From 9a9eab1c6705485a26a3088b926efbdd3c56a33df51ffd1814707474cc90c64d Mon Sep 17 00:00:00 2001 From: Jan Engelhardt Date: Sun, 29 Dec 2019 20:56:21 +0000 Subject: [PATCH] - Update to release 0.9.3 OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libredwg?expand=0&rev=21 --- libredwg-0.9.1.tar.xz | 3 --- libredwg-0.9.1.tar.xz.sig | 11 ----------- libredwg-0.9.3.tar.gz | 3 +++ libredwg-0.9.3.tar.gz.sig | 11 +++++++++++ libredwg.changes | 17 +++++++++++++++++ libredwg.spec | 16 +++++++++------- 6 files changed, 40 insertions(+), 21 deletions(-) delete mode 100644 libredwg-0.9.1.tar.xz delete mode 100644 libredwg-0.9.1.tar.xz.sig create mode 100644 libredwg-0.9.3.tar.gz create mode 100644 libredwg-0.9.3.tar.gz.sig diff --git a/libredwg-0.9.1.tar.xz b/libredwg-0.9.1.tar.xz deleted file mode 100644 index 39465ac..0000000 --- a/libredwg-0.9.1.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:7563a923a9f1846a0cc122ae59e8306034a04b8b85ed32e3640658f7d3c81f19 -size 4443468 diff --git a/libredwg-0.9.1.tar.xz.sig b/libredwg-0.9.1.tar.xz.sig deleted file mode 100644 index c9d3447..0000000 --- a/libredwg-0.9.1.tar.xz.sig +++ /dev/null @@ -1,11 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQEzBAABCgAdFiEEKJWogdNCcPq/6PdHtPYzOeZdZBQFAl22zqwACgkQtPYzOeZd -ZBQ5MQgAmkIkFJeHbzMjoTlyz5NgkYMD9BGUeOhHoUS0GDwg6c1hGlJZPDI4V4qe -mPZu4mLmJn6mki87zBH5BJ23Js7k2C+XRFXPEtaPiDJjU+ZoWedyTGrX5CM8k5i5 -dfUC+Y5gThCia4J4Mvlr+AWKXI+3fyKXoTYF2eplJcpqTwWW6GIBcCUyNd1m1KBq -03WVWBb5u8gq3DO2DKGtsGtnjpsUlPYgOAYlG5lOtfM1+Fbp3MKJNqBYWGS9reGZ -jO5c+qmZGxCS6n/P2RjJFTwUSPqbZCao0TOqllP5ksoEfCsliS/p1+bKIwweuDKu -qRXBVrhWX0AB8HS35XVa+6Q7XfPLjw== -=EAIP ------END PGP SIGNATURE----- diff --git a/libredwg-0.9.3.tar.gz b/libredwg-0.9.3.tar.gz new file mode 100644 index 0000000..51ecbe5 --- /dev/null +++ b/libredwg-0.9.3.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:e53d4134208ee35fbf866171ee2052edd73bf339ab5b091acbc2769d8c20c43f +size 11418201 diff --git a/libredwg-0.9.3.tar.gz.sig b/libredwg-0.9.3.tar.gz.sig new file mode 100644 index 0000000..6da7050 --- /dev/null +++ b/libredwg-0.9.3.tar.gz.sig @@ -0,0 +1,11 @@ +-----BEGIN PGP SIGNATURE----- + +iQEzBAABCAAdFiEEKJWogdNCcPq/6PdHtPYzOeZdZBQFAl4DzmMACgkQtPYzOeZd +ZBTuVQf/W7d7lOWmKncUlXluIXOJdcY0gc2DTP/qofN9tXm6IUT5IJKi/xg57dHM +yEEHMaPcXEC+f9VjGJvoVA3FjWxYRSwnNZdaDeXIwo3RdW16xY6MRbLaYCKvuopS +hMmsQuInXzfJXJs1oZv1EYjRoKeh2Vg67pDwR07XXAy0BaRlEHHUuJkOOqTN+s6b +pjBtSBO5GtR5VApoyvSKABnTXtro+6UmSSVoDzTvvNJqBqZYVDvgTGwt/Nuxneef +f53Cp01oDpj8uwaafbJ1jIrqmsDkwvZpRHPS2+MSJLuAckGX3m6+yQsTT3lSRRX9 +0CQ5X7KPIrXvxvFSV39rthy9WSMalw== +=w65S +-----END PGP SIGNATURE----- diff --git a/libredwg.changes b/libredwg.changes index 814e45b..d4ead8e 100644 --- a/libredwg.changes +++ b/libredwg.changes @@ -1,3 +1,20 @@ +------------------------------------------------------------------- +Sun Dec 29 20:45:54 UTC 2019 - Jan Engelhardt + +- Update to release 0.9.3 + * Added the -x,--extnames option to dwglayers for r13-r14 DWGs. + * Fixed some leaks: SORTENTSTABLE, PROXY_ENTITY.ownerhandle + for r13. + * Add DICTIONARY.itemhandles[] for r13 and r14. + * Fixed some dwglayers null pointer derefs, and flush its output + for each layer. + * Added several overflow checks from fuzzing + [CVE-2019-20010, boo#1159825], [CVE-2019-20011, boo#1159826], + [CVE-2019-20012, boo#1159827], [CVE-2019-20013, boo#1159828], + [CVE-2019-20014, boo#1159831], [CVE-2019-20015, boo#1159832] + * Disallow illegal SPLINE scenarios + [CVE-2019-20009, boo#1159824] + ------------------------------------------------------------------- Wed Oct 30 14:46:09 UTC 2019 - Jan Engelhardt diff --git a/libredwg.spec b/libredwg.spec index 9d3e748..fb24d93 100644 --- a/libredwg.spec +++ b/libredwg.spec @@ -1,7 +1,7 @@ # # spec file for package libredwg # -# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2019 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,17 +17,19 @@ Name: libredwg -Version: 0.9.1 +Version: 0.9.3 Release: 0 Summary: A library to handle DWG files License: GPL-3.0-or-later Group: Development/Libraries/C and C++ URL: https://www.gnu.org/software/libredwg/ -Source: https://ftp.gnu.org/pub/gnu/%{name}/%{name}-%{version}.tar.xz -Source2: https://ftp.gnu.org/pub/gnu/%{name}/%{name}-%{version}.tar.xz.sig + +#Git-Clone: https://github.com/LibreDWG/libredwg/ +Source: https://ftp.gnu.org/pub/gnu/libredwg/%name-%version.tar.gz +Source2: https://ftp.gnu.org/pub/gnu/libredwg/%name-%version.tar.gz.sig Source3: http://savannah.gnu.org/people/viewgpg.php?user_id=101103#/%{name}.keyring Source4: %{name}-rpmlintrc -BuildRequires: pkgconfig +BuildRequires: pkg-config %description GNU LibreDWG is a C library to handle DWG files. It can replace the @@ -67,7 +69,7 @@ GNU LibreDWG is a C library to handle DWG files. It can replace the OpenDWG libraries. DWG is the native file format of AutoCAD. %prep -%setup -q +%autosetup -p1 %build # No management of SO version despite ABI breaking changes: @@ -99,7 +101,7 @@ find %{buildroot} -type f -name "*.la" -delete -print %files devel %license COPYING -%doc AUTHORS ChangeLog NEWS README README-alpha TODO +%doc AUTHORS ChangeLog NEWS README TODO %{_includedir}/*.h %{_libdir}/libredwg.so %{_libdir}/pkgconfig/libredwg.pc