diff --git a/pkgconf-1.5.1.tar.xz b/pkgconf-1.5.1.tar.xz deleted file mode 100644 index eef9e32..0000000 --- a/pkgconf-1.5.1.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:d6877d721f84b59f137da48b237f16e68b598f5afc4f2a04d0a5c9e7e2bf5462 -size 289616 diff --git a/pkgconf-1.5.3.tar.xz b/pkgconf-1.5.3.tar.xz new file mode 100644 index 0000000..9e5d2a2 --- /dev/null +++ b/pkgconf-1.5.3.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:d3468308553c94389dadfd10c4d1067269052b5364276a9d24a643c88485f715 +size 290240 diff --git a/pkgconf.changes b/pkgconf.changes index 030fa31..7e1dfc8 100644 --- a/pkgconf.changes +++ b/pkgconf.changes @@ -1,3 +1,16 @@ +------------------------------------------------------------------- +Tue Aug 21 12:27:05 UTC 2018 - Neal Gompa + +- Update to 1.5.3 + + Fix edge cases involving dequoting zero-length tuples that can lead to a + buffer overflow under the right circumstances. Thanks to A. Wilcox for + reporting and supplying a patch. (boo#1105438 - CVE-2018-1000221) + + Ensure environment variables override values learned from personality files + or built-in defaults. + + Add pkgconf-personality(5) manpage documenting the personality file format. +- Drop BR pkgconfig and manually specified pkgconfig() Provides for + devel subpackage to avoid dependency loops. + ------------------------------------------------------------------- Wed Jun 20 10:51:58 UTC 2018 - Karol Babioch diff --git a/pkgconf.spec b/pkgconf.spec index 7ffac59..aef7795 100644 --- a/pkgconf.spec +++ b/pkgconf.spec @@ -37,7 +37,7 @@ %global devname lib%{name}-devel Name: pkgconf -Version: 1.5.1 +Version: 1.5.3 Release: 0 Summary: Package compiler and linker metadata toolkit License: ISC @@ -56,9 +56,6 @@ BuildRequires: autoconf BuildRequires: automake BuildRequires: libtool -# To ensure that the pkgconfig() deps are generated -BuildRequires: pkgconfig - # pkgconf uses libpkgconf internally Requires: %{libname}%{?_isa} = %{version}-%{release} @@ -83,6 +80,8 @@ of %{name}. Summary: Development files for lib%{name} License: ISC Group: Development/Libraries/C and C++ +# Avoid dependency loop on itself by specifying the Provides directly +Provides: pkgconfig(libpkgconf) = %{version} Requires: %{libname}%{?_isa} = %{version}-%{release} %description -n %{devname} @@ -181,6 +180,7 @@ rm -rf %{buildroot}%{_mandir}/man7 %{_bindir}/%{name} %{_mandir}/man1/%{name}.1* %{_mandir}/man5/pc.5* +%{_mandir}/man5/%{name}-personality.5* %files -n %{libname} %license COPYING