- Update to 1.5.3

+ Fix edge cases involving dequoting zero-length tuples that can lead to a
    buffer overflow under the right circumstances.  Thanks to A. Wilcox for
    reporting and supplying a patch. (boo#1105438 - CVE-2018-1000221) 
  + Ensure environment variables override values learned from personality files
    or built-in defaults.
  + Add pkgconf-personality(5) manpage documenting the personality file format.
- Drop BR pkgconfig and manually specified pkgconfig() Provides for
  devel subpackage to avoid dependency loops.

OBS-URL: https://build.opensuse.org/package/show/devel:tools/pkgconf?expand=0&rev=6

pkgconf-1.5.1.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:d6877d721f84b59f137da48b237f16e68b598f5afc4f2a04d0a5c9e7e2bf5462
-size 289616

pkgconf-1.5.3.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:d3468308553c94389dadfd10c4d1067269052b5364276a9d24a643c88485f715
+size 290240

pkgconf.changes

@@ -1,3 +1,16 @@
+-------------------------------------------------------------------
+Tue Aug 21 12:27:05 UTC 2018 - Neal Gompa <ngompa13@gmail.com>
+
+- Update to 1.5.3
+  + Fix edge cases involving dequoting zero-length tuples that can lead to a
+    buffer overflow under the right circumstances.  Thanks to A. Wilcox for
+    reporting and supplying a patch. (boo#1105438 - CVE-2018-1000221) 
+  + Ensure environment variables override values learned from personality files
+    or built-in defaults.
+  + Add pkgconf-personality(5) manpage documenting the personality file format.
+- Drop BR pkgconfig and manually specified pkgconfig() Provides for
+  devel subpackage to avoid dependency loops.
+
 -------------------------------------------------------------------
 Wed Jun 20 10:51:58 UTC 2018 - Karol Babioch <kbabioch@suse.com>
 

pkgconf.spec

@@ -37,7 +37,7 @@
 %global devname lib%{name}-devel
 
 Name:           pkgconf
-Version:        1.5.1
+Version:        1.5.3
 Release:        0
 Summary:        Package compiler and linker metadata toolkit
 License:        ISC
@@ -56,9 +56,6 @@ BuildRequires:  autoconf
 BuildRequires:  automake
 BuildRequires:  libtool
 
-# To ensure that the pkgconfig() deps are generated
-BuildRequires:  pkgconfig
-
 # pkgconf uses libpkgconf internally
 Requires:       %{libname}%{?_isa} = %{version}-%{release}
 
@@ -83,6 +80,8 @@ of %{name}.
 Summary:        Development files for lib%{name}
 License:        ISC
 Group:          Development/Libraries/C and C++
+# Avoid dependency loop on itself by specifying the Provides directly
+Provides:       pkgconfig(libpkgconf) = %{version}
 Requires:       %{libname}%{?_isa} = %{version}-%{release}
 
 %description -n %{devname}
@@ -181,6 +180,7 @@ rm -rf %{buildroot}%{_mandir}/man7
 %{_bindir}/%{name}
 %{_mandir}/man1/%{name}.1*
 %{_mandir}/man5/pc.5*
+%{_mandir}/man5/%{name}-personality.5*
 
 %files -n %{libname}
 %license COPYING