Hello community, here is the log from the commit of package netpbm for openSUSE:Factory checked in at 2018-10-02 19:39:18 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/netpbm (Old) and /work/SRC/openSUSE:Factory/.netpbm.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "netpbm" Tue Oct 2 19:39:18 2018 rev:64 rq:638657 version:10.83.2 Changes: -------- --- /work/SRC/openSUSE:Factory/netpbm/netpbm.changes 2018-07-04 23:53:25.844004713 +0200 +++ /work/SRC/openSUSE:Factory/.netpbm.new/netpbm.changes 2018-10-02 19:39:22.922391308 +0200 @@ -1,0 +2,38 @@ +Wed Sep 26 15:42:52 UTC 2018 - pmonrealgonza...@suse.com + +- updated to 10.83.00 + * Add pamlevels. Thanks Anton Shepelev <anton....@gmail.com>. + * Add pamgetcolor. Thanks Anton Shepelev <anton....@gmail.com>. + * Add rgb-<maxval>:r/g/b color specification format. + * pngtopam: Fix bogus warning of non-square pixels when image does + not contain pixel resolution information. Introduced in Netpbm + 10.48 (September 2009). + * pstopnm: Fix divide-by-zero crash when Postscript input says + the image has zero size. + * pstopnm: Fix divide-by-zero crash when computed resolution + rounds down to zero dots per inch. + * pbmmask: Fix invalid memory reference with zero-dimension + input image. Broken in primordial Netpbm, ca 1989. + [CVE-2018-8975, bsc#1086777] + https://sourceforge.net/p/netpbm/code/3279/ + * libnetpbm: Add pnm_colorspec_rgb_integer, + pnm_colorspec_rgb_norm, pnm_colorspec_rgb_x11, + pnm_colorspec_dict, pnm_colorspec_dict_close. + * libnetpbm: Add pnm_parsecolor2. + * libnetpbm: Add pnm_allocpamtuplen, pnm_freepamtuplen. + * libnetpbm: Make the normalized tuple functions respect the + allocation depth specified in struct pam (member + 'allocation_depth') instead of using the actual tuple depth + (member 'depth'). + * ilbmtoppm: Fix bug: may fail with bogus error message about an + invalid CLUT chunk if image has a CLUT chunk. Introduced after + Netpbm 10.26 (January 2005) and at or before Netpbm 10.35 + (August 2006). + +- Refreshed patch netpbm-security-code.patch + +- Dropped patch fixed upstream netpbm-CVE-2018-8975.patch + +- Renamed script prepare-src-tarball to prepare-src-tarball.sh + +------------------------------------------------------------------- Old: ---- netpbm-10.82.2-documentation.tar.bz2 netpbm-10.82.2-nohpcdtoppm-noppmtompeg.tar.bz2 netpbm-CVE-2018-8975.patch prepare-src-tarball New: ---- netpbm-10.83.2-documentation.tar.bz2 netpbm-10.83.2-nohpcdtoppm-noppmtompeg.tar.bz2 prepare-src-tarball.sh ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ netpbm.spec ++++++ --- /var/tmp/diff_new_pack.PVd1gF/_old 2018-10-02 19:39:23.722390121 +0200 +++ /var/tmp/diff_new_pack.PVd1gF/_new 2018-10-02 19:39:23.722390121 +0200 @@ -17,10 +17,10 @@ %define libmaj 11 -%define libmin 82 +%define libmin 83 %define libver %{libmaj}.%{libmin} Name: netpbm -Version: 10.82.2 +Version: 10.83.2 Release: 0 Summary: A Powerful Graphics Conversion Package License: BSD-3-Clause AND GPL-2.0-or-later AND IJG AND MIT AND SUSE-Public-Domain @@ -29,7 +29,7 @@ Source: netpbm-%{version}-nohpcdtoppm-noppmtompeg.tar.bz2 Source1: netpbm-%{version}-documentation.tar.bz2 Source2: baselibs.conf -Source3: prepare-src-tarball +Source3: prepare-src-tarball.sh # SUSE specific Patch0: %{name}-make.patch Patch3: %{name}-tmpfile.patch @@ -37,7 +37,6 @@ Patch5: %{name}-security-scripts.patch Patch6: %{name}-gcc-warnings.patch Patch7: makeman-py3.patch -Patch8: netpbm-CVE-2018-8975.patch BuildRequires: flex BuildRequires: libjasper-devel BuildRequires: libjpeg-devel @@ -90,7 +89,6 @@ %patch5 -p1 %patch6 -p1 %patch7 -p1 -%patch8 -p1 mkdir pnmtopalm # for %%doc pnmtopalm cp -p converter/other/pnmtopalm/{LICENSE,README} pnmtopalm ++++++ netpbm-10.82.2-documentation.tar.bz2 -> netpbm-10.83.2-documentation.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/netpbm/netpbm-10.82.2-documentation.tar.bz2 /work/SRC/openSUSE:Factory/.netpbm.new/netpbm-10.83.2-documentation.tar.bz2 differ: char 11, line 1 ++++++ netpbm-10.82.2-nohpcdtoppm-noppmtompeg.tar.bz2 -> netpbm-10.83.2-nohpcdtoppm-noppmtompeg.tar.bz2 ++++++ ++++ 12743 lines of diff (skipped) ++++++ netpbm-security-code.patch ++++++ ++++ 1126 lines (skipped) ++++ between /work/SRC/openSUSE:Factory/netpbm/netpbm-security-code.patch ++++ and /work/SRC/openSUSE:Factory/.netpbm.new/netpbm-security-code.patch ++++++ prepare-src-tarball.sh ++++++ #!/bin/sh -x #This script is used to create netpbm-$VER-nohpcdtoppm-nojbig.tar.bz2 #from upstream svn, http://sourceforge.net/projects/netpbm/ rm -rf REMOVE mkdir REMOVE cd REMOVE svn checkout https://svn.code.sf.net/p/netpbm/code/advanced/ netpbm VER=`echo \`cut -f2 -d= netpbm*/version.mk \`|sed -e "s| |.|g"` mv netpbm* netpbm-$VER find . -name ".svn" -exec rm -rf {} \; cd netpbm*/converter/ppm/hpcdtoppm || exit 1 rm -rf * echo all: >> Makefile echo install.bin: >> Makefile echo install.man: >> Makefile echo install.data: >> Makefile echo clean: >> Makefile cd ../../../.. cd netpbm*/converter/ppm/ppmtompeg || exit 1 rm -rf * echo all: >> Makefile echo install.bin: >> Makefile echo install.man: >> Makefile echo install.data: >> Makefile echo clean: >> Makefile cd ../../../.. tar cjf ../netpbm-$VER-nohpcdtoppm-noppmtompeg.tar.bz2 * wget -m netpbm.sourceforge.net tar cjf ../netpbm-$VER-documentation.tar.bz2 netpbm.sourceforge.net
