Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libxslt for openSUSE:Factory checked in at 2022-10-19 13:17:21 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libxslt (Old) and /work/SRC/openSUSE:Factory/.libxslt.new.2275 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libxslt" Wed Oct 19 13:17:21 2022 rev:65 rq:1001274 version:1.1.37 Changes: -------- --- /work/SRC/openSUSE:Factory/libxslt/libxslt.changes 2021-11-12 15:59:15.950564955 +0100 +++ /work/SRC/openSUSE:Factory/.libxslt.new.2275/libxslt.changes 2022-10-19 13:17:44.353229839 +0200 @@ -1,0 +2,110 @@ +Tue Aug 30 14:42:27 UTC 2022 - Bj??rn Lie <[email protected]> + +- Update to version 1.1.37: + * Improvements: + + Don't use deprecated libxml2 macros + + Don't mess with xmlDefaultSAXHandler + * Build system: + + Require automake-1.16.3 or later + + Remove generated files from distribution + + Add missing compile definition for static builds to Autotools + +------------------------------------------------------------------- +Thu Aug 18 07:50:04 UTC 2022 - David Anes <[email protected]> + +- Update to 1.1.36: + * Removals and deprecations + + Remove SVN keyword anchors + + Remove CVS and SVN-related code + + Remove README.cvs-commits + + Remove ChangeLog + + Remove xsltwin32config.h + * Improvements + + Simplify xsltexports.h and exsltexports.h + + Don't overlink executables with gcrypt + + Fix quadratic behavior with variables and parameters + + Remove case labels with XPointer location types + + Add configure~ to .gitignore + + Stop calling deprecated libxml2 functions + * Portability + + Use portable python shebangs (David Seifert) + + Remove useless __CYGWIN__ checks + + Remove cruft from win32config.h + + crypto.c: Silence a compiler warning on Windows (Chun-wei Fan) + * Build system + + Add missing compile definition for static builds to CMake + + Avoid obsolescent `test -a` constructs (David Seifert) + + Only link libxml2 statically in purely static build + + Set AC_CONFIG_MACRO_DIR + + Allow AM_MAINTAINER_MODE to be disabled + + Streamline and fix documentation installation + + Don't try to recreate COPYING symlink + + Remove special configuration for certain maintainers + + configure.ac: produce tar.xz only (GNOME policy) (David Seifert) + + Detect libm using libtool's macros (David Seifert) + + configure.ac: disable static libraries by default (David Seifert) + + python/Makefile.am: nest python docs in $(docdir) (David Seifert) + + python/Makefile.am: rely on global AM_INIT_AUTOMAKE (David Seifert) + + configure.ac: remove useless AC_SUBST (David Seifert) + + Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings (David Seifert) + + Change libxml2 Python config + + Don't check for standard C89 library functions + + Don't check for standard C89 headers + + Remove --with-html-dir option + + Also check for glibtoolize in autogen.sh + + Rework documentation build system + + Remove old website + + CMake: Relax check for enabling crypto support on Windows (Chun-wei Fan) + + Remove obsolete AC_HEADER_STDC autoconf macro (Vadim Zeitlin) + + Remove special configuration for old maintainers + * Test suite, CI + + Remove test involving XPointer range-to function + + Test recursion in EXSLT dynamic functions + + Add CI job for static build + * Documentation + + Move tutorial images + +------------------------------------------------------------------- +Wed Mar 9 05:07:32 UTC 2022 - Luciano Santos <[email protected]> + +- Update to version 1.1.35: + * Security fixes: + + [CVE-2021-30560] Use-after-free in xsltApplyTemplates; + + A couple of memory leak and a double-free fixes. + * A couple of regression fixes. + * Many bug fixes. + * New xsltproc --huge option, provided by libxml XML_PARSE_HUGE. + * Numerous tests and code and fuzzing fixes and improvements. + * Updated documentation. +- The full Libxslt 2.9.13 NEWS can be found here: + https://download.gnome.org/sources/libxslt/1.1/libxslt-1.1.35.\ + news +- Switch libxml2-devel package with its pkgconfig module + counterpart (libxml-2.0) to align with CONFIGURE script's checks. +- Add fdupes build requirement/macro to hard-link duplicate files + in the DATADIR inside the buildroot. +- Add explicit 'gcc' build requirement to align with CONFIGURE + checks. +- Update http://xmlsoft.org URL tag to Libxslt's new web home: + https://gitlab.gnome.org/GNOME/libxslt. +- Update ftp://xmlsoft.org Source tag to Libxslt's new download + host: https://download.gnome.org. +- Drop no longer needed/used libgpg-error-devel. Note that despite + 'lgpg-error' being linked against some libraries, there's no + automatic generation of run-time requirements on libgpg-error* + symbols our build system. And there's no mention of gpg-error in + the whole source tarball at all. +- Drop no longer needed explicit libtool build requirement and + `autoreconf` call in build section since we don't touch the build + system scripts nor use checked out git trees anymore. +- Drop libxslt.keyring source file as the new download host doesn't + offer GPG signatures. +- Drop fixed upstream patches: + libxslt-config-fixes.patch (glgo#GNOME/libxslt!3); + libxslt-Stop-using-maxParserDepth-XPath-limit.patch; + libxslt-Do-not-set-maxDepth-in-XPath-contexts.patch; and + Recreate-xsltproc-man-page-with-old-Docbook-styleshe.patch. +- Use ldconfig_scriptlets macro for post(un) handling of ldconfig + calls. + +------------------------------------------------------------------- Old: ---- Recreate-xsltproc-man-page-with-old-Docbook-styleshe.patch libxslt-1.1.34.tar.gz libxslt-1.1.34.tar.gz.asc libxslt-Do-not-set-maxDepth-in-XPath-contexts.patch libxslt-Stop-using-maxParserDepth-XPath-limit.patch libxslt-config-fixes.patch libxslt.keyring New: ---- libxslt-1.1.37.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libxslt.spec ++++++ --- /var/tmp/diff_new_pack.ffdCIC/_old 2022-10-19 13:17:45.021231224 +0200 +++ /var/tmp/diff_new_pack.ffdCIC/_new 2022-10-19 13:17:45.025231232 +0200 @@ -1,7 +1,7 @@ # # spec file for package libxslt # -# Copyright (c) 2021 SUSE LLC +# Copyright (c) 2022 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,32 +18,44 @@ %define libver 1 %define libexver 0 + Name: libxslt -Version: 1.1.34 +Version: 1.1.37 Release: 0 Summary: XSL Transformation Library License: GPL-2.0-or-later AND MIT Group: Development/Libraries/C and C++ -URL: http://xmlsoft.org/XSLT/ -Source0: ftp://xmlsoft.org/libxslt/libxslt-%{version}.tar.gz -Source1: ftp://xmlsoft.org/libxslt/libxslt-%{version}.tar.gz.asc -Source2: %{name}.keyring -Source3: xslt-config.1 -Source99: baselibs.conf -Patch0: %{name}-1.1.24-no-net-autobuild.patch -Patch1: libxslt-config-fixes.patch +URL: https://gitlab.gnome.org/GNOME/libxslt +Source0: https://download.gnome.org/sources/%{name}/1.1/%{name}-%{version}.tar.xz +Source1: baselibs.conf +Source2: xslt-config.1 + +# PATCH-FIX-OPENSUSE -- libxslt-1.1.24-no-net-autobuild.patch +# The xmlGetExternalEntityLoader() tries to fetch/parse some information via +# internet, which OBS's build environment does not allow it. +Patch0: libxslt-1.1.24-no-net-autobuild.patch +# PATCH-FIX-UPSTREAM -- libxslt-random-seed.patch +# https://bugzilla.suse.com/show_bug.cgi?id=934119 +# https://bugzilla.gnome.org/show_bug.cgi?id=758400 +# Initialize the random seed to ensure libxslt's math.random() function +# produces unpredictable outputs. +Patch1: libxslt-random-seed.patch +# PATCH-FIX-UPSTREAM -- 0009-Make-generate-id-deterministic.patch +# https://bugzilla.gnome.org/show_bug.cgi?id=751621 +# https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=902051 +# Make generate-id() return identifiers in a deterministic way. It used to +# return identifiers based on the memory address of the node object. Patch2: 0009-Make-generate-id-deterministic.patch -Patch3: libxslt-random-seed.patch -# PATCH-FIX-UPSTREAM gitlab.gnome.org/GNOME/libxslt/commit/9ae2f94df1721e002941b40665efb762aefcea1a -Patch4: libxslt-Stop-using-maxParserDepth-XPath-limit.patch -# PATCH-FIX-UPSTREAM gitlab.gnome.org/GNOME/libxslt/commit/77c26bad0433541f486b1e7ced44ca9979376908 -Patch5: libxslt-Do-not-set-maxDepth-in-XPath-contexts.patch -Patch6: Recreate-xsltproc-man-page-with-old-Docbook-styleshe.patch +# +### SUSE patches starts on 1000 +# PATCH-FIX-SUSE +#Patch1000: +# +BuildRequires: fdupes +BuildRequires: gcc BuildRequires: libgcrypt-devel -BuildRequires: libgpg-error-devel -BuildRequires: libtool -BuildRequires: libxml2-devel >= 2.9.12 BuildRequires: pkgconfig +BuildRequires: pkgconfig(libxml-2.0) >= 2.9.12 Obsoletes: libxslt-python %description @@ -90,7 +102,6 @@ Requires: glibc-devel Requires: libexslt%{libexver} = %{version} Requires: libgcrypt-devel -Requires: libgpg-error-devel Requires: libxslt%{libver} = %{version} %description devel @@ -113,17 +124,9 @@ xtend the %prep -%setup -q -%patch0 -%patch1 -%patch2 -p1 -%patch3 -p1 -%patch4 -p1 -%patch5 -p1 -%patch6 -p1 +%autosetup -p1 %build -autoreconf -fvi %configure \ --disable-static \ --without-python \ @@ -138,15 +141,16 @@ # Unwanted doc stuff rm -fr %{buildroot}%{_datadir}/doc -# the manual page is required -install -D -m0644 %{SOURCE3} %{buildroot}%{_mandir}/man1/xslt-config.1 +# Install the manual page for xslt-config +install -D -m0644 %{SOURCE2} %{buildroot}%{_mandir}/man1/xslt-config.1 #kill all "la" files find %{buildroot} -type f -name "*.la" -delete -print -%post -n libxslt%{libver} -p /sbin/ldconfig -%postun -n libxslt%{libver} -p /sbin/ldconfig -%post -n libexslt%{libexver} -p /sbin/ldconfig -%postun -n libexslt%{libexver} -p /sbin/ldconfig +# Hardlink same-content files +%fdupes %{buildroot}%{_datadir} + +%ldconfig_scriptlets -n libxslt%{libver} +%ldconfig_scriptlets -n libexslt%{libexver} %files -n libxslt%{libver} %license COPYING* Copyright @@ -169,11 +173,18 @@ %{_libdir}/*.sh %{_libdir}/pkgconfig/libxslt.pc %{_libdir}/pkgconfig/libexslt.pc +%dir %{_libdir}/cmake/libxslt/ +%{_libdir}/cmake/libxslt/FindGcrypt.cmake +%{_libdir}/cmake/libxslt/libxslt-config.cmake %{_includedir}/* %{_datadir}/aclocal/* %{_bindir}/xslt-config %{_mandir}/man1/xslt-config.1%{?ext_man} %{_mandir}/man3/* -%doc doc/*.html doc/html doc/tutorial doc/*.gif +%dir %{_datadir}/gtk-doc/ +%dir %{_datadir}/gtk-doc/html/ +%{_datadir}/gtk-doc/html/libexslt/ +%{_datadir}/gtk-doc/html/libxslt/ +%doc doc/*.html doc/tutorial doc/tutorial2 %changelog ++++++ 0009-Make-generate-id-deterministic.patch ++++++ --- /var/tmp/diff_new_pack.ffdCIC/_old 2022-10-19 13:17:45.053231290 +0200 +++ /var/tmp/diff_new_pack.ffdCIC/_new 2022-10-19 13:17:45.061231307 +0200 @@ -7,8 +7,8 @@ Index: libxslt-1.1.29/libxslt/functions.c =================================================================== ---- libxslt-1.1.29.orig/libxslt/functions.c -+++ libxslt-1.1.29/libxslt/functions.c +--- a/libxslt/functions.c ++++ b/libxslt/functions.c @@ -661,10 +661,10 @@ xsltFormatNumberFunction(xmlXPathParserC */ void ++++++ libxslt-1.1.24-no-net-autobuild.patch ++++++ --- /var/tmp/diff_new_pack.ffdCIC/_old 2022-10-19 13:17:45.089231364 +0200 +++ /var/tmp/diff_new_pack.ffdCIC/_new 2022-10-19 13:17:45.093231373 +0200 @@ -1,5 +1,5 @@ ---- xsltproc/xsltproc.c -+++ xsltproc/xsltproc.c +--- a/xsltproc/xsltproc.c ++++ b/xsltproc/xsltproc.c @@ -544,7 +544,7 @@ sec = xsltNewSecurityPrefs(); ++++++ libxslt-random-seed.patch ++++++ --- /var/tmp/diff_new_pack.ffdCIC/_old 2022-10-19 13:17:45.105231398 +0200 +++ /var/tmp/diff_new_pack.ffdCIC/_new 2022-10-19 13:17:45.109231406 +0200 @@ -4,14 +4,14 @@ initialize the random seed -diff --git a/libexslt/math.c b/libexslt/math.c -index 6b24dbe0..b7a8d6e1 100644 ---- a/libexslt/math.c -+++ b/libexslt/math.c -@@ -23,6 +23,14 @@ - #ifdef HAVE_STDLIB_H +Index: libxslt-v1.1.36/libexslt/math.c +=================================================================== +--- libxslt-v1.1.36.orig/libexslt/math.c ++++ libxslt-v1.1.36/libexslt/math.c +@@ -12,6 +12,14 @@ + #include <math.h> #include <stdlib.h> - #endif + +#ifdef HAVE_UNISTD_H +#include <unistd.h> +#endif @@ -20,10 +20,10 @@ +#include <time.h> +#endif + - #include "exslt.h" -@@ -474,6 +482,20 @@ static double + /** +@@ -460,6 +468,20 @@ static double exsltMathRandom (void) { double ret; int num; @@ -45,4 +45,3 @@ num = rand(); ret = (double)num / (double)RAND_MAX; -
