Hello community, here is the log from the commit of package libidn2 for openSUSE:Factory checked in at 2016-10-26 21:48:32 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libidn2 (Old) and /work/SRC/openSUSE:Factory/.libidn2.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libidn2" Changes: -------- New Changes file: --- /dev/null 2016-09-15 12:42:18.240042505 +0200 +++ /work/SRC/openSUSE:Factory/.libidn2.new/libidn2.changes 2016-10-26 21:48:33.000000000 +0200 @@ -0,0 +1,399 @@ +------------------------------------------------------------------- +Fri Oct 21 09:40:22 UTC 2016 - [email protected] + +- Convert to libidn2 package started to being used, namely by curl +- Alternative implementation based on new specification from 2008 + + completely different codebase with no ties to libidn + +------------------------------------------------------------------- +Wed Jul 20 21:01:13 UTC 2016 - [email protected] + +- libidn 1.33: + * bnc#990189 CVE-2015-8948 CVE-2016-6262 + * bnc#990190 CVE-2016-6261 + * bnc#990191 CVE-2016-6263 + * libidn: Fix out-of-bounds stack read in idna_to_ascii_4i. + * idn: Solve out-of-bounds-read when reading one zero byte as input. + * libidn: stringprep_utf8_nfkc_normalize reject invalid UTF-8. + +------------------------------------------------------------------- +Thu Aug 13 19:10:23 UTC 2015 - [email protected] + +- Update to 1.32 + * libidn: Fix crash in idna_to_unicode_8z8z and + idna_to_unicode_8zlz. This problem was introduced in 1.31. + * API and ABI is backwards compatible with the previous version. +- Update gpg keyring + +------------------------------------------------------------------- +Thu Jul 9 08:22:18 UTC 2015 - [email protected] + +- Add Apache-2.0 license to the license line. Under this is the + java code, but we don't build it -> just the sources license + +------------------------------------------------------------------- +Thu Jul 9 07:54:25 UTC 2015 - [email protected] + +- Version bump to 1.31: + * Fixes bnc#923241 CVE-2015-2059 out-of-bounds read with stringprep on + invalid UTF-8 + * Few other triv changes + +------------------------------------------------------------------- +Fri Mar 13 13:49:20 UTC 2015 - [email protected] + +- Version bump to 1.30: + * punycode.{c,h} files were reimported +- Cleanup with spec-cleaner + +------------------------------------------------------------------- +Mon Oct 20 13:10:56 UTC 2014 - [email protected] + +- update version 1.29: + * libidn: Mark internal variable "g_utf8_skip" as static. + * idn: Flush stdout to simplify for tools that buffer too heavily. + * i18n: Added Brazilian Portuguese translation. + * Update gnulib files. + * API and ABI is backwards compatible with the previous version. + +------------------------------------------------------------------- +Thu Dec 19 12:22:05 UTC 2013 - [email protected] + +- disable gpg-offline again to avoid build cycles + +------------------------------------------------------------------- +Wed Dec 18 09:50:29 UTC 2013 - [email protected] + +- Verify source tarball via gpg-offline + +------------------------------------------------------------------- +Sat Dec 14 16:57:39 UTC 2013 - [email protected] + +- Fix gnulib test failure due to SUSE_ASNEEDED. + +------------------------------------------------------------------- +Mon Sep 23 14:35:40 UTC 2013 - [email protected] + +- Version bump to 1.28: + * java buildfixes + * translation updates + * improved unit-tests + * for more read NEWS file + +------------------------------------------------------------------- +Fri Sep 21 16:21:41 UTC 2012 - [email protected] + +- Employ shared library package naming + +------------------------------------------------------------------- +Tue Jun 5 08:41:26 UTC 2012 - [email protected] + +-Update to 1.25: + * MSVC: Build fixes related to _GL_ATTRIBUTE_CONST and + _GL_ATTRIBUTE_PURE. + Reported by Bartosz Brachaczek <[email protected]>. + * examples: Fix compiler warning about ignoring return value from + fgets. + * tests: Ship with a valgrind suppressions file for the strlen + issue. + * Update gnulib files and translations. + * API and ABI is backwards compatible with the previous version. + +------------------------------------------------------------------- +Sun May 13 11:40:34 UTC 2012 - [email protected] + +- Upgrade to version 1.24 + * Libraries are re-licensed from LGPLv2+ to dual-GPLv2+|LGPLv3+. + * build: Fix parallel Windows builds. + Reported by René Berber + * libidn: Fix potential infloop in pr29 code. + Reported by Jon Nelson <address@hidden> in + http://lists.gnu.org/archive/html/help-libidn/2012-01/msg00008.html + * libidn: Add 'const' keyword to 'stringprep_ucs4_nfkc_normalize' function. + * Sync glib NFKC code and improve copyright/license statements. + * Update gnulib files and translations. + * API and ABI is backwards compatible with the previous version. + +------------------------------------------------------------------- +Mon Dec 26 16:02:38 UTC 2011 - [email protected] + +- Remove redundant tags/sections + +------------------------------------------------------------------- +Mon Dec 26 14:01:29 UTC 2011 - [email protected] + +- fix URL + +------------------------------------------------------------------- +Mon Dec 26 05:47:14 UTC 2011 - [email protected] + +- Update to version 1.23 +- Run spec cleaner + +------------------------------------------------------------------- +Sat Oct 1 01:39:54 UTC 2011 - [email protected] + +- Do not build gtk-docs +- make check hangs in qemu-arm, workaround the bugs. + +------------------------------------------------------------------- +Fri Jun 10 09:20:15 UTC 2011 - [email protected] + +- Fixed typo in description of libidn.spec + +------------------------------------------------------------------- +Sat May 7 00:16:43 UTC 2011 - [email protected] + +- Upgrade to version 1.22 + * Fix memory leak when idna_to_ascii_4i fails + * Fix ToUnicode case-insensitivity bug + * Avoid some warnings to make it build with modern gcc on amd64. + +------------------------------------------------------------------- +Tue Dec 15 19:58:00 CET 2009 - [email protected] + +- add baselibs.conf as a source + +------------------------------------------------------------------- +Tue Oct 6 16:28:16 UTC 2009 - [email protected] + +- update to version 1.15 + * support GCC visibility features + +------------------------------------------------------------------- +Wed Jan 7 12:34:56 CET 2009 - [email protected] + +- obsolete old -XXbit packages (bnc#437293) + +------------------------------------------------------------------- +Tue Oct 14 21:16:52 CEST 2008 - [email protected] + +- disable static libraries + +------------------------------------------------------------------- +Tue Oct 7 10:17:16 CEST 2008 - [email protected] + +- update to 1.10: + * idn: accept -n as short form for --nfkc. + * Fix compiler warnings, updated gnulib files and translations + +------------------------------------------------------------------- +Mon Jul 21 15:09:40 CEST 2008 - [email protected] + +- update to 1.9: + * idn: fix error message when NFKC fails, and other translations + * Remove more non-free text from doc/specifications/rfc3454.txt. + +------------------------------------------------------------------- +Thu Apr 24 10:18:31 CEST 2008 - [email protected] + +- update to 1.8: no functional changes + +------------------------------------------------------------------- +Mon Apr 14 08:28:55 CEST 2008 - [email protected] + +- update to 1.7: + * new parameter --nfkc to process string with Unicode v3.2 NFKC + ++++ 202 more lines (skipped) ++++ between /dev/null ++++ and /work/SRC/openSUSE:Factory/.libidn2.new/libidn2.changes New: ---- baselibs.conf libidn2-0.10.tar.gz libidn2-no-examples-build.patch libidn2.changes libidn2.spec ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libidn2.spec ++++++ # # spec file for package libidn # # Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed # upon. The license for this file, and modifications and additions to the # file, is the same license as for the pristine package itself (unless the # license for the pristine package is not an Open Source License, in which # case the license is the MIT License). An "Open Source License" is a # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. # Please submit bugfixes or comments via http://bugs.opensuse.org/ # %define lname libidn2-0 Name: libidn2 Version: 0.10 Release: 0 Summary: Support for Internationalized Domain Names (IDN) based on IDNA2008 License: GPL-3.0+ Group: Development/Libraries/C and C++ Url: https://www.gnu.org/software/libidn/#libidn2 Source0: http://alpha.gnu.org/gnu/libidn/%{name}-%{version}.tar.gz Source3: baselibs.conf # PATCH-FIX-UPSTREAM: do not build non-installed examples needlessly Patch0: libidn2-no-examples-build.patch BuildRequires: pkgconfig Requires(post): %{install_info_prereq} BuildRoot: %{_tmppath}/%{name}-%{version}-build %description An implementation of the IDNA2008 specifications (RFCs 5890, 5891, 5892, 5893) %package tools Summary: Command line utility to convert Int. Domain Names Group: Productivity/Networking/DNS/Utilities %description tools An implementation of the IDNA2008 specifications (RFCs 5890, 5891, 5892, 5893) %package -n %{lname} Summary: Support for Internationalized Domain Names (IDN) Group: System/Libraries %description -n %{lname} An implementation of the IDNA2008 specifications (RFCs 5890, 5891, 5892, 5893) %package devel Summary: Include Files and Libraries mandatory for Development Group: Development/Libraries/C and C++ Requires: %{lname} = %{version} %description devel An implementation of the IDNA2008 specifications (RFCs 5890, 5891, 5892, 5893) %prep %setup -q %patch0 -p1 %build %configure \ --disable-rpath \ --disable-silent-rules \ --disable-static \ --disable-gtk-doc make %{?_smp_mflags} %install make %{?_smp_mflags} DESTDIR=%{buildroot} install find %{buildroot} -type f -name "*.la" -delete -print # Do not bother with partial gtkdoc rm -rf %{buildroot}/%{_datadir}/gtk-doc/ %check make check %{?_smp_mflags} %post tools %install_info --info-dir=%{_infodir} %{_infodir}/libidn2.info.* %preun tools %install_info_delete --info-dir=%{_infodir} %{_infodir}/libidn2.info.* %post -n %{lname} -p /sbin/ldconfig %postun -n %{lname} -p /sbin/ldconfig %files tools %defattr(-,root,root) %doc AUTHORS COPYING* ChangeLog NEWS README %{_infodir}/libidn* %{_bindir}/idn2 %{_mandir}/man1/idn2.1%{ext_man} %files -n %{lname} %defattr(-,root,root) %{_libdir}/libidn2.so.* %files devel %defattr(-,root,root) %{_libdir}/libidn2.so %{_includedir}/*.h %{_mandir}/man3/* %changelog ++++++ baselibs.conf ++++++ libidn2-0 ++++++ libidn2-no-examples-build.patch ++++++ Index: libidn2-0.10/Makefile.am =================================================================== --- libidn2-0.10.orig/Makefile.am +++ libidn2-0.10/Makefile.am @@ -15,7 +15,7 @@ DISTCHECK_CONFIGURE_FLAGS = --enable-gtk-doc -SUBDIRS = gl . src doc examples tests +SUBDIRS = gl . src doc tests ACLOCAL_AMFLAGS = -I m4 -I gl/m4 EXTRA_DIST = gl/m4/gnulib-cache.m4 Index: libidn2-0.10/Makefile.in =================================================================== --- libidn2-0.10.orig/Makefile.in +++ libidn2-0.10/Makefile.in @@ -596,7 +596,7 @@ top_build_prefix = @top_build_prefix@ top_builddir = @top_builddir@ top_srcdir = @top_srcdir@ DISTCHECK_CONFIGURE_FLAGS = --enable-gtk-doc -SUBDIRS = gl . src doc examples tests +SUBDIRS = gl . src doc tests ACLOCAL_AMFLAGS = -I m4 -I gl/m4 EXTRA_DIST = gl/m4/gnulib-cache.m4 gen-tables-from-rfc5892.pl \ gen-tables-from-iana.pl
