Hello community,

here is the log from the commit of package python-reportlab.11889 for 
openSUSE:Leap:15.1:Update checked in at 2020-02-04 10:13:23
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Leap:15.1:Update/python-reportlab.11889 (Old)
 and      /work/SRC/openSUSE:Leap:15.1:Update/.python-reportlab.11889.new.26092 
(New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "python-reportlab.11889"

Tue Feb  4 10:13:23 2020 rev:1 rq:768349 version:3.4.0

Changes:
--------
New Changes file:

--- /dev/null   2019-12-19 10:12:34.003146842 +0100
+++ 
/work/SRC/openSUSE:Leap:15.1:Update/.python-reportlab.11889.new.26092/python-reportlab.changes
      2020-02-04 10:13:23.409479188 +0100
@@ -0,0 +1,202 @@
+-------------------------------------------------------------------
+Wed Jan 22 17:10:15 CET 2020 - Matej Cepl <[email protected]>
+
+- Add make_toColor_safe.patch fixing bsc#1154370 (CVE-2019-17626)
+  restrict reportlab.lib.color.toColor to protect against unsafe
+  input.
+- Rebase other patches: drop-requirements.patch and
+  reportlab-missing-includes.patch
+
+-------------------------------------------------------------------
+Tue Jul 25 14:45:47 UTC 2017 - [email protected]
+
+- drop-requirements.patch: do not list setuptools and pip in egg-info
+  as requirements
+  (fixes bsc#1049516, upstream issue 
https://bitbucket.org/rptlab/reportlab/issues/113 )
+- set LANG variable correctly to help with test suite
+  * note that test suite is broken, multiple tests fail and this does not stop 
build
+  * causes of failure are spurious though
+
+-------------------------------------------------------------------
+Sat May  6 03:31:54 UTC 2017 - [email protected]
+
+- Fix Provides/Obsoletes.
+
+-------------------------------------------------------------------
+Wed Apr 19 20:33:58 UTC 2017 - [email protected]
+
+- Update to 3.4.0
+  * We now support SVG as a format for embedded vector graphics.
+  * The <barCodeFlowable> and <barCode> tags now support additional
+    encodings.
+  * We have considerably expanded our support for fillable forms
+    within PDF files. The <textField> tag has many more attributes 
+    <checkboxField>, <radioField>, <choiceField> & <listboxField>
+    which along with the new <textField> make possible PDF forms.
+  * The <ul> & <ol> tags now support automatic style change for the
+    start/type parameter, by using a space separated list fo start
+    values
+- Implement single-spec version
+
+-------------------------------------------------------------------
+Tue Mar 29 22:22:27 UTC 2016 - [email protected]
+
+- install LICENSE.txt
+
+-------------------------------------------------------------------
+Sat Nov  7 10:47:45 UTC 2015 - [email protected]
+
+- Fixed source download link.
+
+-------------------------------------------------------------------
+Fri Jun  5 07:15:04 UTC 2015 - [email protected]
+
+- Update to 3.2.0
+  * Added proportional underlining specific to font sizes, set via
+    the `underlineProportion` attribute of ParagraphStyles. 
+  * TrueType fonts: added support for cmaps 10 & 13
+  * DocTemplate class now supports a boolean `displayDocTitle` argument.
+  * TableofContents now supports a formatter argument to allow
+    formatting of the displayed page numbers (eg for appendices etc).
+  * Table `repeatRows` can now be a tuple of row numbers to allow
+    incomplete ranges of rows to be repeated. 
+  * Tables now do pass instance.`spaceBefore` & `spaceAfter` to
+    their split children when split 
+  * Several strangenesses were fixed in the pdfbase.pdfform module;
+    Multiple usage is now allowed.
+  * Error message fixes
+  * Various environment fixes for Google Application Environment
+  * Resource fixes
+  * PDFDoc can now set the `Lang` attribute
+  * canvas.drawString and similar now allow the character spacing
+    to be set 
+  * Index of accented stuff has been improved
+  * RTL code was improved
+  * fix Propertyset.clone
+  * `flowables.py`: fix ImageAndFlowables so it avoids testing
+    negative availableWidth 
+
+-------------------------------------------------------------------
+Fri Jun  5 07:15:03 UTC 2015 - [email protected]
+
+- Update to 3.1
+  * support for emoji
+  * improved pip-based installers
+
+-------------------------------------------------------------------
+Fri Jun  5 07:15:02 UTC 2015 - [email protected]
+
+- Update to 3.0
+  * ReportLab 3.0 now supports Python 2.7, 3.3 and higher.  
+  * There has been a substantial internal rewrite to ensure
+    consistent use of unicode strings for natural-language text,
+    and of bytes for all file format internals.
+  * Python 3.x compatibility
+  * New features
+    - Add ability to output greyscale and 1-bit PIL images without
+      conversion to RGB. (contributed by Matthew Duggan)
+    - highlight annotation (contributed by Ben Echols)
+  * Other
+    - numerous very minor fixes, visible through BitBucket.
+
+-------------------------------------------------------------------
+Sun Nov 24 18:38:52 UTC 2013 - [email protected]
+
+- Update to version 2.7
+  * Charts / graphics enhancements
+    - Added SimpleTimeSeriesPlot
+    - added _computeMaxSpace
+    - added in lineStyle (for bars)
+    - improved SVG rendering
+    - Pie Chart now has an `innerRadiusFraction` to allow doughnut-like
+      appearance for 2d charts
+  * Charts/graphics bug fixes
+    - piecharts.py: fix Pie3d __init__ to call its superclass
+    - linecharts.py: fix swatch creation
+    - fixed `y` axis in the simple time series plot
+  * PDF
+    - Fixes to testshapes & pdfform resetting
+    - colors.py
+    - various minor fixes
+  * Platypus
+    - Defined a small bullet rather than a big circle as the default for 
unordered lists
+    - fixed attribute spelling bug
+    - fixed CJK + endDots
+
+-------------------------------------------------------------------
+Sun Nov 24 18:38:51 UTC 2013 - [email protected]
+
+- Update to version 2.7
+  + No relative ChangeLog entry
+
+-------------------------------------------------------------------
+Thu Jan 24 20:09:08 UTC 2013 - [email protected]
+
+- Update to version 2.6:
+  * General changes
+    - Manuals have been reformatted with more pleasing code snippets and 
tables of 
+      contents, and reviewed and expanded
+  * Flowing documents (Platypus):
+    - Added support for HTML-style list objects
+    - Added flexible mechanism for drawing bullets
+    - Allowed XPreformatted objects to use Asian line wrapping
+    - Added an 'autoNextPageTemplate' attribute to PageTemplates.  For example 
you 
+      can now set up a 'chapter first page template' which will always be 
followed
+      by a 'continuation template' on the next page break, saving the 
programmer from
+      having to issue control flow commands in the story.
+    - added a TopPadder flowable, which will 'wrap' another Flowable and move 
it 
+      to the bottom of the current page.  
+    - More helpful error messages when large tables cannot be rendered
+    - Documentation for images within text (test_032_images)
+    - Trailing dots for use on contents pages
+  * Charts and graphics:
+    - Support for UPCA bar codes
+    - We now have a semi-intelligent system for labelling pie charts with 
+      callout lines.  Thanks to James Martin-Collar, a maths student at 
Warwick 
+      University, who did this as his summer internship.
+    - Axes - added startOffset and endOffset properties; allowed for axis 
+      background annotations.
+    - Bar charts - allow more control of z Index (i.e. drawing order of axes 
and
+      lines)
+    - Pie charts - fixed bugs in 3d appearance
+    - SVG output back end has seen some bugs fixed and now outputs resizeable 
SVG
+
+-------------------------------------------------------------------
+Fri May 25 11:35:57 UTC 2012 - [email protected]
+
+- Clean up spec file
+
+-------------------------------------------------------------------
+Thu Dec  8 13:54:44 UTC 2011 - [email protected]
+
+- fix license to be in spdx.org format
+
+-------------------------------------------------------------------
+Tue Sep 20 13:57:44 UTC 2011 - [email protected]
+
+- Fix non-executable bit rpmlint warning
+
+-------------------------------------------------------------------
+Mon May 30 15:16:43 UTC 2011 - [email protected]
+
+- Add Provides and Obsoletes to python-ReportLab in spec file to
+  better behaviour in 11.1.
+
+-------------------------------------------------------------------
+Tue Apr 12 13:53:36 UTC 2011 - [email protected]
+
+- Update to 2.5:
+  - Please readme CHANGES.txt.
+- Regenerate spec file with py2pack;
+- Add CHANGES.txt and README.txt files as documentation;
+- Bzip2 source code.
+
+-------------------------------------------------------------------
+Thu Jan 21 17:22:43 UTC 2010 - [email protected]
+
+- Update to 2.4.
++++ 5 more lines (skipped)
++++ between /dev/null
++++ and 
/work/SRC/openSUSE:Leap:15.1:Update/.python-reportlab.11889.new.26092/python-reportlab.changes

New:
----
  drop-requirements.patch
  make_toColor_safe.patch
  python-reportlab.changes
  python-reportlab.spec
  reportlab-3.4.0.tar.gz
  reportlab-missing-includes.patch

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ python-reportlab.spec ++++++
#
# spec file for package python-reportlab
#
# Copyright (c) 2020 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.

# Please submit bugfixes or comments via https://bugs.opensuse.org/
#


%{?!python_module:%define python_module() python-%{**} python3-%{**}}
%define oldpython python
%bcond_without tests
Name:           python-reportlab
Version:        3.4.0
Release:        0
Summary:        The Reportlab Toolkit
License:        BSD-3-Clause
Group:          Development/Languages/Python
URL:            https://www.reportlab.com/
Source:         
https://files.pythonhosted.org/packages/source/r/reportlab/reportlab-%{version}.tar.gz
Patch0:         reportlab-missing-includes.patch
# PATCH-FIX-UPSTREAM drop unneeded requirements 
https://bitbucket.org/rptlab/reportlab/issues/113
Patch1:         drop-requirements.patch
# PATCH-FIX-UPSTREAM} make_toColor_safe.patch bsc#1154370 [email protected]
# make toColor function safer, CVE-2019-17626
Patch2:         make_toColor_safe.patch
BuildRequires:  %{python_module Pillow}
BuildRequires:  %{python_module devel}
BuildRequires:  %{python_module setuptools}
BuildRequires:  %{python_module xml}
BuildRequires:  fdupes
BuildRequires:  freetype2-devel
BuildRequires:  python-rpm-macros
Requires:       python-Pillow
%ifpython2
Obsoletes:      %{oldpython}-ReportLab < %{version}
Provides:       %{oldpython}-ReportLab = %{version}
%endif
%ifpython3
Provides:       python3-ReportLab = %{version}
Obsoletes:      python3-ReportLab < %{version}
%endif
%python_subpackages

%description
The ReportLab Toolkit. An Open Source Python library for generating PDFs and 
graphics.

%prep
%setup -q -n reportlab-%{version}
%autopatch -p1

sed -i "1d" 
src/reportlab/lib/{formatters,fonts,corp,units,pagesizes,__init__,randomtext,logger,normalDate}.py
sed -i "1d" 
src/reportlab/graphics/{widgets/table,barcode/test,testdrawings,testshapes}.py 
# Fix non-executable bits

%build
export CFLAGS="%{optflags}"
%python_build

%install
%python_install
%python_expand %fdupes %{buildroot}%{$python_sitearch}

%if %{with tests}
%check
export LANG=en_US.UTF-8
%python_exec setup.py tests
%endif

%files %{python_files}
%license LICENSE.txt
%doc CHANGES.md README.txt
%{python_sitearch}/reportlab/
%{python_sitearch}/reportlab-%{version}-py*.egg-info

%changelog
++++++ drop-requirements.patch ++++++
--- a/setup.py
+++ b/setup.py
@@ -539,7 +539,7 @@ def main():
                 ],
             
             #this probably only works for setuptools, but distutils seems to 
ignore it
-            install_requires=['pillow>=2.4.0','pip>=1.4.1', 'setuptools>=2.2'],
+            install_requires=['pillow>=2.4.0'],
             )
         print()
         print('########## SUMMARY INFO #########')
++++++ make_toColor_safe.patch ++++++
++++ 1841 lines (skipped)

++++++ reportlab-missing-includes.patch ++++++
--- a/src/rl_addons/renderPM/gt1/gt1-namecontext.c
+++ b/src/rl_addons/renderPM/gt1/gt1-namecontext.c
@@ -1,6 +1,10 @@
 /* A module for a simple "name context", i.e. lisp-style atoms */
 
 #include "gt1-misc.h"
+#include <string.h>
+#include <stdio.h>
+#include <unistd.h>
+#include <sys/socket.h>
 
 #include "gt1-namecontext.h"
 #if defined(_WIN32) || defined(macintosh)

Reply via email to