Accepting request 853729 from GNOME:Next

Update to 2.42.2 - CVE-2020-29385

OBS-URL: https://build.opensuse.org/request/show/853729
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/gdk-pixbuf?expand=0&rev=174

_service

@@ -2,7 +2,7 @@
  <service name="download_url" mode="disabled">
    <param name="protocol">https</param>
    <param name="host">download.gnome.org</param>
-   <param name="path">sources/gdk-pixbuf/2.42/gdk-pixbuf-2.42.0.tar.xz</param>
+   <param name="path">sources/gdk-pixbuf/2.42/gdk-pixbuf-2.42.2.tar.xz</param>
  </service>
  <service name="set_version" mode="disabled" />
 </services>

gdk-pixbuf-2.42.0.zip

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:dac6f6e05d9376c1e9157e61086b9f7c0524300a477ce902711a064b8f6ab31c
-size 7772180

gdk-pixbuf-2.42.2.zip

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:25ec35113309bede111b7c929950849673141c991bd079f02fd7cc02103a50d1
+size 7771922

gdk-pixbuf.changes

@@ -1,3 +1,13 @@
+-------------------------------------------------------------------
+Tue Dec  8 08:24:53 UTC 2020 - dimstar@opensuse.org
+
+- Update to version 2.42.2:
+  + Requre Meson 0.55.3.
+  + Improve the PNG save operation.
+  + Fix leak in the error path of the XPM loader.
+  + Fix loading GIF without a GCE rendering color 0.
+  + Fix invalid LZW codes in the GIF loader (CVE-2020-29385).
+
 -------------------------------------------------------------------
 Mon Nov  9 15:52:50 UTC 2020 - Dominique Leuenberger <dimstar@opensuse.org>
 

gdk-pixbuf.spec

@@ -20,7 +20,7 @@
 %define gdk_pixbuf_binary_version 2.10.0
 
 Name:           gdk-pixbuf
-Version:        2.42.0
+Version:        2.42.2
 Release:        0
 Summary:        An image loading library
 License:        LGPL-2.1-or-later
@@ -41,7 +41,7 @@ BuildRequires:  docbook-xsl-stylesheets
 BuildRequires:  gtk-doc
 BuildRequires:  libjpeg-devel
 BuildRequires:  libtiff-devel
-BuildRequires:  meson
+BuildRequires:  meson >= 0.55.3
 BuildRequires:  pkgconfig
 BuildRequires:  translation-update-upstream
 BuildRequires:  unzip