Accepting request 412437 from home:AndreasStieger:branches:devel:libraries:c_c++

security update for libidn

OBS-URL: https://build.opensuse.org/request/show/412437
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libidn?expand=0&rev=45

libidn-1.32.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:ba5d5afee2beff703a34ee094668da5c6ea5afa38784cebba8924105e185c4f5
-size 3483155

libidn-1.32.tar.gz.sig

@@ -1,11 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1
-
-iQEcBAABCAAGBQJVvMuJAAoJEIYLf7sy+BGdVoYH+wfWHfE0GiBpH2jfE8Gxkv1g
-xXXkpbUEbJtwxLl+RZ7nMCf17swllh9fkvW20e3gvUZk81JEEIu2DNDr06EwKW3Y
-Aj+AIkV77iChFWjX9lDbYLRLk07GshJuzz3jOuXg1vK1hdRFqtJRTXZkBNWrPhZR
-B2f7sSKzCO/UI1/cEDiCPBdOzId5Qq4B6R19wmk0553JtkDh/CblDHvUC4LeI7nP
-B9dYH9SoPFUuUhTc1oiFr6AecMqyqdYUU6Nwc/tk1Ryt9PxV3n0L+moxPiAzbm+u
-gf3hMp+4mSyYS206tjt9qMK98xqTs97fLmiPBEYCZvw4FMQNzzyGdeGv9jxotmg=
-=vvNs
------END PGP SIGNATURE-----

libidn-1.33.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:44a7aab635bb721ceef6beecc4d49dfd19478325e1b47f3196f7d2acc4930e19
+size 3501056

libidn-1.33.tar.gz.sig

@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1
+
+iQEcBAABCAAGBQJXj7eIAAoJEIYLf7sy+BGdz00IAK/RXuHfe9hsZPU/FgSFoltx
+aBr3u669n1+gAWIMcBQVRR2vs2tOfGiuHnAzitTiDk73MnreeUCEN4Iict7O0VV1
+Wpo0oYiNaMyqlyXUDblxgwhQm9kagJvMRMkSTWih5CB/0dOWT/D/dBWDJb0qnpRX
+i7+OAbmOLvJqDwLG1YFbq84PioEakbSp9PFgx298rJei+tutcq8YX2R3EYGODL/e
+nzMCCR0fDGtBqYKJIPCBwFcXqWMmVbOfGOowvi4/znz4MG/EoJAXEpu5Hjh5OD6b
+ZRBE/m33+Cwi0XYmgzmCUJ05/djcVAoLz6iToWEkTCf/nXC48zPmP3ibrz5WSpA=
+=jAqi
+-----END PGP SIGNATURE-----

libidn.changes

@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Wed Jul 20 21:01:13 UTC 2016 - astieger@suse.com
+
+- libidn 1.33:
+  * libidn: Fix out-of-bounds stack read in idna_to_ascii_4i.
+  * idn: Solve out-of-bounds-read when reading one zero byte as input.
+  * libidn: stringprep_utf8_nfkc_normalize reject invalid UTF-8.
+
 -------------------------------------------------------------------
 Thu Aug 13 19:10:23 UTC 2015 - mpluskal@suse.com
 

libidn.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package libidn
 #
-# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -18,7 +18,7 @@
 
 %define lname	libidn11
 Name:           libidn
-Version:        1.32
+Version:        1.33
 Release:        0
 Summary:        Support for Internationalized Domain Names (IDN)
 License:        (GPL-2.0+ or LGPL-3.0+) and GPL-3.0+ and Apache-2.0
@@ -28,7 +28,7 @@ Source0:        http://ftp.gnu.org/gnu/%{name}/%{name}-%{version}.tar.gz
 Source1:        http://ftp.gnu.org/gnu/%{name}/%{name}-%{version}.tar.gz.sig
 Source2:        libidn.keyring
 Source3:        baselibs.conf
-BuildRequires:  pkg-config
+BuildRequires:  pkgconfig
 Requires(post): %{install_info_prereq}
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 
@@ -113,7 +113,7 @@ IDNA is supported.
 make %{?_smp_mflags}
 
 %install
-make DESTDIR=%{buildroot} install %{?_smp_mflags}
+make %{?_smp_mflags} DESTDIR=%{buildroot} install
 find %{buildroot} -type f -name "*.la" -delete -print
 
 %find_lang %{name}
@@ -130,7 +130,6 @@ make check %{?_smp_mflags}
 %install_info_delete --info-dir=%{_infodir} %{_infodir}/libidn.info.*
 
 %post -n %{lname} -p /sbin/ldconfig
-
 %postun -n %{lname} -p /sbin/ldconfig
 
 %files tools -f %{name}.lang
@@ -140,7 +139,7 @@ make check %{?_smp_mflags}
 %doc AUTHORS COPYING* ChangeLog FAQ NEWS README THANKS TODO
 %{_infodir}/libidn*
 %{_bindir}/idn
-%{_mandir}/man1/idn.1.*
+%{_mandir}/man1/idn.1%{ext_man}
 %{_datadir}/emacs/site-lisp/idna.el
 %{_datadir}/emacs/site-lisp/punycode.el