Accepting request 862141 from home:andythe_great:branches:devel:languages:python

- Update to version 2.5.1.
  * Security fix: When processing SVG files, CairoSVG was using two
    regular expressions which are vulnerable to Regular Expression 
    Denial of Service (REDoS). If an attacker provided a malicious 
    SVG, it could make CairoSVG get stuck processing the file for a 
    very long time.
  * Fix marker positions for unclosed paths
  * Follow hint when only output_width or output_height is set
  * Handle opacity on raster images
  * Don’t crash when use tags reference unknown tags
  * Take care of the next letter when A/a is replaced by l
  * Fix misalignment in node.vertices
- Updates for version 2.5.0.
  * Drop support of Python 3.5, add support of Python 3.9.
  * Add EPS export
  * Add background-color, negate-colors, and invert-images options
  * Improve support for font weights
  * Fix opacity of patterns and gradients
  * Support auto-start-reverse value for orient
  * Draw images contained in defs
  * Add Exif transposition support
  * Handle dominant-baseline
  * Support transform-origin
- Add _service file to fetch required submodule.

OBS-URL: https://build.opensuse.org/request/show/862141
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-CairoSVG?expand=0&rev=20

CairoSVG-2.4.2.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:4e668f96653326780036ebb0a9ff2bb59a8443d7bcfc51a14aab77b57a8e67ad
-size 38715

CairoSVG-2.5.1.obscpio

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:3b222f913913fe97b90e22f6628973939ef7ce21d3b65a507a61d999b5bb5904
+size 262781454

CairoSVG.obsinfo

@@ -0,0 +1,5 @@
+name: CairoSVG
+version: 2.5.1
+mtime: 1609944616
+commit: 44c5d42f96be879fc4e21775e51300bd3ad0093e
+

_service

@@ -0,0 +1,15 @@
+<services>
+  <service mode="disabled" name="obs_scm">
+    <param name="url">git://github.com/Kozea/CairoSVG.git</param>
+    <param name="scm">git</param>
+    <param name="submodules">enable</param>
+    <param name="revision">44c5d42</param>
+    <param name="versionformat">@PARENT_TAG@</param>
+  </service>
+  <service mode="buildtime" name="tar" />
+  <service mode="buildtime" name="recompress">
+    <param name="file">*.tar</param>
+    <param name="compression">xz</param>
+  </service>
+  <service mode="disabled" name="set_version" />
+</services>

python-CairoSVG.changes

@@ -1,3 +1,31 @@
+-------------------------------------------------------------------
+Sun Jan 10 16:09:41 UTC 2021 - andy great <andythe_great@pm.me>
+
+- Update to version 2.5.1.
+  * Security fix: When processing SVG files, CairoSVG was using two
+    regular expressions which are vulnerable to Regular Expression 
+    Denial of Service (REDoS). If an attacker provided a malicious 
+    SVG, it could make CairoSVG get stuck processing the file for a 
+    very long time.
+  * Fix marker positions for unclosed paths
+  * Follow hint when only output_width or output_height is set
+  * Handle opacity on raster images
+  * Don’t crash when use tags reference unknown tags
+  * Take care of the next letter when A/a is replaced by l
+  * Fix misalignment in node.vertices
+- Updates for version 2.5.0.
+  * Drop support of Python 3.5, add support of Python 3.9.
+  * Add EPS export
+  * Add background-color, negate-colors, and invert-images options
+  * Improve support for font weights
+  * Fix opacity of patterns and gradients
+  * Support auto-start-reverse value for orient
+  * Draw images contained in defs
+  * Add Exif transposition support
+  * Handle dominant-baseline
+  * Support transform-origin
+- Add _service file to fetch required submodule.
+
 -------------------------------------------------------------------
 Tue Sep 24 08:46:49 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
 

python-CairoSVG.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package python-CairoSVG
 #
-# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2021 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -19,13 +19,13 @@
 %{?!python_module:%define python_module() python-%{**} python3-%{**}}
 %define skip_python2 1
 Name:           python-CairoSVG
-Version:        2.4.2
+Version:        2.5.1
 Release:        0
 Summary:        A Python SVG converter based on Cairo
 License:        LGPL-3.0-or-later
 Group:          Development/Languages/Python
 URL:            http://www.cairosvg.org/
-Source:         https://files.pythonhosted.org/packages/source/C/CairoSVG/CairoSVG-%{version}.tar.gz
+Source:         CairoSVG-%{version}.tar.xz
 BuildRequires:  %{python_module Pillow}
 BuildRequires:  %{python_module cairocffi}
 BuildRequires:  %{python_module cssselect2}