Accepting request 1100944 from GNOME:Factory

OBS-URL: https://build.opensuse.org/request/show/1100944
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/librsvg?expand=0&rev=135

_service

@@ -3,7 +3,7 @@
   <service name="obs_scm" mode="manual">
     <param name="url">https://gitlab.gnome.org/GNOME/librsvg.git</param>
     <param name="scm">git</param>
-    <param name="revision">refs/tags/2.56.1</param>
+    <param name="revision">refs/tags/2.56.3</param>
     <param name="versionformat">@PARENT_TAG@+@TAG_OFFSET@</param>
     <param name="versionrewrite-pattern">(.*)\+0</param>
     <param name="versionrewrite-replacement">\1</param>

librsvg-2.56.1.obscpio

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:d3a5594a9991f8c0dcd5d3eb3c85632d4309837327fb64422a241cc56f471849
-size 14281229

librsvg.changes

@@ -1,3 +1,13 @@
+-------------------------------------------------------------------
+Fri Jul 21 10:17:36 UTC 2023 - Bjørn Lie <bjorn.lie@gmail.com>
+
+- Update to version 2.56.3:
+  + This is a security release for bug glgo#GNOME/librsvg#996.
+    - glgo#GNOME/librsvg#996: Fix arbitrary file read when href has
+      special characters.
+    - glgo#GNOME/librsvg#998: Fix cascade for symbol elements being
+      referenced from use elements.
+
 -------------------------------------------------------------------
 Wed Jun 21 06:22:07 UTC 2023 - Dominique Leuenberger <dimstar@opensuse.org>
 

librsvg.obsinfo

@@ -1,4 +1,4 @@
 name: librsvg
-version: 2.56.1
-mtime: 1685500412
-commit: c0d8ee415cd4ee268264ef2c7bfa53f576599cfa
+version: 2.56.3
+mtime: 1689887914
+commit: 312c4b8c28c99b9051ee6de6fa966cf977b0f7b4

librsvg.spec

@@ -20,7 +20,7 @@
 %define librsvg_sover 2
 
 Name:           librsvg
-Version:        2.56.1
+Version:        2.56.3
 Release:        0
 Summary:        A Library for Rendering SVG Data
 License:        GPL-2.0-or-later AND LGPL-2.0-or-later AND MIT