Hello community, here is the log from the commit of package liblouis for openSUSE:Leap:15.2 checked in at 2020-01-30 14:48:29 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Leap:15.2/liblouis (Old) and /work/SRC/openSUSE:Leap:15.2/.liblouis.new.26092 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "liblouis" Thu Jan 30 14:48:29 2020 rev:23 rq:751797 version:3.11.0 Changes: -------- --- /work/SRC/openSUSE:Leap:15.2/liblouis/liblouis.changes 2020-01-15 15:21:54.222458719 +0100 +++ /work/SRC/openSUSE:Leap:15.2/.liblouis.new.26092/liblouis.changes 2020-01-30 14:49:01.538858592 +0100 @@ -2 +2 @@ -Mon Mar 11 19:47:11 UTC 2019 - [email protected] +Tue Nov 19 16:01:51 UTC 2019 - Michael Gorse <[email protected]> @@ -4,2 +4,117 @@ -- Add CVE-2018-17294.patch: fix a buffer overflow translating - strings, backported from upstream (boo#1109319 CVE-2018-17294). +- Update to version 3.11.0: + + A tremendous amount of work by Dave Mielke and Bert Frees + has gone into this release. They have improved liblouis for use + on note taker devices, for backwards translation and a number + of languages. Many other contributors (listed below) have also + helped in fixing bugs and improving braille tables, such as + Dutch, Mongolian, Polish, Ancient Greek, Danish, Irish, + Chinese, and American Braille Computer Code. + + New features: + - Enable ~always~ rules with a single character and a single + braille cell for back-translation. + - Implement ~noUndefined~ mode for forward translation. + - Use fallback braille representations (NABCC) for rendering + undefined characters in hexadecimal notation. + - Always render undefined characters, also ASCII characters, in + hexadecimal notation. + - Add a new metadata field ~index-name~ for selecting a table + from a list fast and efficiently. It has the most important + information first and no redundant information. It should + look nice when sorted. This in contrast to the existing + ~display-name~ field which is for describing a table + accurately and should sound good. + + Bug fixes: + - Don't let a caps passage end on a word with no letters. + - Handle word resets in the last word of an caps or emphasis + passage if the end indicator was placed before the word. + - Never convert to lowercase if ~capsletter~ is not defined. + - Fix position mapping for back-translation when ~noUndefined~ + mode is active. + - Fix bug where a translation would hang on words that match + both a ~nocont~ and a ~repeated~ rule. + - Fix bug where the effect of ~capsnocont~ would leak to the + next word if that word starts with a capital. + + Braille table improvements. + + Other changes: + - The python wrapper now encodes and decodes strings to/from + UTF-16 and UTF-32 using the surrogatepass error handler. This + ensures that single UTF-16 surrogate characters are processed + correctly by the wrapper and don't raise an encoding/decoding + error. + - Metadata keys and values are now case insensitive. + - Remove ~unicodedefs.cti~. It was obsolete and never meant + to be included by any tables. Instead use the online + references as mentioned in the documentation now. + - ~lou_checkyaml~ test reporting has been improved. + - Hyphenation tables have been removed from tables except + those needed for ~nocross~ rules. + - ~lou_hyphenate~ can now handle more than just words + (sequences of letters), e.g compound words. + + Deprecation notice: - The ~noUndefinedDots~ mode has been + renamed to ~noUndefined~. For backwards compatibility + ~noUndefinedDots~ is still available in the header file and in + the Python bindings, as an alias for ~noUndefined~. + + Backwards incompatible changes: None. + + Changes in version 3.10.0: + + This release comes across as quiet, containing just the usual + assortment of braille table improvements, cleanups, bug fixes + and the classic buffer overflow patches. But beware, a lot has + happened behind the scenes. Bert and Davy have been adding a + new opcode to handle special emphasis situations. A number of + annoying restrictions with regards to names, such as class + names have been removed thank to Bert. And lastly + also thanks to Bert it is now possible to define inline display + tables in your YAML tests. + + New features: + - Add a new opcode ~emphmodechars~. + + Bug fixes + - Remove memoization in ~checkAttr~. It wasn't implemented + correctly, caused some weird bugs and probably didn't do much + for performance. + - Fix multiple buffer overflows in ~compilePassOpcode~. + - Fix a build problem when building without libyaml. + + Braille table improvements. + + Other changes: + - Remove various restrictions on which characters and braille + cells can be used in translation rules. + - Remove some code duplication in ~pattern.c~. + - It is now also possible to define inline tables when a display + table has been defined. + + Deprecation notice: None. + + Backwards incompatible changes: None. + + Changes in version 3.9.0: + + This release has seen a tremendous amount of work by Bert + Frees. He was instrumental in pushing the improvements for + Latvian, Norwegian and Slovenian. But most prominently he + pushed the big change for space and control character + handling through the door. These characters are now no longer + hard coded in liblouis. This should solve a few long standing + issues. Other than that there is the usual assortment of code + improvements and cleanups. + + New features: None. + + Bug fixes: + - Fix a problem in the callback registration in the Python + bindings. + - Fixed memory leaks created by block scope compound literals. + - The hard coded rules dealing with white space have been + replaced with a normal table that is included in all tables. + This fixes a number of bugs to do with space and control + characters. This (big) change has been brewing for a couple + of releases and has finally landed. + + Braille table improvements. + + Other changes: + - Don't search for tables in ~/usr/local/share/liblouis/tables~ + (or the Windows equivalent) if ~LOUIS_TABLEPATH~ is set. + - The log levels in ~liblouis.h~ are no longer exposed as + ~LOG_FOO~ but instead are now prefixed. So ~LOG_WARN~ becomes + ~LOU_LOG_WARN~ for example to issue a warning from a C + program using liblouis. The actual values remain the same, + so the ABI remains stable. + ** Deprecation notice + - The ~locale~ opcode was never implemented and was just + silently ignored. It is now removed from the tables and a + warning will be issued if it is found in a table. +- Drop + gcc9-fixed-memory-leaks-created-by-block-scope-compound-l.patch + fixed upstream. +- Sover is now 19. @@ -8 +123 @@ -Fri Aug 17 18:44:58 UTC 2018 - [email protected] +Fri Mar 29 14:37:44 UTC 2019 - [email protected] @@ -10,8 +125,156 @@ -- Add several security fixes: - CVE-2018-11410.patch (boo#1094685 CVE-2018-11410) - CVE-2018-11440.patch (boo#1095189 CVE-2018-11440) - CVE-2018-11577.patch (boo#1095945 CVE-2018-11577) - CVE-2018-11683.patch (boo#1095827 CVE-2018-11683) - CVE-2018-11684.patch (boo#1095826 CVE-2018-11684) - CVE-2018-11685.patch (boo#1095825 CVE-2018-11685) - CVE-2018-12085.patch (boo#1097103 CVE-2018-12085) +- Require libyaml-devel so that yaml tests are run (bsc#1130813). + +------------------------------------------------------------------- +Fri Feb 22 11:55:18 UTC 2019 - Martin Liška <[email protected]> + +- Add gcc9-fixed-memory-leaks-created-by-block-scope-compound-l.patch + (boo#1122169). + +------------------------------------------------------------------- +Wed Jan 16 11:09:58 UTC 2019 - Martin Liška <[email protected]> + +- Use %make_build in order to build the package in parallel way. + Add make check. + +------------------------------------------------------------------- +Sun Jan 6 01:29:27 UTC 2019 - [email protected] + +- Update to version 3.8.0: + + Noteworthy changes in this release: The major focus of this + release is on braille table updates. There are major updates to + German, Arabic, Chinese, Turkish, Dutch, Czech, Latvian, + Spanish and Ethiopic. Some of these new tables have only been + possible because Bert Frees fixed some nasty long standing bugs + behind the scene. Also there is the usual assortment of code + improvements and cleanups. + + New features: None. + + Bug fixes: + - Fix support more than 4 classes. + - Fix capitalization of words that match nocont rules. + + Braille table improvements. + + Other changes: Updated the lou_allround and lou_trace test + tools to include all the mode flags described in the + documentation of the lou_translateString() function. + + Backwards incompatible changes: The pass1Only flag has been + deprecated for a while and is now removed from the code. +- Bump sover define to 17, following upstreams soname bump. + +------------------------------------------------------------------- +Fri Sep 21 20:08:22 UTC 2018 - [email protected] + +- Update to version 3.7.0 (boo#1109319) + + New features + - Added a new opcode ~midendnumericmodechars~. Characters + defined with this opcode can appear in the middle or at the + end of a number without canceling numeric mode. + + Bug fixes + - Fix another stack-based buffer overflow in input parsing + reported by Henri Salo thanks to Christian Egli. + - Fix input/output positions for back-translation. + - Major improvements in the back-translation of capitalized words + - Fixed a problem in the back-translation of numbers in + conjunction with punctuation and letters. + - Fix a buffer overflow in ~matchCurrentInput~. + + Braille table improvements + + Other changes + - Added documentation of opcodes which were previously + introduced as part of the UEB work. + - Removal of the code for the /scripting language/ for + multipass opcodes. This code was originally introduced in + 2012 but never documented. Consequently it was never used. + Meanwhile the original code for multipass opcodes was much + improved. So there is no more need for this (duplicate) + code and we are removing it. ++++ 93 more lines (skipped) ++++ between /work/SRC/openSUSE:Leap:15.2/liblouis/liblouis.changes ++++ and /work/SRC/openSUSE:Leap:15.2/.liblouis.new.26092/liblouis.changes Old: ---- CVE-2018-11410.patch CVE-2018-11440.patch CVE-2018-11577.patch CVE-2018-11683.patch CVE-2018-11684.patch CVE-2018-11685.patch CVE-2018-12085.patch CVE-2018-17294.patch liblouis-3.3.0.tar.gz New: ---- liblouis-3.11.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ liblouis.spec ++++++ --- /var/tmp/diff_new_pack.BfKmYG/_old 2020-01-30 14:49:01.958858816 +0100 +++ /var/tmp/diff_new_pack.BfKmYG/_new 2020-01-30 14:49:01.962858817 +0100 @@ -1,7 +1,7 @@ # # spec file for package liblouis # -# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -12,41 +12,28 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# Please submit bugfixes or comments via https://bugs.opensuse.org/ # +%define sover 19 Name: liblouis -Version: 3.3.0 +Version: 3.11.0 Release: 0 Summary: Two-way braille translator -License: LGPL-3.0+ +License: LGPL-3.0-or-later Group: Productivity/Other -Url: http://liblouis.org/ +URL: http://liblouis.org/ Source0: https://github.com/liblouis/liblouis/releases/download/v%{version}/liblouis-%{version}.tar.gz -# PATCH-FIX-UPSTREAM CVE-2018-11410.patch boo#1094685 [email protected] -- fix a buffer overflow in table parsing. -Patch0: CVE-2018-11410.patch -# PATCH-FIX-UPSTREAM CVE-2018-11440.patch boo#1095189 [email protected] -- fix another buffer overflow in table parsing. -Patch1: CVE-2018-11440.patch -# PATCH-FIX-UPSTREAM CVE-2018-11577.patch boo#1095945 [email protected] -- fix yet another buffer overflow in the braille table parser. -Patch2: CVE-2018-11577.patch -# PATCH-FIX-UPSTREAM CVE-2018-11683.patch boo#1095827 [email protected] -- fix yet another buffer overflow in the braille table parser. -Patch3: CVE-2018-11683.patch -# PATCH-FIX-UPSTREAM CVE-2018-11684.patch boo#1095826 [email protected] -- fix yet another buffer overflow in the braille table parser. -Patch4: CVE-2018-11684.patch -# PATCH-FIX-UPSTREAM CVE-2018-11685.patch boo#1095825 [email protected] -- fix yet another buffer overflow in the braille table parser. -Patch5: CVE-2018-11685.patch -# PATCH-FIX-UPSTREAM CVE-2018-12085.patch boo#1097103 [email protected] -- check index before writing to result->chars. -Patch6: CVE-2018-12085.patch -# PATCH-FIX-UPSTREAM CVE-2018-17294.patch boo#1109319 [email protected] -- fix a buffer overflow. -Patch7: CVE-2018-17294.patch -BuildRequires: pkg-config -PreReq: %install_info_prereq + BuildRequires: fdupes +BuildRequires: libyaml-devel +BuildRequires: pkgconfig BuildRequires: python-rpm-macros BuildRequires: python3 -Requires: liblouis14 = %{version} -BuildRoot: %{_tmppath}/%{name}-%{version}-build +Requires: liblouis%{sover} = %{version} +# FIXME: use proper Requires(pre/post/preun/...) +PreReq: %{install_info_prereq} %description liblouis is a translator from and to braille. It features support for @@ -58,16 +45,16 @@ Included are also tools for testing and debugging tables. -%package -n liblouis14 +%package -n liblouis%{sover} Summary: Two-way braille translator # We used to have a package named liblouis, until 2.4.1. -License: LGPL-3.0+ +License: LGPL-3.0-or-later Group: System/Libraries Requires: %{name}-data >= %{version} Provides: %{name} = %{version} Obsoletes: %{name} < %{version} -%description -n liblouis14 +%description -n liblouis%{sover} liblouis is a translator from and to braille. It features support for computer and literary braille, supports contracted and uncontracted translation for many languages and has support for hyphenation. New @@ -77,9 +64,10 @@ %package data Summary: Data files for the liblouis two-way braille translator -License: LGPL-3.0+ +License: LGPL-3.0-or-later Group: System/Libraries Conflicts: liblouis2 < 3.3.0 +BuildArch: noarch %description data liblouis is a translator from and to braille. It features support for @@ -90,7 +78,7 @@ %package tools Summary: Tools from the liblouis braille translator package -License: GPL-3.0+ +License: GPL-3.0-or-later Group: Productivity/Other %description tools @@ -100,7 +88,7 @@ %package doc Summary: Documentation for the liblouis braille translator -License: LGPL-3.0+ +License: LGPL-3.0-or-later Group: Documentation/Other %description doc @@ -110,9 +98,9 @@ %package devel Summary: Development files for the liblouis braille translator -License: LGPL-3.0+ +License: LGPL-3.0-or-later Group: Development/Libraries/C and C++ -Requires: liblouis14 = %{version} +Requires: liblouis%{sover} = %{version} %description devel liblouis is a translator from and to braille. It features support for @@ -124,9 +112,9 @@ %package -n python3-louis Summary: Python3 bindings for the liblouis braille translator -License: LGPL-3.0+ +License: LGPL-3.0-or-later Group: Development/Languages/Python -Requires: liblouis14 = %{version} +Requires: liblouis%{sover} = %{version} %description -n python3-louis liblouis is a translator from and to braille. It features support for @@ -136,20 +124,11 @@ This subpackage contains the Python3 bindings. %prep -%setup -%patch0 -p1 -%patch1 -p1 -%patch2 -p1 -%patch3 -p1 -%patch4 -p1 -%patch5 -p1 -%patch6 -p1 -%patch7 -p1 +%setup -q %build %configure --disable-static --enable-ucs4 -# TODO: fix Makefile so that -j1 isn't needed -make -j1 +%make_build # build python binding pushd python @@ -162,7 +141,7 @@ %make_install -C doc find %{buildroot} -type f -name "*.la" -delete -print # We'll package them as rpm docs -%{__rm} -f %{buildroot}%{_datadir}/doc/liblouis/liblouis.{html,txt} +rm -f %{buildroot}%{_datadir}/doc/liblouis/liblouis.{html,txt} %fdupes %{buildroot}%{_datadir} %fdupes %{buildroot}%{_libdir} @@ -177,37 +156,35 @@ %preun doc %install_info_delete --info-dir=%{_infodir} %{_infodir}/%{name}.info.gz -%post -n liblouis14 -p /sbin/ldconfig +%post -n liblouis%{sover} -p /sbin/ldconfig +%postun -n liblouis%{sover} -p /sbin/ldconfig -%postun -n liblouis14 -p /sbin/ldconfig +%check +make check %{_smp_mflags} -%files -n liblouis14 -%defattr(-, root, root) -%doc AUTHORS ChangeLog COPYING.LESSER NEWS README +%files -n liblouis%{sover} +%license COPYING.LESSER +%doc AUTHORS ChangeLog NEWS README %{_libdir}/*.so.* %files data -%defattr(-, root, root) %{_datadir}/liblouis/ %files tools -%defattr(-, root, root) -%doc COPYING +%license COPYING + %{_bindir}/lou_* %files doc -%defattr(-, root, root) %doc doc/liblouis.html doc/liblouis.txt -%{_infodir}/%{name}.info.gz +%{_infodir}/%{name}.info%{?ext_info} %files devel -%defattr(-, root, root) %{_libdir}/*.so %{_libdir}/pkgconfig/*.pc %{_includedir}/liblouis %files -n python3-louis -%defattr(-, root, root) %{python3_sitelib}/louis*.egg-info %{python3_sitelib}/louis ++++++ liblouis-3.3.0.tar.gz -> liblouis-3.11.0.tar.gz ++++++ /work/SRC/openSUSE:Leap:15.2/liblouis/liblouis-3.3.0.tar.gz /work/SRC/openSUSE:Leap:15.2/.liblouis.new.26092/liblouis-3.11.0.tar.gz differ: char 5, line 1
