baserev update by copy to link target

• Files Changed
• Browse Source

- update to 0.16.3:
  * new upstream location
  * Define a separate library soversion, which is set to 0 to
    preserve ABI compatibility.

  <https://github.com/tenacityteam/libid3tag/issues/6>
  system via pkgconfig files.
- add pgkconfig file

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Update to 0.16.2
  * Fix null pointer dereference in id3_ucs4_length
    (boo#1081962, CVE-2017-11550)
- Drop id3_ucs4_length-sanity-check.patch. Merged upstream.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Add id3_ucs4_length-sanity-check.patch as Patch0.
  The patch helps to avoid a segfault in programs using this library,
  such as minidlna and potentially others; for details see
  <https://github.com/tenacityteam/libid3tag/pull/7> and
  <https://github.com/tenacityteam/libid3tag/issues/6>  

• Files Changed
• Browse Source

Update to 0.16.1

switch to maintained fork (as some other distributions did before us)

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Added libid3tag-utf16.patch: Fixed id3_utf16_deserialize() in utf16.c,
  which previously misparsed ID3v2 tags encoded in UTF-16 with an odd
  number of bytes, triggering an endless loop allocating memory until
  OOM leading to DoS. (CVE-2004-2779 bsc#1081959 CVE-2017-11551
  bsc#1081961)
- Added libid3tag-unknown-encoding.patch: Fixed the handling of unknown
  encodings when parsing ID3 tags. (CVE-2017-11550 bsc#1081962
  CVE-2008-2109 bsc#387731)
- Removed libid3tag-0.15.1b-fix_overflow.patch, since it is handled
  differently by libid3tag-utf16.patch already.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- dont BuildRequire zypper to avoid unecessary dependency chain.
  Check for %suse_version instead.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

DimStar suggested this solution in order to build with all versions of gperf

- Add BuildRequires: zypper and use it to check for gperf version so
  the package builds with all versions of gperf (boo#1027205)

  of the hash/lookup function (boo#1027205)

• Files Changed
• Browse Source

- Add fix-build-with-gperf-3.1.diff to fix build with gperf 3.1
  which now uses size_t instead of unsigned int for the len parameter
  of the hash/lookup function.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Use url for source
- Add baselibs.conf as source
- Cleanup spec file with spec-cleaner

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Employ shared library naming
- Have makeinstall succeed on non-SUSE

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- libid3tag-visibility.patch: Hide all symbols that are not
  part of the public API.
- spec file: DO not inject bogus dependencies into the
  system via pkgconfig files.

• Files Changed
• Browse Source