Hello community,
here is the log from the commit of package python-reportlab.11889 for
openSUSE:Leap:15.1:Update checked in at 2020-02-04 10:13:23
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Leap:15.1:Update/python-reportlab.11889 (Old)
and /work/SRC/openSUSE:Leap:15.1:Update/.python-reportlab.11889.new.26092
(New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-reportlab.11889"
Tue Feb 4 10:13:23 2020 rev:1 rq:768349 version:3.4.0
Changes:
--------
New Changes file:
--- /dev/null 2019-12-19 10:12:34.003146842 +0100
+++
/work/SRC/openSUSE:Leap:15.1:Update/.python-reportlab.11889.new.26092/python-reportlab.changes
2020-02-04 10:13:23.409479188 +0100
@@ -0,0 +1,202 @@
+-------------------------------------------------------------------
+Wed Jan 22 17:10:15 CET 2020 - Matej Cepl <[email protected]>
+
+- Add make_toColor_safe.patch fixing bsc#1154370 (CVE-2019-17626)
+ restrict reportlab.lib.color.toColor to protect against unsafe
+ input.
+- Rebase other patches: drop-requirements.patch and
+ reportlab-missing-includes.patch
+
+-------------------------------------------------------------------
+Tue Jul 25 14:45:47 UTC 2017 - [email protected]
+
+- drop-requirements.patch: do not list setuptools and pip in egg-info
+ as requirements
+ (fixes bsc#1049516, upstream issue
https://bitbucket.org/rptlab/reportlab/issues/113 )
+- set LANG variable correctly to help with test suite
+ * note that test suite is broken, multiple tests fail and this does not stop
build
+ * causes of failure are spurious though
+
+-------------------------------------------------------------------
+Sat May 6 03:31:54 UTC 2017 - [email protected]
+
+- Fix Provides/Obsoletes.
+
+-------------------------------------------------------------------
+Wed Apr 19 20:33:58 UTC 2017 - [email protected]
+
+- Update to 3.4.0
+ * We now support SVG as a format for embedded vector graphics.
+ * The <barCodeFlowable> and <barCode> tags now support additional
+ encodings.
+ * We have considerably expanded our support for fillable forms
+ within PDF files. The <textField> tag has many more attributes
+ <checkboxField>, <radioField>, <choiceField> & <listboxField>
+ which along with the new <textField> make possible PDF forms.
+ * The <ul> & <ol> tags now support automatic style change for the
+ start/type parameter, by using a space separated list fo start
+ values
+- Implement single-spec version
+
+-------------------------------------------------------------------
+Tue Mar 29 22:22:27 UTC 2016 - [email protected]
+
+- install LICENSE.txt
+
+-------------------------------------------------------------------
+Sat Nov 7 10:47:45 UTC 2015 - [email protected]
+
+- Fixed source download link.
+
+-------------------------------------------------------------------
+Fri Jun 5 07:15:04 UTC 2015 - [email protected]
+
+- Update to 3.2.0
+ * Added proportional underlining specific to font sizes, set via
+ the `underlineProportion` attribute of ParagraphStyles.
+ * TrueType fonts: added support for cmaps 10 & 13
+ * DocTemplate class now supports a boolean `displayDocTitle` argument.
+ * TableofContents now supports a formatter argument to allow
+ formatting of the displayed page numbers (eg for appendices etc).
+ * Table `repeatRows` can now be a tuple of row numbers to allow
+ incomplete ranges of rows to be repeated.
+ * Tables now do pass instance.`spaceBefore` & `spaceAfter` to
+ their split children when split
+ * Several strangenesses were fixed in the pdfbase.pdfform module;
+ Multiple usage is now allowed.
+ * Error message fixes
+ * Various environment fixes for Google Application Environment
+ * Resource fixes
+ * PDFDoc can now set the `Lang` attribute
+ * canvas.drawString and similar now allow the character spacing
+ to be set
+ * Index of accented stuff has been improved
+ * RTL code was improved
+ * fix Propertyset.clone
+ * `flowables.py`: fix ImageAndFlowables so it avoids testing
+ negative availableWidth
+
+-------------------------------------------------------------------
+Fri Jun 5 07:15:03 UTC 2015 - [email protected]
+
+- Update to 3.1
+ * support for emoji
+ * improved pip-based installers
+
+-------------------------------------------------------------------
+Fri Jun 5 07:15:02 UTC 2015 - [email protected]
+
+- Update to 3.0
+ * ReportLab 3.0 now supports Python 2.7, 3.3 and higher.
+ * There has been a substantial internal rewrite to ensure
+ consistent use of unicode strings for natural-language text,
+ and of bytes for all file format internals.
+ * Python 3.x compatibility
+ * New features
+ - Add ability to output greyscale and 1-bit PIL images without
+ conversion to RGB. (contributed by Matthew Duggan)
+ - highlight annotation (contributed by Ben Echols)
+ * Other
+ - numerous very minor fixes, visible through BitBucket.
+
+-------------------------------------------------------------------
+Sun Nov 24 18:38:52 UTC 2013 - [email protected]
+
+- Update to version 2.7
+ * Charts / graphics enhancements
+ - Added SimpleTimeSeriesPlot
+ - added _computeMaxSpace
+ - added in lineStyle (for bars)
+ - improved SVG rendering
+ - Pie Chart now has an `innerRadiusFraction` to allow doughnut-like
+ appearance for 2d charts
+ * Charts/graphics bug fixes
+ - piecharts.py: fix Pie3d __init__ to call its superclass
+ - linecharts.py: fix swatch creation
+ - fixed `y` axis in the simple time series plot
+ * PDF
+ - Fixes to testshapes & pdfform resetting
+ - colors.py
+ - various minor fixes
+ * Platypus
+ - Defined a small bullet rather than a big circle as the default for
unordered lists
+ - fixed attribute spelling bug
+ - fixed CJK + endDots
+
+-------------------------------------------------------------------
+Sun Nov 24 18:38:51 UTC 2013 - [email protected]
+
+- Update to version 2.7
+ + No relative ChangeLog entry
+
+-------------------------------------------------------------------
+Thu Jan 24 20:09:08 UTC 2013 - [email protected]
+
+- Update to version 2.6:
+ * General changes
+ - Manuals have been reformatted with more pleasing code snippets and
tables of
+ contents, and reviewed and expanded
+ * Flowing documents (Platypus):
+ - Added support for HTML-style list objects
+ - Added flexible mechanism for drawing bullets
+ - Allowed XPreformatted objects to use Asian line wrapping
+ - Added an 'autoNextPageTemplate' attribute to PageTemplates. For example
you
+ can now set up a 'chapter first page template' which will always be
followed
+ by a 'continuation template' on the next page break, saving the
programmer from
+ having to issue control flow commands in the story.
+ - added a TopPadder flowable, which will 'wrap' another Flowable and move
it
+ to the bottom of the current page.
+ - More helpful error messages when large tables cannot be rendered
+ - Documentation for images within text (test_032_images)
+ - Trailing dots for use on contents pages
+ * Charts and graphics:
+ - Support for UPCA bar codes
+ - We now have a semi-intelligent system for labelling pie charts with
+ callout lines. Thanks to James Martin-Collar, a maths student at
Warwick
+ University, who did this as his summer internship.
+ - Axes - added startOffset and endOffset properties; allowed for axis
+ background annotations.
+ - Bar charts - allow more control of z Index (i.e. drawing order of axes
and
+ lines)
+ - Pie charts - fixed bugs in 3d appearance
+ - SVG output back end has seen some bugs fixed and now outputs resizeable
SVG
+
+-------------------------------------------------------------------
+Fri May 25 11:35:57 UTC 2012 - [email protected]
+
+- Clean up spec file
+
+-------------------------------------------------------------------
+Thu Dec 8 13:54:44 UTC 2011 - [email protected]
+
+- fix license to be in spdx.org format
+
+-------------------------------------------------------------------
+Tue Sep 20 13:57:44 UTC 2011 - [email protected]
+
+- Fix non-executable bit rpmlint warning
+
+-------------------------------------------------------------------
+Mon May 30 15:16:43 UTC 2011 - [email protected]
+
+- Add Provides and Obsoletes to python-ReportLab in spec file to
+ better behaviour in 11.1.
+
+-------------------------------------------------------------------
+Tue Apr 12 13:53:36 UTC 2011 - [email protected]
+
+- Update to 2.5:
+ - Please readme CHANGES.txt.
+- Regenerate spec file with py2pack;
+- Add CHANGES.txt and README.txt files as documentation;
+- Bzip2 source code.
+
+-------------------------------------------------------------------
+Thu Jan 21 17:22:43 UTC 2010 - [email protected]
+
+- Update to 2.4.
++++ 5 more lines (skipped)
++++ between /dev/null
++++ and
/work/SRC/openSUSE:Leap:15.1:Update/.python-reportlab.11889.new.26092/python-reportlab.changes
New:
----
drop-requirements.patch
make_toColor_safe.patch
python-reportlab.changes
python-reportlab.spec
reportlab-3.4.0.tar.gz
reportlab-missing-includes.patch
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ python-reportlab.spec ++++++
#
# spec file for package python-reportlab
#
# Copyright (c) 2020 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
%{?!python_module:%define python_module() python-%{**} python3-%{**}}
%define oldpython python
%bcond_without tests
Name: python-reportlab
Version: 3.4.0
Release: 0
Summary: The Reportlab Toolkit
License: BSD-3-Clause
Group: Development/Languages/Python
URL: https://www.reportlab.com/
Source:
https://files.pythonhosted.org/packages/source/r/reportlab/reportlab-%{version}.tar.gz
Patch0: reportlab-missing-includes.patch
# PATCH-FIX-UPSTREAM drop unneeded requirements
https://bitbucket.org/rptlab/reportlab/issues/113
Patch1: drop-requirements.patch
# PATCH-FIX-UPSTREAM} make_toColor_safe.patch bsc#1154370 [email protected]
# make toColor function safer, CVE-2019-17626
Patch2: make_toColor_safe.patch
BuildRequires: %{python_module Pillow}
BuildRequires: %{python_module devel}
BuildRequires: %{python_module setuptools}
BuildRequires: %{python_module xml}
BuildRequires: fdupes
BuildRequires: freetype2-devel
BuildRequires: python-rpm-macros
Requires: python-Pillow
%ifpython2
Obsoletes: %{oldpython}-ReportLab < %{version}
Provides: %{oldpython}-ReportLab = %{version}
%endif
%ifpython3
Provides: python3-ReportLab = %{version}
Obsoletes: python3-ReportLab < %{version}
%endif
%python_subpackages
%description
The ReportLab Toolkit. An Open Source Python library for generating PDFs and
graphics.
%prep
%setup -q -n reportlab-%{version}
%autopatch -p1
sed -i "1d"
src/reportlab/lib/{formatters,fonts,corp,units,pagesizes,__init__,randomtext,logger,normalDate}.py
sed -i "1d"
src/reportlab/graphics/{widgets/table,barcode/test,testdrawings,testshapes}.py
# Fix non-executable bits
%build
export CFLAGS="%{optflags}"
%python_build
%install
%python_install
%python_expand %fdupes %{buildroot}%{$python_sitearch}
%if %{with tests}
%check
export LANG=en_US.UTF-8
%python_exec setup.py tests
%endif
%files %{python_files}
%license LICENSE.txt
%doc CHANGES.md README.txt
%{python_sitearch}/reportlab/
%{python_sitearch}/reportlab-%{version}-py*.egg-info
%changelog
++++++ drop-requirements.patch ++++++
--- a/setup.py
+++ b/setup.py
@@ -539,7 +539,7 @@ def main():
],
#this probably only works for setuptools, but distutils seems to
ignore it
- install_requires=['pillow>=2.4.0','pip>=1.4.1', 'setuptools>=2.2'],
+ install_requires=['pillow>=2.4.0'],
)
print()
print('########## SUMMARY INFO #########')
++++++ make_toColor_safe.patch ++++++
++++ 1841 lines (skipped)
++++++ reportlab-missing-includes.patch ++++++
--- a/src/rl_addons/renderPM/gt1/gt1-namecontext.c
+++ b/src/rl_addons/renderPM/gt1/gt1-namecontext.c
@@ -1,6 +1,10 @@
/* A module for a simple "name context", i.e. lisp-style atoms */
#include "gt1-misc.h"
+#include <string.h>
+#include <stdio.h>
+#include <unistd.h>
+#include <sys/socket.h>
#include "gt1-namecontext.h"
#if defined(_WIN32) || defined(macintosh)