Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package podofo for openSUSE:Factory checked in at 2026-10-13 17:43:16 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/podofo (Old) and /work/SRC/openSUSE:Factory/.podofo.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "podofo" Tue Oct 13 17:43:16 2026 rev:46 rq:1384324 version:1.1.2 Changes: -------- --- /work/SRC/openSUSE:Factory/podofo/podofo.changes 2026-08-01 18:30:11.981548237 +0200 +++ /work/SRC/openSUSE:Factory/.podofo.new.3698736/podofo.changes 2026-10-13 17:43:22.802373687 +0200 @@ -1,0 +2,27 @@ +Sun Oct 11 14:24:49 UTC 2026 - Andrea Manzini <[email protected]> + +- Update to version 1.1.2 + * CodePointSpan: Fixed stack buffer overflow in the constructor + with base view plus one code point, reachable through crafted + /ToUnicode CMaps during text extraction (GHSA-7vfg-cp83-9rxr) + * PdfParser: Parse XRef sections iteratively and garbage collect + with a support stack, avoiding stack exhaustion on crafted + files; ensure the document has a valid catalog + * PdfFontManager: Fixed use-after-free of fonts, cached paths + were not cleared in EmbedFonts() and Clear() + * FreeTypePrivate: Fixed access of the thread local FT_LibraryPtr + after the creating thread quit + * Fixed reading arrays with indirect references + * PdfRLEFilter: Fixed RunLengthDecode bugs + * PdfPage: Fixed rotation handling in text extraction + * OpenSSLInternal: Fixed two leaks in signing code, tentative + OpenSSL 4.0 support + * Upstream kept libpodofo.so.4 although some exported private + symbols were removed and PdfTokenizer members changed + * Many more fixes and improvements; see upstream's release notes + for the full list +- Unbundle fmt: build with system fmt via pkgconfig(fmt) and + -DPODOFO_DEVENDOR_FMT=ON +- Spec cleanup: drop obsolete Group tags + +------------------------------------------------------------------- Old: ---- podofo-1.1.1.tar.gz New: ---- podofo-1.1.2.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ podofo.spec ++++++ --- /var/tmp/diff_new_pack.Qng4eR/_old 2026-10-13 17:43:24.325437514 +0200 +++ /var/tmp/diff_new_pack.Qng4eR/_new 2026-10-13 17:43:24.329437682 +0200 @@ -19,7 +19,7 @@ %define libver 4 Name: podofo -Version: 1.1.1 +Version: 1.1.2 Release: 0 Summary: PDF parsing and creation library License: GPL-2.0-or-later @@ -33,6 +33,7 @@ BuildRequires: libboost_headers-devel BuildRequires: pkgconfig BuildRequires: pkgconfig(cppunit) +BuildRequires: pkgconfig(fmt) BuildRequires: pkgconfig(fontconfig) BuildRequires: pkgconfig(freetype2) BuildRequires: pkgconfig(libjpeg) @@ -54,7 +55,6 @@ %package -n libpodofo%{libver} Summary: PDF parsing and creation library License: LGPL-2.1-or-later -Group: System/Libraries %description -n libpodofo%{libver} A cross platform PDF parsing and creation library. @@ -62,7 +62,6 @@ %package -n libpodofo-devel Summary: Development files for podofo License: LGPL-2.1-or-later -Group: Development/Libraries/Other Requires: libboost_headers-devel Requires: libpodofo%{libver} = %{version} @@ -70,7 +69,7 @@ This package contains development files for podofo library. %prep -%autosetup -p1 +%autosetup dos2unix API-MIGRATION.md # Remove build time references so build-compare can do its work @@ -82,7 +81,8 @@ %cmake \ -DPODOFO_BUILD_STATIC=OFF \ -DPODOFO_BUILD_TEST=OFF \ - -DPODOFO_BUILD_UNSUPPORTED_TOOLS=OFF + -DPODOFO_BUILD_UNSUPPORTED_TOOLS=OFF \ + -DPODOFO_DEVENDOR_FMT=ON %cmake_build # Build devel doc ++++++ podofo-1.1.1.tar.gz -> podofo-1.1.2.tar.gz ++++++ ++++ 11467 lines of diff (skipped)
