Sync from SUSE:SLFO:Main libid3tag revision 9f8e062c06e79f3f983588241d16869e

This commit is contained in:
Adrian Schröter 2024-05-03 15:05:54 +02:00
commit 5d3a7ed6d3
5 changed files with 266 additions and 0 deletions

23
.gitattributes vendored Normal file
View File

@ -0,0 +1,23 @@
## Default LFS
*.7z filter=lfs diff=lfs merge=lfs -text
*.bsp filter=lfs diff=lfs merge=lfs -text
*.bz2 filter=lfs diff=lfs merge=lfs -text
*.gem filter=lfs diff=lfs merge=lfs -text
*.gz filter=lfs diff=lfs merge=lfs -text
*.jar filter=lfs diff=lfs merge=lfs -text
*.lz filter=lfs diff=lfs merge=lfs -text
*.lzma filter=lfs diff=lfs merge=lfs -text
*.obscpio filter=lfs diff=lfs merge=lfs -text
*.oxt filter=lfs diff=lfs merge=lfs -text
*.pdf filter=lfs diff=lfs merge=lfs -text
*.png filter=lfs diff=lfs merge=lfs -text
*.rpm filter=lfs diff=lfs merge=lfs -text
*.tbz filter=lfs diff=lfs merge=lfs -text
*.tbz2 filter=lfs diff=lfs merge=lfs -text
*.tgz filter=lfs diff=lfs merge=lfs -text
*.ttf filter=lfs diff=lfs merge=lfs -text
*.txz filter=lfs diff=lfs merge=lfs -text
*.whl filter=lfs diff=lfs merge=lfs -text
*.xz filter=lfs diff=lfs merge=lfs -text
*.zip filter=lfs diff=lfs merge=lfs -text
*.zst filter=lfs diff=lfs merge=lfs -text

1
baselibs.conf Normal file
View File

@ -0,0 +1 @@
libid3tag%lver

BIN
libid3tag-0.16.2.tar.gz (Stored with Git LFS) Normal file

Binary file not shown.

159
libid3tag.changes Normal file
View File

@ -0,0 +1,159 @@
-------------------------------------------------------------------
Mon May 9 17:01:41 UTC 2022 - Christophe Giboudeaux <christophe@krop.fr>
- Update to 0.16.2
* Fix null pointer dereference in id3_ucs4_length
(boo#1081962, CVE-2017-11550)
- Drop id3_ucs4_length-sanity-check.patch. Merged upstream.
-------------------------------------------------------------------
Fri Apr 8 13:46:43 UTC 2022 - Manfred Hollstein <manfred.h@gmx.net>
- Add id3_ucs4_length-sanity-check.patch as Patch0.
The patch helps to avoid a segfault in programs using this library,
such as minidlna and potentially others; for details see
<https://github.com/tenacityteam/libid3tag/pull/7> and
<https://github.com/tenacityteam/libid3tag/issues/6>
-------------------------------------------------------------------
Thu Dec 9 19:22:27 UTC 2021 - Ferdinand Thiessen <rpm@fthiessen.de>
- Update to 0.16.1 from maintained fork by the Tenacity Audio Editor
* Merge various outstanding patches
* Upstream pkg-config file
* Use cmake for build and install cmake files
- Drop merged fixes
* fix-build-with-gperf-3.1.diff
* libid3tag-0.15.1b-mb.diff
* libid3tag-automake-fix.dif
* libid3tag-gperf.dif
* libid3tag-noweak.dif
* libid3tag-optflags.patch
* libid3tag-unknown-encoding.patch
* libid3tag-utf16.patch
* libid3tag-visibility.patch
-------------------------------------------------------------------
Wed Feb 21 10:59:28 UTC 2018 - kbabioch@suse.com
- Added libid3tag-utf16.patch: Fixed id3_utf16_deserialize() in utf16.c,
which previously misparsed ID3v2 tags encoded in UTF-16 with an odd
number of bytes, triggering an endless loop allocating memory until
OOM leading to DoS. (CVE-2004-2779 bsc#1081959 CVE-2017-11551
bsc#1081961)
- Added libid3tag-unknown-encoding.patch: Fixed the handling of unknown
encodings when parsing ID3 tags. (CVE-2017-11550 bsc#1081962
CVE-2008-2109 bsc#387731)
- Removed libid3tag-0.15.1b-fix_overflow.patch, since it is handled
differently by libid3tag-utf16.patch already.
-------------------------------------------------------------------
Wed Oct 11 08:15:53 UTC 2017 - lnussel@suse.de
- dont BuildRequire zypper to avoid unecessary dependency chain.
Check for %suse_version instead.
-------------------------------------------------------------------
Thu May 11 09:35:46 UTC 2017 - alarrosa@suse.com
- Add BuildRequires: zypper and use it to check for gperf version so
the package builds with all versions of gperf (boo#1027205)
-------------------------------------------------------------------
Wed May 10 18:52:12 UTC 2017 - alarrosa@suse.com
- Add fix-build-with-gperf-3.1.diff to fix build with gperf 3.1
which now uses size_t instead of unsigned int for the len parameter
of the hash/lookup function (boo#1027205)
-------------------------------------------------------------------
Tue Jun 16 12:18:10 UTC 2015 - mpluskal@suse.com
- Use url for source
- Add baselibs.conf as source
- Cleanup spec file with spec-cleaner
-------------------------------------------------------------------
Fri Nov 23 19:06:26 UTC 2012 - jengelh@inai.de
- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Employ shared library naming
- Have makeinstall succeed on non-SUSE
-------------------------------------------------------------------
Thu Nov 22 18:26:13 UTC 2012 - crrodriguez@opensuse.org
- libid3tag-visibility.patch: Hide all symbols that are not
part of the public API.
- spec file: DO not inject bogus dependencies into the
system via pkgconfig files.
-------------------------------------------------------------------
Sat Nov 19 20:32:46 UTC 2011 - coolo@suse.com
- add libtool as buildrequire to avoid implicit dependency
-------------------------------------------------------------------
Tue Apr 12 17:13:49 UTC 2011 - toddrme2178@gmail.com
- Added 32bit compatibility libraries
- Added BuildRequires: pkg-config (fixes RPMLINT warning)
-------------------------------------------------------------------
Thu May 8 16:21:29 CEST 2008 - tiwai@suse.de
- VUL-0: libid3tag overflow (CVE-2008-2109, bnc#387731)
- don't install static and *.la files
- clean up spec file
-------------------------------------------------------------------
Thu Mar 29 08:26:34 CEST 2007 - meissner@suse.de
- zlib-devel to buildrequires
-------------------------------------------------------------------
Tue Oct 31 10:29:01 CET 2006 - meissner@suse.de
- fixed configure.ac to accept more than 1 -O/-f option, added
requires
-------------------------------------------------------------------
Wed Jan 25 21:37:29 CET 2006 - mls@suse.de
- converted neededforbuild to BuildRequires
-------------------------------------------------------------------
Wed Jan 11 16:47:50 CET 2006 - tiwai@suse.de
- compile with -fstack-protector.
-------------------------------------------------------------------
Mon Jul 5 22:38:34 CEST 2004 - hvogel@suse.de
- add pgkconfig file
-------------------------------------------------------------------
Thu Feb 26 12:45:36 CET 2004 - tiwai@suse.de
- updated to version 0.15.1b.
- fixed memory allocation check.
- fixed for autoreconf.
-------------------------------------------------------------------
Tue Jan 13 20:18:23 CET 2004 - tiwai@suse.de
- build as non-root.
-------------------------------------------------------------------
Mon Aug 11 16:38:43 CEST 2003 - tiwai@suse.de
- fixed the handling of v2 tag.
-------------------------------------------------------------------
Thu Jul 3 16:57:50 CEST 2003 - tiwai@suse.de
- split from mad: version 0.15.0b.

80
libid3tag.spec Normal file
View File

@ -0,0 +1,80 @@
#
# spec file for package libid3tag
#
# Copyright (c) 2022 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
%define lver 0_16_2
Name: libid3tag
Version: 0.16.2
Release: 0
Summary: ID3 Tag Manipulation Library
License: GPL-2.0-or-later
Group: Development/Libraries/C and C++
URL: https://github.com/tenacityteam/libid3tag
Source0: %{url}/archive/refs/tags/%{version}.tar.gz#/%{name}-%{version}.tar.gz
Source1: baselibs.conf
BuildRequires: c++_compiler
BuildRequires: cmake
BuildRequires: gperf
BuildRequires: pkgconfig
BuildRequires: pkgconfig(zlib)
%description
libid3tag is a library for reading and writing ID3 tags, both ID3v1 and
the various versions of ID3v2.
%package -n %{name}%{lver}
Summary: ID3 Tag Manipulation Library
Group: System/Libraries
%description -n %{name}%{lver}
libid3tag is a library for reading and writing ID3 tags, both ID3v1 and
the various versions of ID3v2.
%package devel
Summary: Development package for libid3tag library
Group: Development/Libraries/C and C++
Requires: %{name}%{lver} = %{version}
%description devel
This package contains the header files and static libraries needed to
develop applications with libid3tag.
%prep
%setup -q
%build
%cmake
%cmake_build
%install
%cmake_install
%post -n %{name}%{lver} -p /sbin/ldconfig
%postun -n %{name}%{lver} -p /sbin/ldconfig
%files -n %{name}%{lver}
%license COPYING COPYRIGHT
%{_libdir}/libid3tag.so.*
%files devel
%doc CHANGES CREDITS README
%{_includedir}/id3tag.h
%{_libdir}/libid3tag.so
%{_libdir}/cmake/id3tag
%{_libdir}/pkgconfig/id3tag.pc
%changelog