Accepting request 738457 from GNOME:Next

- Update to version 2.46.2:
  + Patterns and gradients reused across more than one element will
    only get resolved once now; this should make things marginally
    faster for patterns or gradients with fallbacks.
  + glgo#GNOME/librsvg#515: Librsvg now has limits on the number of
    loaded XML elements, and the number of referenced elements
    within an SVG document. This is to mitigate malicious SVGs
    which try to consume all memory, and those which try to consume
    an exponential amount of CPU time.

OBS-URL: https://build.opensuse.org/request/show/738457
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/librsvg?expand=0&rev=159
This commit is contained in:
Dominique Leuenberger 2019-10-15 07:46:17 +00:00 committed by Git OBS Bridge
parent 5d81e5dd2a
commit 7bcd8af2e4
4 changed files with 17 additions and 4 deletions

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:2da1f2547a63a24ead121ad345011d5fd4f038ef46f74712ec82a1e85ec67643
size 12741720

3
librsvg-2.46.2.tar.xz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:379ec0bbf9ce249c2bc03f4a124d8f532abe0916d908c5cf26821e5af1668197
size 12671048

View File

@ -1,3 +1,16 @@
-------------------------------------------------------------------
Mon Oct 14 17:06:58 UTC 2019 - Bjørn Lie <bjorn.lie@gmail.com>
- Update to version 2.46.2:
+ Patterns and gradients reused across more than one element will
only get resolved once now; this should make things marginally
faster for patterns or gradients with fallbacks.
+ glgo#GNOME/librsvg#515: Librsvg now has limits on the number of
loaded XML elements, and the number of referenced elements
within an SVG document. This is to mitigate malicious SVGs
which try to consume all memory, and those which try to consume
an exponential amount of CPU time.
-------------------------------------------------------------------
Mon Oct 7 16:57:23 UTC 2019 - Bjørn Lie <bjorn.lie@gmail.com>

View File

@ -20,7 +20,7 @@
%define librsvg_sover 2
Name: librsvg
Version: 2.46.1
Version: 2.46.2
Release: 0
Summary: A Library for Rendering SVG Data
License: LGPL-2.0-or-later AND GPL-2.0-or-later AND Apache-2.0 AND MIT