CVE-2025-62813 was rejected

- Switch to cmake build system: Creates extra cmake modules for
  consuming projects

OBS-URL: https://build.opensuse.org/request/show/1194080
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/lz4?expand=0&rev=22

lz4.changes

@@ -1,3 +1,34 @@
+-------------------------------------------------------------------
+Wed Nov  5 08:04:49 UTC 2025 - pgajdos@suse.com
+
+- CVE-2025-62813 was rejected [bsc#1252557]
+- deleted patches
+  * lz4-CVE-2025-62813.patch
+
+-------------------------------------------------------------------
+Wed Oct 29 10:49:47 UTC 2025 - pgajdos@suse.com
+
+- security update
+- added patches
+  CVE-2025-62813 [bsc#1252557], incorrect error handling when passing
+   a NULL pointer to lz4frame functions allows for application crash
+   when processing untrusted LZ4 frames
+  * lz4-CVE-2025-62813.patch
+
+-------------------------------------------------------------------
+Wed Aug 14 16:09:45 UTC 2024 - Ben Greiner <code@bnavigator.de>
+
+- Switch to cmake build system: Creates extra cmake modules for
+  consuming projects
+
+-------------------------------------------------------------------
+Mon Jul 22 11:45:03 UTC 2024 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to release 1.10.0
+  * Support for multithreading
+  * Full support for dictionary compression
+  * New compression level 2
+
 -------------------------------------------------------------------
 Wed Mar  8 09:55:21 UTC 2023 - Martin Pluskal <mpluskal@suse.com>
 

lz4.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package lz4
 #
-# Copyright (c) 2022 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -18,7 +18,7 @@
 
 %define lname	liblz4-1
 Name:           lz4
-Version:        1.9.4
+Version:        1.10.0
 Release:        0
 Summary:        Hash-based Predictive Lempel–Ziv compressor
 License:        BSD-2-Clause AND GPL-2.0-or-later
@@ -30,6 +30,8 @@ Source:         https://github.com/lz4/lz4/archive/v%version.tar.gz
 Source99:       baselibs.conf
 Patch2:         lz-export.diff
 BuildRequires:  pkgconfig
+BuildRequires:  cmake
+BuildRequires:  fdupes
 %{?suse_build_hwcaps_libs}
 
 %description
@@ -71,16 +73,18 @@ applications that want to make use of liblz4.
 %autosetup -p1
 
 %build
-V=1 %make_build CFLAGS="%optflags"
+%define __sourcedir build/cmake
+%cmake \
+  -DBUILD_STATIC_LIBS:BOOL=OFF
+%cmake_build
 
 %install
-%make_install PREFIX="%_prefix" LIBDIR="%_libdir"
-rm -f "%buildroot/%_libdir"/*.a
+%cmake_install
+%fdupes %{buildroot}/%{_mandir}
 
 %check
 LD_LIBRARY_PATH="%buildroot/%_libdir" ldd -r "%buildroot/%_bindir/lz4"
-# TS fails on its own help output
-%make_build check -k || :
+%make_build check -k
 
 %post   -n %lname -p /sbin/ldconfig
 %postun -n %lname -p /sbin/ldconfig
@@ -97,5 +101,6 @@ LD_LIBRARY_PATH="%buildroot/%_libdir" ldd -r "%buildroot/%_bindir/lz4"
 %_includedir/lz4*.h
 %_libdir/liblz4.so
 %_libdir/pkgconfig/*.pc
+%_libdir/cmake/lz4
 
 %changelog