Hello community, here is the log from the commit of package giflib for openSUSE:Factory checked in at 2020-08-23 09:18:30 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/giflib (Old) and /work/SRC/openSUSE:Factory/.giflib.new.3399 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "giflib" Sun Aug 23 09:18:30 2020 rev:39 rq:826859 version:5.2.1 Changes: -------- --- /work/SRC/openSUSE:Factory/giflib/giflib.changes 2018-11-18 23:24:04.034071432 +0100 +++ /work/SRC/openSUSE:Factory/.giflib.new.3399/giflib.changes 2020-08-23 09:18:32.062597186 +0200 @@ -1,0 +2,57 @@ +Fri Jul 10 21:23:35 UTC 2020 - Matthias Eliasson <[email protected]> + +- Update to version 5.2.1 + * In gifbuild.c, avoid a core dump on no color map. + * Restore inadvertently removed library version numbers in Makefile. +- Changes in version 5.2.0 + * The undocumented and deprecated GifQuantizeBuffer() entry point + has been moved to the util library to reduce libgif size and attack + surface. Applications needing this function are couraged to link the + util library or make their own copy. + * The following obsolete utility programs are no longer installed: + gifecho, giffilter, gifinto, gifsponge. These were either installed in + error or have been obsolesced by modern image-transformmation tools + like ImageMagick convert. They may be removed entirely in a future + release. + * Address SourceForge issue #136: Stack-buffer-overflow in gifcolor.c:84 + * Address SF bug #134: Giflib fails to slurp significant number of gifs + * Apply SPDX convention for license tagging. +- Changes in version 5.1.9 + * The documentation directory now includes an HTMlified version of the + GIF89 standard, and a more detailed description of how LZW compression + is applied to GIFs. + * Address SF bug #129: The latest version of giflib cannot be build on windows. + * Address SF bug #126: Cannot compile giflib using c89 +- Changes in version 5.1.8 + * Address SF bug #119: MemorySanitizer: FPE on unknown address + * Address SF bug #125: 5.1.7: xmlto is still required for tarball + * Address SF bug #124: 5.1.7: ar invocation is not crosscompile compatible + * Address SF bug #122: 5.1.7 installs manpages to wrong directory + * Address SF bug #121: make: getversion: Command not found + * Address SF bug #120: 5.1.7 does not build a proper library - no +- Changes in version 5.1.7 + * Correct a minor packaging error (superfluous symlinks) in the 5.1.6 tarballs. +- Changes in version 5.1.6 + * Fix library installation in the Makefile. +- Changes in version 5.1.5 + * Fix SF bug #114: Null dereferences in main() of gifclrmp + * Fix SF bug #113: Heap Buffer Overflow-2 in function DGifDecompressLine() + in cgif.c. This had been assigned (CVE-2018-11490). + * Fix SF bug #111: segmentation fault in PrintCodeBlock + * Fix SF bug #109: Segmentation fault of giftool reading a crafted file + * Fix SF bug #107: Floating point exception in giftext utility + * Fix SF bug #105: heap buffer overflow in DumpScreen2RGB in gif2rgb.c:317 + * Fix SF bug #104: Ineffective bounds check in DGifSlurp + * Fix SF bug #103: GIFLIB 5.1.4: DGifSlurp fails on empty comment + * Fix SF bug #87: Heap buffer overflow in 5.1.2 (gif2rgb). + * The horrible old autoconf build system has been removed with extreme prejudice. + You now build this simply by running "make" from the top-level directory. +- Run spec-cleaner +- Drop patches fixed upstream: + * giflib-visibility.patch + * giflib-automake-1_13.patch + * giflib-CVE-2016-3977.patch + * fix-autoconf11.patch +- Change build system to Make only (upstream not using autoconf) + +------------------------------------------------------------------- Old: ---- fix-autoconf11.patch giflib-5.1.4.tar.bz2 giflib-CVE-2016-3977.patch giflib-automake-1_13.patch giflib-visibility.patch New: ---- giflib-5.2.1.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ giflib.spec ++++++ --- /var/tmp/diff_new_pack.I2ducv/_old 2020-08-23 09:18:32.998597704 +0200 +++ /var/tmp/diff_new_pack.I2ducv/_new 2020-08-23 09:18:33.002597706 +0200 @@ -1,7 +1,7 @@ # # spec file for package giflib # -# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2020 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,20 +18,14 @@ %define lname libgif7 Name: giflib -Version: 5.1.4 +Version: 5.2.1 Release: 0 Summary: A Library for Working with GIF Images License: MIT -Group: Development/Libraries/C and C++ -Url: http://giflib.sf.net/ -Source: http://downloads.sf.net/giflib/%{name}-%{version}.tar.bz2 +URL: http://giflib.sf.net/ +Source: http://downloads.sf.net/giflib/%{name}-%{version}.tar.gz Source2: baselibs.conf -Patch1: giflib-visibility.patch -Patch2: giflib-automake-1_13.patch -Patch3: giflib-CVE-2016-3977.patch -Patch4: fix-autoconf11.patch BuildRequires: libtool >= 2 -BuildRoot: %{_tmppath}/%{name}-%{version}-build %description This Library allows manipulating GIF Image files. Since the LZW patents @@ -39,7 +33,6 @@ %package -n %{lname} Summary: A Library for Working with GIF Images -Group: System/Libraries %description -n %{lname} This Library allows manipulating GIF Image files. Since the LZW patents @@ -47,7 +40,6 @@ %package progs Summary: Tools for Working with the GIF Library -Group: Productivity/Graphics/Convertors Provides: ungif = %{version} Obsoletes: ungif < %{version} @@ -56,7 +48,6 @@ %package devel Summary: Library for Working with GIF Images - Files Mandatory for Development -Group: Development/Libraries/C and C++ Requires: %{lname} = %{version} %description devel @@ -64,16 +55,10 @@ have expired, giflib can again be used instead of libungif. %prep -%setup -q +%autosetup for file in `find util -name "*.c"`; do touch -r $file $file.stamp done -%patch1 -p1 -%patch2 -p1 -%patch3 -p1 -%if 0%{?suse_version} <= 1110 -%patch4 -p1 -%endif # USE __TIMESTAMP__ instead of __DATE__ , __TIME__ # this change is pointless unless we preserve the original @@ -84,39 +69,33 @@ rm -v $file.stamp done -mkdir -p m4; autoreconf -fiv - %build -%configure \ - --disable-silent-rules \ - --disable-static \ - --with-pic \ - --x-libraries=%{_libdir} +export CFLAGS="%optflags" make %{?_smp_mflags} %install -make DESTDIR=%{buildroot} install %{?_smp_mflags} +%make_install PREFIX="%{_prefix}" LIBDIR="%{_libdir}" find %{buildroot} -type f -name "*.la" -delete -print find doc -name "Makefile*" -print -delete -%post -n %{lname} -p /sbin/ldconfig +# Drop static library +rm -f %{buildroot}%{_libdir}/libgif.a +%post -n %{lname} -p /sbin/ldconfig %postun -n %{lname} -p /sbin/ldconfig %files -n %{lname} -%defattr(-,root,root) %license COPYING %{_libdir}/lib*.so.* %files devel -%defattr(-,root,root) %{_includedir}/gif_lib.h %{_libdir}/lib*.so %files progs -%defattr(-,root,root) %license COPYING %doc NEWS README doc %{_bindir}/* +%{_mandir}/man1/*.1%{?ext_man} %changelog
