Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libavif for openSUSE:Factory checked in at 2023-11-30 21:59:07 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libavif (Old) and /work/SRC/openSUSE:Factory/.libavif.new.25432 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libavif" Thu Nov 30 21:59:07 2023 rev:22 rq:1129716 version:1.0.2 Changes: -------- --- /work/SRC/openSUSE:Factory/libavif/libavif.changes 2023-08-31 13:42:48.181972032 +0200 +++ /work/SRC/openSUSE:Factory/.libavif.new.25432/libavif.changes 2023-11-30 21:59:46.081626679 +0100 @@ -1,0 +2,11 @@ +Tue Nov 28 20:40:32 UTC 2023 - Andreas Stieger <[email protected]> + +- update to 1.0.2: + * Update avifCropRectConvertCleanApertureBox() to the revised + requirements in ISO/IEC 23000-22:2019/Amd. 2:2021 Section + 7.3.6.7. + * CVE-2023-6350: Out of bounds memory to alphaItemIndices (boo#1217614) + * CVE-2023-6351: use-after-free in colorProperties (boo#1217615) +- drop fix-gdkpixbuf.patch + +------------------------------------------------------------------- Old: ---- fix-gdkpixbuf.patch libavif-1.0.0.tar.gz New: ---- libavif-1.0.2.tar.gz BETA DEBUG BEGIN: Old: * CVE-2023-6351: use-after-free in colorProperties (boo#1217615) - drop fix-gdkpixbuf.patch BETA DEBUG END: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libavif.spec ++++++ --- /var/tmp/diff_new_pack.RwJorM/_old 2023-11-30 21:59:47.033661751 +0100 +++ /var/tmp/diff_new_pack.RwJorM/_new 2023-11-30 21:59:47.037661898 +0100 @@ -16,6 +16,9 @@ # +# Also update baselibs.conf if you bump the version +%global lib_soversion 16 +%global lib_name libavif%{lib_soversion} %if 0%{?suse_version} >= 1550 %bcond_without aom %bcond_without yuv @@ -23,13 +26,8 @@ %bcond_with aom %bcond_with yuv %endif - -# Also update baselibs.conf if you bump the version -%global lib_soversion 16 -%global lib_name libavif%{lib_soversion} - Name: libavif -Version: 1.0.0 +Version: 1.0.2 Release: 0 Summary: Library for encoding and decoding .avif files License: BSD-2-Clause @@ -37,11 +35,10 @@ URL: https://github.com/AOMediaCodec/libavif Source: https://github.com/AOMediaCodec/libavif/archive/v%{version}/%{name}-%{version}.tar.gz Source99: baselibs.conf -# PATCH-FIX-UPSTREAM https://github.com/AOMediaCodec/libavif/pull/1528 -Patch0: fix-gdkpixbuf.patch +BuildRequires: c++_compiler BuildRequires: cmake -BuildRequires: gcc-c++ BuildRequires: libjpeg8-devel +BuildRequires: pkgconfig BuildRequires: pkgconfig(dav1d) BuildRequires: pkgconfig(gdk-pixbuf-2.0) BuildRequires: pkgconfig(glib-2.0) @@ -97,10 +94,10 @@ A pixbuf-loader plugin to load AVIF images in GTK+ applications. %package devel -Requires: %{lib_name} = %{version}-%{release} # Summary: Development files for libavif Group: Development/Libraries/C and C++ +Requires: %{lib_name} = %{version}-%{release} %description devel This library aims to be a friendly, portable C implementation of the AV1 Image @@ -148,6 +145,7 @@ %{_bindir}/avifenc %files -n gdk-pixbuf-loader-libavif +%license LICENSE %{_libdir}/gdk-pixbuf-2.0/*/loaders/libpixbufloader-avif.so %dir %{_datadir}/thumbnailers %{_datadir}/thumbnailers/avif.thumbnailer ++++++ libavif-1.0.0.tar.gz -> libavif-1.0.2.tar.gz ++++++ /work/SRC/openSUSE:Factory/libavif/libavif-1.0.0.tar.gz /work/SRC/openSUSE:Factory/.libavif.new.25432/libavif-1.0.2.tar.gz differ: char 29, line 1
