Hello community, here is the log from the commit of package libjansson for openSUSE:Factory checked in at 2014-07-21 21:40:09 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libjansson (Old) and /work/SRC/openSUSE:Factory/.libjansson.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libjansson" Changes: -------- --- /work/SRC/openSUSE:Factory/libjansson/libjansson.changes 2012-12-17 09:34:36.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.libjansson.new/libjansson.changes 2014-07-21 22:34:36.000000000 +0200 @@ -1,0 +2,17 @@ +Sun Jul 20 10:50:34 UTC 2014 - [email protected] + +- Update to new upstream release 2.6 +* Fixed CVE-2013-6401: avoid bad performance in large JSON objects +* The json_pack et al functions recognize the specifiers "s#", "+" + and "+#" +* Add the "JSON_DECODE_INT_AS_REAL" flag +* Add "json_array_foreach()" function +* Add the "json_boolean()" macro that returns the JSON true or + false value based on its argument +* Add "json_load_callback()" that calls a callback function + repeatedly to read the JSON input. +* Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of + '/' with '\/'. +- Drop defunct gpg-offline and use local source_validator instead + +------------------------------------------------------------------- Old: ---- jansson-2.3.1.tar.gz jansson-2.3.1.tar.gz.asc New: ---- jansson-2.6.tar.bz2 jansson-2.6.tar.bz2.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libjansson.spec ++++++ --- /var/tmp/diff_new_pack.NILVzV/_old 2014-07-21 22:34:37.000000000 +0200 +++ /var/tmp/diff_new_pack.NILVzV/_new 2014-07-21 22:34:37.000000000 +0200 @@ -1,7 +1,7 @@ # # spec file for package libjansson # -# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -21,14 +21,15 @@ Summary: C library for encoding, decoding and manipulating JSON data License: MIT Group: Development/Libraries/C and C++ -Version: 2.3.1 +Version: 2.6 Release: 0 Url: http://digip.org/jansson/ -Source: jansson-%version.tar.gz -Source2: jansson-%version.tar.gz.asc + +#Git-Clone: git://github.com/akheron/jansson +Source: http://www.digip.org/jansson/releases/jansson-%version.tar.bz2 +Source2: http://www.digip.org/jansson/releases/jansson-%version.tar.bz2.asc Source3: %name.keyring BuildRoot: %{_tmppath}/%{name}-%{version}-build -BuildRequires: gpg-offline BuildRequires: pkgconfig %description @@ -68,7 +69,6 @@ * Extensive test suite %prep -%gpg_verify %{S:2} %setup -q -n jansson-%{version} %build @@ -76,7 +76,7 @@ make %{?_smp_mflags} %install -%makeinstall +%make_install rm -f "%buildroot/%_libdir"/*.la; %post -n %lname -p /sbin/ldconfig ++++++ jansson-2.3.1.tar.gz -> jansson-2.6.tar.bz2 ++++++ ++++ 8458 lines of diff (skipped) -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
