Hello community,
here is the log from the commit of package gstreamer for openSUSE:Factory
checked in at 2016-02-03 10:18:57
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/gstreamer (Old)
and /work/SRC/openSUSE:Factory/.gstreamer.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "gstreamer"
Changes:
--------
--- /work/SRC/openSUSE:Factory/gstreamer/gstreamer.changes 2015-11-24
22:28:56.000000000 +0100
+++ /work/SRC/openSUSE:Factory/.gstreamer.new/gstreamer.changes 2016-02-03
10:19:01.000000000 +0100
@@ -1,0 +2,58 @@
+Tue Jan 19 16:56:23 UTC 2016 - meiss...@suse.com
+
+- Hook gst-ptp-helper helper into SUSE permissions framework
+ (boo#960173):
+ + Add permissions to requires(pre).
+ + Add set_permissions to post and verify_permissions to
+ verifyscript.
+
+-------------------------------------------------------------------
+Mon Jan 18 11:19:51 UTC 2016 - dims...@opensuse.org
+
+- Adjustments post security review (boo#960173):
+ + Add libcap-devel BuildRequires: rely on capabilities instead of
+ flagging the binary suid.
+ + Pass --with-ptp-helper-permissions=capabilities to configure:
+ ensure there is no auto-fallback to attempting to install the
+ binary suid in case capabilities would not work.
+
+-------------------------------------------------------------------
+Wed Dec 23 14:19:07 UTC 2015 - dims...@opensuse.org
+
+- Update to version 1.6.2:
+ + Crashes in gst-libav with sinks that did not provide a buffer
+ pool but supported video metadata were fixed. This affected
+ d3dvideosink and some 3rd party sinks. Also related fixes for
+ crashes when a downstream buffer pool failed allocation.
+ + Big GL performance improvement on iOS by a factor of 2 by using
+ Apple's sync extension.
+ + Deadlocks in the DirectSound elements on Windows, and the
+ behaviour of its mute property were fixed.
+ + The Direct3D video sink does not crash anymore when minimizing
+ the window.
+ + The library soname generation on Android >= 6.0 was fixed,
+ which previously caused GStreamer to fail to load there.
+ + File related elements have large-file (>2GB) support on Android
+ now.
+ + gst-libav was updated to ffmpeg 2.8.3.
+ + Deserialization of custom events in the GDP depayloader was
+ fixed.
+ + Missing OpenGL context initialization in the Qt/QML video sink
+ was fixed in certain situations.
+ + Interoperability with some broken RTSP servers using HTTP
+ tunnel was improved.
+ + Various compilation fixes for Windows.
+ + Various smaller memory leak and other fixes in different
+ places.
+ + Bugs fixed: bgo#734098, bgo#738292, bgo#741608, bgo#753823,
+ bgo#755106, bgo#755222, bgo#755614, bgo#756028, bgo#756951,
+ bgo#757155, bgo#757264, bgo#757453, bgo#757454, bgo#757732,
+ bgo#757854, bgo#757873, bgo#757895, bgo#757924, bgo#757929,
+ bgo#757935, bgo#758029, bgo#758151, bgo#758204, bgo#758205,
+ bgo#758276, bgo#758285, bgo#758286, bgo#758337, bgo#758344,
+ bgo#758512, bgo#758620, bgo#758861, bgo#758912, bgo#758913,
+ bgo#758921, bgo#759019, bgo#759380.
+- Add -fPIE to CFLAGS and -pie to LDFLAGS in order to ensure our
+ executables are built position independent.
+
+-------------------------------------------------------------------
Old:
----
gstreamer-1.6.1.tar.xz
New:
----
gstreamer-1.6.2.tar.xz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ gstreamer-doc.spec ++++++
--- /var/tmp/diff_new_pack.rywLzV/_old 2016-02-03 10:19:02.000000000 +0100
+++ /var/tmp/diff_new_pack.rywLzV/_new 2016-02-03 10:19:02.000000000 +0100
@@ -1,7 +1,7 @@
#
# spec file for package gstreamer-doc
#
-# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -19,7 +19,7 @@
Name: gstreamer-doc
%define _name gstreamer
%define build_doc 1
-Version: 1.6.1
+Version: 1.6.2
Release: 0
%define gst_branch 1.0
Summary: Streaming-Media Framework Runtime
@@ -42,6 +42,7 @@
BuildRequires: flex
BuildRequires: glib2-devel >= 2.32.0
BuildRequires: gnome-patch-translation
+BuildRequires: libcap-devel
BuildRequires: libtool
BuildRequires: libxml2-devel
BuildRequires: translation-update-upstream
@@ -69,6 +70,7 @@
Requires: libgstreamer-1_0-0 >= %{version}
Recommends: %{name}-lang = %{version}
%endif
+Requires(pre): permissions
BuildRoot: %{_tmppath}/%{name}-%{version}-build
%description
@@ -163,8 +165,10 @@
%if %suse_version >= 1110
NOCONFIGURE=1 ./autogen.sh
%endif
-export CFLAGS="%{optflags} -fno-strict-aliasing"
+export CFLAGS="%{optflags} -fno-strict-aliasing -fPIE"
+export LDFLAGS="-pie"
%configure\
+ --with-ptp-helper-permissions=capabilities \
%if %build_doc
--enable-gtk-doc\
--enable-docbook\
@@ -216,8 +220,12 @@
%endif
%fdupes %{buildroot}
-%clean
-rm -rf %{buildroot}
+%verifyscript
+%verify_permissions -e %{_libexecdir}/gstreamer-%{gst_branch}/gst-ptp-helper
+
+%post
+%set_permissions %{_libexecdir}/gstreamer-%{gst_branch}/gst-ptp-helper
+
%if ! %build_doc
%post -n libgstreamer-1_0-0 -p /sbin/ldconfig
@@ -250,7 +258,7 @@
%{_libdir}/gstreamer-%{gst_branch}/*.so
%dir %{_libexecdir}/gstreamer-%{gst_branch}
%{_libexecdir}/gstreamer-%{gst_branch}/gst-plugin-scanner
-%{_libexecdir}/gstreamer-%{gst_branch}/gst-ptp-helper
+%verify(not mode caps) %{_libexecdir}/gstreamer-%{gst_branch}/gst-ptp-helper
%{_datadir}/bash-completion/completions/
%{_datadir}/bash-completion/helpers/
++++++ gstreamer.spec ++++++
--- /var/tmp/diff_new_pack.rywLzV/_old 2016-02-03 10:19:02.000000000 +0100
+++ /var/tmp/diff_new_pack.rywLzV/_new 2016-02-03 10:19:02.000000000 +0100
@@ -1,7 +1,7 @@
#
# spec file for package gstreamer
#
-# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -19,7 +19,7 @@
Name: gstreamer
%define _name gstreamer
%define build_doc 0
-Version: 1.6.1
+Version: 1.6.2
Release: 0
%define gst_branch 1.0
Summary: Streaming-Media Framework Runtime
@@ -42,6 +42,7 @@
BuildRequires: flex
BuildRequires: glib2-devel >= 2.32.0
BuildRequires: gnome-patch-translation
+BuildRequires: libcap-devel
BuildRequires: libtool
BuildRequires: libxml2-devel
BuildRequires: translation-update-upstream
@@ -69,6 +70,7 @@
Requires: libgstreamer-1_0-0 >= %{version}
Recommends: %{name}-lang = %{version}
%endif
+Requires(pre): permissions
BuildRoot: %{_tmppath}/%{name}-%{version}-build
%description
@@ -163,8 +165,10 @@
%if %suse_version >= 1110
NOCONFIGURE=1 ./autogen.sh
%endif
-export CFLAGS="%{optflags} -fno-strict-aliasing"
+export CFLAGS="%{optflags} -fno-strict-aliasing -fPIE"
+export LDFLAGS="-pie"
%configure\
+ --with-ptp-helper-permissions=capabilities \
%if %build_doc
--enable-gtk-doc\
--enable-docbook\
@@ -216,8 +220,12 @@
%endif
%fdupes %{buildroot}
-%clean
-rm -rf %{buildroot}
+%verifyscript
+%verify_permissions -e %{_libexecdir}/gstreamer-%{gst_branch}/gst-ptp-helper
+
+%post
+%set_permissions %{_libexecdir}/gstreamer-%{gst_branch}/gst-ptp-helper
+
%if ! %build_doc
%post -n libgstreamer-1_0-0 -p /sbin/ldconfig
@@ -250,7 +258,7 @@
%{_libdir}/gstreamer-%{gst_branch}/*.so
%dir %{_libexecdir}/gstreamer-%{gst_branch}
%{_libexecdir}/gstreamer-%{gst_branch}/gst-plugin-scanner
-%{_libexecdir}/gstreamer-%{gst_branch}/gst-ptp-helper
+%verify(not mode caps) %{_libexecdir}/gstreamer-%{gst_branch}/gst-ptp-helper
%{_datadir}/bash-completion/completions/
%{_datadir}/bash-completion/helpers/
++++++ gstreamer-1.6.1.tar.xz -> gstreamer-1.6.2.tar.xz ++++++
++++ 7770 lines of diff (skipped)
