Hello community,

here is the log from the commit of package gdk-pixbuf for openSUSE:Leap:15.2 
checked in at 2020-03-20 05:52:35
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Leap:15.2/gdk-pixbuf (Old)
 and      /work/SRC/openSUSE:Leap:15.2/.gdk-pixbuf.new.3160 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "gdk-pixbuf"

Fri Mar 20 05:52:35 2020 rev:26 rq:782200 version:2.40.0

Changes:
--------
--- /work/SRC/openSUSE:Leap:15.2/gdk-pixbuf/gdk-pixbuf.changes  2020-01-15 
14:59:35.129721223 +0100
+++ /work/SRC/openSUSE:Leap:15.2/.gdk-pixbuf.new.3160/gdk-pixbuf.changes        
2020-03-20 05:52:46.904058500 +0100
@@ -1,0 +2,133 @@
+Mon Feb 24 01:29:03 UTC 2020 - Yifan Jiang <yfji...@suse.com>
+
+- A file tests/test-images/gif-test-suite/max-width.gif from the
+  test suite is correctly identified by clamav to be a malicious
+  BC.Gif.Exploit.Agent-1425366.Agent. This is an intentional part
+  of the test suite to ensure it has no negative side effects.
+
+  On SLE, the package is built with clamav scanning, which then
+  prevents a successful build. This change repacks the source
+  package to a password-protected zip to bypass the clamav scanning
+  for SLE (bsc#1159337), with following update:
+
+  + Download upstream tarball through source service
+  + Add pre_checkin.sh to convert tarball to zip file
+  + Update spec-file to use the zip file as main source
+
+-------------------------------------------------------------------
+Thu Jan 30 12:17:20 UTC 2020 - Dominique Leuenberger <dims...@opensuse.org>
+
+- No longer recommend -lang: supplements are in use
+
+-------------------------------------------------------------------
+Tue Oct  8 11:52:24 UTC 2019 - Bjørn Lie <bjorn....@gmail.com>
+
+- Update to version 2.40.0:
+  + Allow creating a GdkPixbuf instance without any property.
+
+-------------------------------------------------------------------
+Mon Sep  9 08:46:09 UTC 2019 - mgo...@suse.com
+
+- Update to version 2.39.2:
+  + Add gdk_pixbuf_init_modules() for applications with GdkPixbuf
+    loader modules in a separate directory.
+  + Add subproject fallback for dependencies.
+  + Handle large XPM without crashing.
+  + Use the appropriate gdk-pixbuf-query-loaders on install.
+  + Disable deprecation warnings introduced by GLib 2.62.
+  + Escape GIF version in error messages.
+  + Render GIF frames on demand.
+
+-------------------------------------------------------------------
+Mon Sep  9 08:46:08 UTC 2019 - Bjørn Lie <bjorn....@gmail.com>
+
+- Update to version 2.38.2:
+  + build: Remove unnecessary argument.
+  + gif: Suppress last deprecation warning.
+  + tests:
+    - Disable deprecation warnings for GTimeVal.
+    - Add test for issue 95.
+    - Add test image for invalid XPM data.
+  + Disable deprecation warnings for GTimeVal.
+  + Use the monotonic clock instead of wall one.
+  + xpm:
+    - Fail when XPM file doesn't contain enough data.
+    - Simplify error path.
+    - Sanity check XPM file dimensions.
+
+-------------------------------------------------------------------
+Wed May  8 09:33:53 UTC 2019 - Dominique Leuenberger <dims...@opensuse.org>
+
+- Move RPM macros to %_rpmmacrodir.
+
+-------------------------------------------------------------------
+Thu Feb 28 17:49:05 UTC 2019 - Bjørn Lie <bjorn....@gmail.com>
+
+- Update to version 2.38.1:
+  + Fix OOM in JPEG2000 loader.
+  + Fix thumbnailing of animated GIFs.
+  + Multiple improvements to the GIF loader.
+  + Fix introspection generation.
+  + Fix error handling in PNG loader.
+  + Improve reproducibility of the build.
+  + Speed up saving PNG files.
+  + Add variables in the pkg-config files for binary utilities.
+  + Build fixes.
+
+-------------------------------------------------------------------
+Sun Sep  9 07:32:39 UTC 2018 - antoine.belv...@opensuse.org
+
+- Update to version 2.38.0:
+  + Stable release.
+  + Documentation fixes.
+
+-------------------------------------------------------------------
+Wed Aug 22 12:57:37 UTC 2018 - bjorn....@gmail.com
+
+- Update to version 2.37.92:
+  + Ensure that GdkPixbuf's storage is safely handled.
+  + Add test case for buffer overflow in pixdata loader.
+
+-------------------------------------------------------------------
+Sun Jul  8 21:07:28 UTC 2018 - bjorn....@gmail.com
+
+- Pass all options to meson, ensure we build gdk-pixbuf with the
+  features we want.
+
+-------------------------------------------------------------------
+Wed Jun 20 02:10:46 UTC 2018 - luc1...@linuxmail.org
+
+- Update to version 2.37.0:
+  + Plug a memory leak when using GBytes (bgo#787626).
+  + Fix introspection annotations (bgo#789935).
+  + Fix OOB error when dithering (bgo#748211).
+  + Drop the MMX assembly optimizations for pixops.
+  + Improve compatibility for the post-install script (bgo#795705).
+  + Expose the dimensions of the original image from
+    GdkPixbufLoader (bgo#778517).
+  + Improve thumbnailer implementation (bgo#778517).
+  + Generate separate introspection data for GdkPixdata API
+    (glgo#GNOME/gdk-pixbuf#72).
+  + Deprecate GDK_INTERP_HYPER (glgo#GNOME/gdk-pixbuf#3).
+- Pass installed_tests as false to meson to make sure we don't ship
+  unnecessary tests.
+- Add typelib-1_0-GdkPixdata GI subpackage and require it on the
+  devel package, following upstream changes.
+
+-------------------------------------------------------------------
+Tue Apr 10 02:44:36 UTC 2018 - luc1...@linuxmail.org
+
+- Update to version 2.36.12:
+  + gif, ico, jpeg, tiff, icns: various fixes (bgo#778584,
+    bgo#779012, bgo#753605, bgo#779020, bgo#779016).
+  + Implement async loading without threads.
+  + Updated translations.
+- Rename with_docs meson option to docs, following usptream change.
+- Drop fixed upstream patches:
+  gdk-pixbuf-bgo779012-ico-overflow.patch,
+  gdk-pixbuf-gif-negative-array-indexes.patch,
+  gdk-pixbuf-gif-uninitialized-variable.patch,
+  gdk-pixbuf-tiff-overflow.patch and
+  gdk-pixbuf-icns-handle-short-blocklen.patch.
+
+-------------------------------------------------------------------

Old:
----
  gdk-pixbuf-2.36.11.tar.xz
  gdk-pixbuf-bgo779012-ico-overflow.patch
  gdk-pixbuf-gif-negative-array-indexes.patch
  gdk-pixbuf-gif-uninitialized-variable.patch
  gdk-pixbuf-icns-handle-short-blocklen.patch
  gdk-pixbuf-tiff-overflow.patch

New:
----
  _service
  gdk-pixbuf-2.40.0.zip
  pre_checkin.sh

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ gdk-pixbuf.spec ++++++
--- /var/tmp/diff_new_pack.mQDEqs/_old  2020-03-20 05:52:47.660059004 +0100
+++ /var/tmp/diff_new_pack.mQDEqs/_new  2020-03-20 05:52:47.660059004 +0100
@@ -1,7 +1,7 @@
 #
 # spec file for package gdk-pixbuf
 #
-# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2020 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -12,34 +12,31 @@
 # license that conforms to the Open Source Definition (Version 1.9)
 # published by the Open Source Initiative.
 
-# Please submit bugfixes or comments via http://bugs.opensuse.org/
+# Please submit bugfixes or comments via https://bugs.opensuse.org/
 #
 
 
 # When updating the binary version, do not forget to also update baselibs.conf
 %define gdk_pixbuf_binary_version 2.10.0
+
 Name:           gdk-pixbuf
-Version:        2.36.11
+Version:        2.40.0
 Release:        0
 Summary:        An image loading library
 License:        LGPL-2.1-or-later
 Group:          Development/Libraries/GNOME
 URL:            https://www.gnome.org/
-Source:         
https://download.gnome.org/sources/gdk-pixbuf/2.36/%{name}-%{version}.tar.xz
+
+# A filefrom the test suite is correctly identified by clamav to be a
+# malicious BC.Gif.Exploit.Agent-1425366.Agent. This is an intentional part of
+# the test suite to ensure it has no negative side effects. Change the Source0
+# from tar.xz to zip to bypass clamav scanning on SLE.
+Source0:        %{name}-%{version}.zip
 Source1:        macros.gdk-pixbuf
 Source2:        README.SUSE
 Source3:        gdk-pixbuf-rpmlintrc
 Source99:       baselibs.conf
-# PATCH-FIX-UPSTREAM gdk-pixbuf-bgo779012-ico-overflow.patch boo#1027026 
mgo...@suse.com -- fix potential integer overflow (CVE-2017-6312).
-Patch0:         gdk-pixbuf-bgo779012-ico-overflow.patch
-# PATCH-FIX-UPSTREAM gdk-pixbuf-gif-negative-array-indexes.patch bgo#778584 
mgo...@suse.com -- gif: prevent access to negative array indexes.
-Patch1:         gdk-pixbuf-gif-negative-array-indexes.patch
-# PATCH-FIX-UPSTREAM gdk-pixbuf-gif-uninitialized-variable.patch bgo#778584 
mgo...@suse.com -- fix uninitialized variable.
-Patch2:         gdk-pixbuf-gif-uninitialized-variable.patch
-# PATCH-FIX-UPSTREAM gdk-pixbuf-tiff-overflow.patch bgo#779020 mgo...@suse.com 
-- avoid overflow during size computation.
-Patch3:         gdk-pixbuf-tiff-overflow.patch
-# PATCH-FIX-UPSTREAM gdk-pixbuf-icns-handle-short-blocklen.patch boo#1027024 
bgo#779016 mgo...@suse.com -- icns: protect against too short blocklen 
(CVE-2017-6313).
-Patch4:         gdk-pixbuf-icns-handle-short-blocklen.patch
+
 BuildRequires:  docbook-xsl-stylesheets
 BuildRequires:  gtk-doc
 BuildRequires:  libjpeg-devel
@@ -47,6 +44,7 @@
 BuildRequires:  meson
 BuildRequires:  pkgconfig
 BuildRequires:  translation-update-upstream
+BuildRequires:  unzip
 BuildRequires:  xsltproc
 BuildRequires:  pkgconfig(glib-2.0) >= 2.48.0
 BuildRequires:  pkgconfig(gobject-introspection-1.0)
@@ -63,7 +61,6 @@
 # Provide %%{name} to make the lang package installable
 Group:          System/Libraries
 Requires(post): gdk-pixbuf-query-loaders
-Recommends:     %{name}-lang = %{version}
 Conflicts:      gtk2 < 2.21.3
 Provides:       %{name} = %{version}
 
@@ -73,7 +70,7 @@
 Clutter.
 
 %package -n typelib-1_0-GdkPixbuf-2_0
-Summary:        Introspection bindins for gdk-pixbuf
+Summary:        Introspection bindings for gdk-pixbuf
 Group:          System/Libraries
 
 %description -n typelib-1_0-GdkPixbuf-2_0
@@ -83,6 +80,17 @@
 
 This package provides the GObject Introspection bindings for gdk-pixbuf.
 
+%package -n typelib-1_0-GdkPixdata-2_0
+Summary:        Introspection bindings for gdk-pixdata
+Group:          System/Libraries
+
+%description -n typelib-1_0-GdkPixdata-2_0
+gdk-pixbuf is an image loading library that can be extended by loadable
+modules for new image formats. It is used by toolkits such as GTK+ or
+Clutter.
+
+This package provides the GObject Introspection bindings for gdk-pixdata.
+
 %package query-loaders
 Summary:        Utility to create a cache of gdk-pixbuf loaders
 Group:          System/X11/Utilities
@@ -112,6 +120,7 @@
 Group:          Development/Languages/C and C++
 Requires:       libgdk_pixbuf-2_0-0 = %{version}
 Requires:       typelib-1_0-GdkPixbuf-2_0 = %{version}
+Requires:       typelib-1_0-GdkPixdata-2_0 = %{version}
 
 %description devel
 gdk-pixbuf is an image loading library that can be extended by loadable
@@ -123,19 +132,28 @@
 %lang_package
 
 %prep
-%setup -q
+%setup -c -T -q
+unzip -P gecko %{SOURCE0}
 translation-update-upstream
-%patch0 -p1
-%patch1 -p1
-%patch2 -p1
-%patch3 -p1
-%patch4 -p1
 %if "%{_lib}" == "lib64"
 cp -a %{SOURCE2} .
 %endif
 
 %build
-%meson -D with_docs=true
+%meson \
+       -Dpng=true \
+       -Dtiff=true \
+       -Djpeg=true \
+       -Djasper=false \
+       -Dx11=true \
+       -Dbuiltin_loaders=none \
+       -Ddocs=true \
+       -Dgir=true \
+       -Dman=true \
+       -Drelocatable=false \
+       -Dnative_windows_loaders=false \
+       -Dinstalled_tests=false \
+       %{nil}
 %meson_build
 
 %install
@@ -148,8 +166,8 @@
   mv %{buildroot}%{_mandir}/man1/gdk-pixbuf-query-loaders.1 
%{buildroot}%{_mandir}/man1/gdk-pixbuf-query-loaders-64.1
 %endif
 # Install rpm macros
-mkdir -p %{buildroot}%{_sysconfdir}/rpm
-cp %{SOURCE1} %{buildroot}%{_sysconfdir}/rpm
+mkdir -p %{buildroot}%{_rpmmacrodir}
+cp %{SOURCE1} %{buildroot}%{_rpmmacrodir}
 
 #############################################################################
 # Note: when updating scriptlets, don't forget to also update baselibs.conf #
@@ -199,7 +217,7 @@
 
 %files -n libgdk_pixbuf-2_0-0
 %license COPYING
-%doc AUTHORS NEWS
+%doc NEWS
 %if "%{_lib}" == "lib64"
 %doc README.SUSE
 %endif
@@ -214,6 +232,9 @@
 %files -n typelib-1_0-GdkPixbuf-2_0
 %{_libdir}/girepository-1.0/GdkPixbuf-2.0.typelib
 
+%files -n typelib-1_0-GdkPixdata-2_0
+%{_libdir}/girepository-1.0/GdkPixdata-2.0.typelib
+
 %files query-loaders
 %{_bindir}/gdk-pixbuf-query-loaders*
 %{_mandir}/man1/gdk-pixbuf-query-loaders*.1*
@@ -231,8 +252,9 @@
 %{_libdir}/pkgconfig/*.pc
 %{_libdir}/*.so
 %{_datadir}/gir-1.0/GdkPixbuf-2.0.gir
+%{_datadir}/gir-1.0/GdkPixdata-2.0.gir
 %doc %{_datadir}/gtk-doc/html/gdk-pixbuf
-%{_sysconfdir}/rpm/macros.gdk-pixbuf
+%{_rpmmacrodir}/macros.gdk-pixbuf
 
 %files lang -f %{name}.lang
 

++++++ _service ++++++
<services>
 <service name="download_url" mode="disabled">
   <param name="protocol">https</param>
   <param name="host">download.gnome.org</param>
   <param name="path">sources/gdk-pixbuf/2.40/gdk-pixbuf-2.40.0.tar.xz</param>
 </service>
 <service name="set_version" mode="disabled" />
</services>

++++++ pre_checkin.sh ++++++
#!/bin/sh

# To update the package:
## 1. update the version tags in _service
## 2. run `osc service ra`;                # get the upstream release, and set 
the version string in spec
## 3. run `./pre_checkin.sh`;              # generate the zip file
## 4. edit changelog and commit the change # the tar.xz file generated by the 
step 2 is not necessarily to commit

EXTRACTDIR=$(mktemp -d);
BASENAME=$(grep ^Name\: gdk-pixbuf.spec | cut -d: -f2 | sed 's/[[:space:]]//g');
VERSION=$(grep ^Version\: gdk-pixbuf.spec | cut -d: -f2 | sed 
's/[[:space:]]//g');

tar xvfJ $BASENAME-$VERSION.tar.xz -C $EXTRACTDIR;
pushd $EXTRACTDIR/$BASENAME-$VERSION && zip -r -P gecko $BASENAME-$VERSION.zip 
* && popd && mv $EXTRACTDIR/$BASENAME-$VERSION/$BASENAME-$VERSION.zip .;
rm -fr $EXTRACTDIR && rm -fr $BASENAME-$VERSION.tar.xz;

Reply via email to