From e562032fb58f6b8d77c8d38f0b9a44bc21ddef42a5491266588a4099437591e1 Mon Sep 17 00:00:00 2001 From: Luciano Santos Date: Thu, 27 Jul 2023 01:23:27 +0000 Subject: [PATCH] Accepting request 1100425 from GNOME:Next - Update to version 2.56.3: + This is a security release for bug glgo#GNOME/librsvg#996. - glgo#GNOME/librsvg#996: Fix arbitrary file read when href has special characters. - glgo#GNOME/librsvg#998: Fix cascade for symbol elements being referenced from use elements. OBS-URL: https://build.opensuse.org/request/show/1100425 OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/librsvg?expand=0&rev=239 --- _service | 2 +- librsvg-2.56.1.obscpio | 3 --- librsvg-2.56.3.obscpio | 3 +++ librsvg.changes | 10 ++++++++++ librsvg.obsinfo | 6 +++--- librsvg.spec | 2 +- vendor.tar.zst | 4 ++-- 7 files changed, 20 insertions(+), 10 deletions(-) delete mode 100644 librsvg-2.56.1.obscpio create mode 100644 librsvg-2.56.3.obscpio diff --git a/_service b/_service index 113a3a5..00d96c9 100644 --- a/_service +++ b/_service @@ -3,7 +3,7 @@ https://gitlab.gnome.org/GNOME/librsvg.git git - refs/tags/2.56.1 + refs/tags/2.56.3 @PARENT_TAG@+@TAG_OFFSET@ (.*)\+0 \1 diff --git a/librsvg-2.56.1.obscpio b/librsvg-2.56.1.obscpio deleted file mode 100644 index 54ca543..0000000 --- a/librsvg-2.56.1.obscpio +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:d3a5594a9991f8c0dcd5d3eb3c85632d4309837327fb64422a241cc56f471849 -size 14281229 diff --git a/librsvg-2.56.3.obscpio b/librsvg-2.56.3.obscpio new file mode 100644 index 0000000..f429563 --- /dev/null +++ b/librsvg-2.56.3.obscpio @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:9d5687e9204347c696a4bed63e5ecdc6db5d28c0860408f1cd7823d6fce963a8 +size 14294541 diff --git a/librsvg.changes b/librsvg.changes index 7d108a2..2a2bd33 100644 --- a/librsvg.changes +++ b/librsvg.changes @@ -1,3 +1,13 @@ +------------------------------------------------------------------- +Fri Jul 21 10:17:36 UTC 2023 - Bjørn Lie + +- Update to version 2.56.3: + + This is a security release for bug glgo#GNOME/librsvg#996. + - glgo#GNOME/librsvg#996: Fix arbitrary file read when href has + special characters. + - glgo#GNOME/librsvg#998: Fix cascade for symbol elements being + referenced from use elements. + ------------------------------------------------------------------- Wed Jun 21 06:22:07 UTC 2023 - Dominique Leuenberger diff --git a/librsvg.obsinfo b/librsvg.obsinfo index 12090a1..10bdcfd 100644 --- a/librsvg.obsinfo +++ b/librsvg.obsinfo @@ -1,4 +1,4 @@ name: librsvg -version: 2.56.1 -mtime: 1685500412 -commit: c0d8ee415cd4ee268264ef2c7bfa53f576599cfa +version: 2.56.3 +mtime: 1689887914 +commit: 312c4b8c28c99b9051ee6de6fa966cf977b0f7b4 diff --git a/librsvg.spec b/librsvg.spec index 45beefe..e4132f0 100644 --- a/librsvg.spec +++ b/librsvg.spec @@ -20,7 +20,7 @@ %define librsvg_sover 2 Name: librsvg -Version: 2.56.1 +Version: 2.56.3 Release: 0 Summary: A Library for Rendering SVG Data License: GPL-2.0-or-later AND LGPL-2.0-or-later AND MIT diff --git a/vendor.tar.zst b/vendor.tar.zst index 2cbe1d0..ae0a6fa 100644 --- a/vendor.tar.zst +++ b/vendor.tar.zst @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:fa81142e485aa3c8639f82571f6e0160d126c87f4b8e68591b3218235ab1833f -size 41235550 +oid sha256:81cf11bed91c7802a4f3ab51384a19f9d13a5a7c58c20cae6378925e6ea91d2e +size 36712350