libvorbisenc2 libvorbisfile3 ++++++ libvorbis-lib64.dif ++++++ --- vorbis.m4 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) --- vorbis.m4.orig +++ vorbis.m4 @@ -20,9 +20,9 @@ elif test "x$vorbis_prefix" = "xno" || test "x$vorbis_prefix" = "xyes" ; then VORBIS_LIBS="" elif test "x$vorbis_prefix" != "x" ; then - VORBIS_LIBS="-L$vorbis_prefix/lib" + VORBIS_LIBS="-L$vorbis_prefix/lib64" elif test "x$prefix" != "xNONE" -a "x$prefix" != "x/usr"; then - VORBIS_LIBS="-L$prefix/lib" + VORBIS_LIBS="-L$prefix/lib64" fi if test "x$vorbis_prefix" != "xno" ; then ++++++ libvorbis-m4.dif ++++++ --- vorbis.m4 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) --- vorbis.m4.orig +++ vorbis.m4 @@ -21,7 +21,7 @@ VORBIS_LIBS="" elif test "x$vorbis_prefix" != "x" ; then VORBIS_LIBS="-L$vorbis_prefix/lib" - elif test "x$prefix" != "xNONE"; then + elif test "x$prefix" != "xNONE" -a "x$prefix" != "x/usr"; then VORBIS_LIBS="-L$prefix/lib" fi @@ -37,7 +37,7 @@ VORBIS_CFLAGS="" elif test "x$vorbis_prefix" != "x" ; then VORBIS_CFLAGS="-I$vorbis_prefix/include" - elif test "x$prefix" != "xNONE"; then + elif test "x$prefix" != "xNONE" -a "x$prefix" != "x/usr"; then VORBIS_CFLAGS="-I$prefix/include" fi ++++++ libvorbis-pkgconfig.patch ++++++ Index: vorbis.pc.in ================================================================================ --- vorbis.pc.in +++ vorbis.pc.in @@ -8,7 +8,8 @@ Name: vorbis Description: vorbis is the primary Ogg Vorbis library Version: @VERSION@ -Requires: ogg +Requires.private: ogg Conflicts: -Libs: -L${libdir} -lvorbis -lm +Libs: -L${libdir} -lvorbis +Libs.private: -lm Cflags: -I${includedir} --- vorbisenc.pc.in +++ vorbisenc.pc.in @@ -8,7 +8,7 @@ Name: vorbisenc Description: vorbisenc is a library that provides a convenient API for setting up an encoding environment using libvorbis Version: @VERSION@ -Requires: vorbis +Requires.private: vorbis Conflicts: Libs: -L${libdir} -lvorbisenc Cflags: -I${includedir} --- vorbisfile.pc.in +++ vorbisfile.pc.in @@ -8,7 +8,7 @@ Name: vorbisfile Description: vorbisfile is a library that provides a convenient high-level API for decoding and basic manipulation of all Vorbis I audio streams Version: @VERSION@ -Requires: vorbis +Requires.private: vorbis Conflicts: Libs: -L${libdir} -lvorbisfile Cflags: -I${includedir} ++++++ vorbis-fix-linking.patch ++++++ --- test/Makefile.am.orig +++ test/Makefile.am @@ -10,7 +10,7 @@ check: $(check_PROGRAMS) ./test$(EXEEXT) test_SOURCES = util.c util.h write_read.c write_read.h test.c -test_LDADD = ../lib/libvorbisenc.la ../lib/libvorbis.la @OGG_LIBS@ +test_LDADD = -lm ../lib/libvorbisenc.la ../lib/libvorbis.la @OGG_LIBS@ debug: $(MAKE) all CFLAGS="@DEBUG@" --- configure.ac.orig +++ configure.ac @@ -8,13 +8,12 @@ dnl ------------------------------------ AC_INIT([libvorbis],[1.3.2],[[email protected]]) AC_CONFIG_SRCDIR([lib/mdct.c]) - +AC_CONFIG_MACRO_DIR([m4]) AC_CANONICAL_TARGET([]) AM_INIT_AUTOMAKE($PACKAGE_NAME,$PACKAGE_VERSION) AM_MAINTAINER_MODE AM_CONFIG_HEADER([config.h]) - dnl Add parameters for aclocal AC_SUBST(ACLOCAL_AMFLAGS, "-I m4") @@ -53,7 +52,9 @@ dnl ------------------------------------ dnl save $CFLAGS since AC_PROG_CC likes to insert "-g -O2" dnl if $CFLAGS is blank cflags_save="$CFLAGS" -AC_PROG_CC +AC_PROG_CC_STDC +AC_USE_SYSTEM_EXTENSIONS +AC_SYS_LARGEFILE AC_PROG_CPP CFLAGS="$cflags_save" --- Makefile.am.orig +++ Makefile.am @@ -1,5 +1,6 @@ ## Process this file with automake to produce Makefile.in +ACLOCAL_AMFLAGS = -I m4 AUTOMAKE_OPTIONS = 1.7 foreign dist-zip dist-bzip2 SUBDIRS = m4 include vq lib test doc -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
