Hello community,

here is the log from the commit of package libmatroska for openSUSE:Factory 
checked in at 2015-10-24 10:29:33
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/libmatroska (Old)
 and      /work/SRC/openSUSE:Factory/.libmatroska.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "libmatroska"

Changes:
--------
--- /work/SRC/openSUSE:Factory/libmatroska/libmatroska.changes  2015-02-06 
10:43:23.000000000 +0100
+++ /work/SRC/openSUSE:Factory/.libmatroska.new/libmatroska.changes     
2015-10-24 10:30:16.000000000 +0200
@@ -1,0 +2,17 @@
+Thu Oct 22 09:53:21 UTC 2015 - [email protected]
+
+- Update to new upstream release 1.4.4 (security fix):
+* KaxInternalBlock::ReadData(): Fixed an invalid memory
+  access. When reading a block group or a simple block that uses
+  EBML lacing the frame sizes indicated in the lacing weren't
+  checked against the available number of bytes. If the indicated
+  frame size was bigger than the whole block's size the parser would
+  read beyond the end of the buffer resulting in a heap information
+  leak.
+* all: a couple of optimizations in the main library and a memory
+  leak fix in the tests
+* build system: fix linking against libEBML
+- Removed unneeded linker settings, not needed anymore in current
+  mkvtoolnix version.
+
+-------------------------------------------------------------------

Old:
----
  libmatroska-1.4.2.tar.bz2

New:
----
  libmatroska-1.4.4.tar.bz2

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ libmatroska.spec ++++++
--- /var/tmp/diff_new_pack.K5gb3n/_old  2015-10-24 10:30:16.000000000 +0200
+++ /var/tmp/diff_new_pack.K5gb3n/_new  2015-10-24 10:30:16.000000000 +0200
@@ -19,7 +19,7 @@
 %define soname 6
 
 Name:           libmatroska
-Version:        1.4.2
+Version:        1.4.4
 Release:        0
 Summary:        Library to Deal with Matroska Files
 License:        LGPL-2.1+
@@ -33,7 +33,7 @@
 Source99:       %name.changes
 BuildRequires:  gcc-c++
 BuildRequires:  pkg-config
-BuildRequires:  pkgconfig(libebml) >= 1.3.1
+BuildRequires:  pkgconfig(libebml) >= 1.3.3
 
 %description
 Libmatroska is a C++ library to parse Matroska files (.mkv and .mka).
@@ -67,14 +67,7 @@
 FAKE_BUILDTIMESTAMP=$(LC_ALL=C date -r %{S:99} '+%a %b %e %H:%M:%S %Y')
 sed -i "s/__TIMESTAMP__/\"$FAKE_BUILDTIMESTAMP\"/" matroska/KaxVersion.h
 %configure --disable-static
-# mkvmerge-7.1.0 built against libmatroska-1.4.1 running against
-# libmatroska-1.4.0: symbol lookup error: mkvmerge: undefined symbol:
-# _ZN11libmatroska14KaxSeekPreRoll10ClassInfosE.
-# Force some additional versioning, since upstream did not track the ABI
-# changes. Tag with the version of the most recent incompatible change.
-echo "V_1.4.1 { global: *; };" >libmatroska.sym
-make %{?_smp_mflags} \
-       LDFLAGS="-Wl,--version-script=$PWD/libmatroska.sym"
+make %{?_smp_mflags}
 
 %install
 %make_install

++++++ libmatroska-1.4.2.tar.bz2 -> libmatroska-1.4.4.tar.bz2 ++++++
++++ 6864 lines of diff (skipped)


Reply via email to