Accepting request 759939 from devel:libraries:c_c++

- Update to release 0.9.3
    [CVE-2019-20010, boo#1159825], [CVE-2019-20011, boo#1159826],
    [CVE-2019-20012, boo#1159827], [CVE-2019-20013, boo#1159828],
    [CVE-2019-20014, boo#1159831], [CVE-2019-20015, boo#1159832]
    [CVE-2019-20009, boo#1159824]

OBS-URL: https://build.opensuse.org/request/show/759939
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libredwg?expand=0&rev=9

libredwg-0.9.1.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:7563a923a9f1846a0cc122ae59e8306034a04b8b85ed32e3640658f7d3c81f19
-size 4443468

libredwg-0.9.1.tar.xz.sig

@@ -1,11 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQEzBAABCgAdFiEEKJWogdNCcPq/6PdHtPYzOeZdZBQFAl22zqwACgkQtPYzOeZd
-ZBQ5MQgAmkIkFJeHbzMjoTlyz5NgkYMD9BGUeOhHoUS0GDwg6c1hGlJZPDI4V4qe
-mPZu4mLmJn6mki87zBH5BJ23Js7k2C+XRFXPEtaPiDJjU+ZoWedyTGrX5CM8k5i5
-dfUC+Y5gThCia4J4Mvlr+AWKXI+3fyKXoTYF2eplJcpqTwWW6GIBcCUyNd1m1KBq
-03WVWBb5u8gq3DO2DKGtsGtnjpsUlPYgOAYlG5lOtfM1+Fbp3MKJNqBYWGS9reGZ
-jO5c+qmZGxCS6n/P2RjJFTwUSPqbZCao0TOqllP5ksoEfCsliS/p1+bKIwweuDKu
-qRXBVrhWX0AB8HS35XVa+6Q7XfPLjw==
-=EAIP
------END PGP SIGNATURE-----

libredwg-0.9.3.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:e53d4134208ee35fbf866171ee2052edd73bf339ab5b091acbc2769d8c20c43f
+size 11418201

libredwg-0.9.3.tar.gz.sig

@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCAAdFiEEKJWogdNCcPq/6PdHtPYzOeZdZBQFAl4DzmMACgkQtPYzOeZd
+ZBTuVQf/W7d7lOWmKncUlXluIXOJdcY0gc2DTP/qofN9tXm6IUT5IJKi/xg57dHM
+yEEHMaPcXEC+f9VjGJvoVA3FjWxYRSwnNZdaDeXIwo3RdW16xY6MRbLaYCKvuopS
+hMmsQuInXzfJXJs1oZv1EYjRoKeh2Vg67pDwR07XXAy0BaRlEHHUuJkOOqTN+s6b
+pjBtSBO5GtR5VApoyvSKABnTXtro+6UmSSVoDzTvvNJqBqZYVDvgTGwt/Nuxneef
+f53Cp01oDpj8uwaafbJ1jIrqmsDkwvZpRHPS2+MSJLuAckGX3m6+yQsTT3lSRRX9
+0CQ5X7KPIrXvxvFSV39rthy9WSMalw==
+=w65S
+-----END PGP SIGNATURE-----

libredwg.changes

@@ -1,3 +1,20 @@
+-------------------------------------------------------------------
+Sun Dec 29 20:45:54 UTC 2019 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to release 0.9.3
+  * Added the -x,--extnames option to dwglayers for r13-r14 DWGs.
+  * Fixed some leaks: SORTENTSTABLE, PROXY_ENTITY.ownerhandle
+    for r13.
+  * Add DICTIONARY.itemhandles[] for r13 and r14.
+  * Fixed some dwglayers null pointer derefs, and flush its output
+    for each layer.
+  * Added several overflow checks from fuzzing
+    [CVE-2019-20010, boo#1159825], [CVE-2019-20011, boo#1159826],
+    [CVE-2019-20012, boo#1159827], [CVE-2019-20013, boo#1159828],
+    [CVE-2019-20014, boo#1159831], [CVE-2019-20015, boo#1159832]
+  * Disallow illegal SPLINE scenarios
+    [CVE-2019-20009, boo#1159824]
+
 -------------------------------------------------------------------
 Wed Oct 30 14:46:09 UTC 2019 - Jan Engelhardt <jengelh@inai.de>
 

libredwg.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package libredwg
 #
-# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2019 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,17 +17,19 @@
 
 
 Name:           libredwg
-Version:        0.9.1
+Version:        0.9.3
 Release:        0
 Summary:        A library to handle DWG files
 License:        GPL-3.0-or-later
 Group:          Development/Libraries/C and C++
 URL:            https://www.gnu.org/software/libredwg/
-Source:         https://ftp.gnu.org/pub/gnu/%{name}/%{name}-%{version}.tar.xz
+
-Source2:        https://ftp.gnu.org/pub/gnu/%{name}/%{name}-%{version}.tar.xz.sig
+#Git-Clone:	https://github.com/LibreDWG/libredwg/
+Source:         https://ftp.gnu.org/pub/gnu/libredwg/%name-%version.tar.gz
+Source2:        https://ftp.gnu.org/pub/gnu/libredwg/%name-%version.tar.gz.sig
 Source3:        http://savannah.gnu.org/people/viewgpg.php?user_id=101103#/%{name}.keyring
 Source4:        %{name}-rpmlintrc
-BuildRequires:  pkgconfig
+BuildRequires:  pkg-config
 
 %description
 GNU LibreDWG is a C library to handle DWG files. It can replace the
@@ -67,7 +69,7 @@ GNU LibreDWG is a C library to handle DWG files. It can replace the
 OpenDWG libraries. DWG is the native file format of AutoCAD.
 
 %prep
-%setup -q
+%autosetup -p1
 
 %build
 # No management of SO version despite ABI breaking changes:
@@ -99,7 +101,7 @@ find %{buildroot} -type f -name "*.la" -delete -print
 
 %files devel
 %license COPYING
-%doc AUTHORS ChangeLog NEWS README README-alpha TODO
+%doc AUTHORS ChangeLog NEWS README TODO
 %{_includedir}/*.h
 %{_libdir}/libredwg.so
 %{_libdir}/pkgconfig/libredwg.pc