openSUSE Build Service

Overview Repositories Revisions Requests Users Attributes Meta

File gcab.changes of Package gcab (Revision 7311210608f3fca04482c4dbd5353073)

Currently displaying revision 7311210608f3fca04482c4dbd5353073 , Show latest

-------------------------------------------------------------------
Sat Mar 10 09:17:21 UTC 2018 - jengelh@inai.de

- Update description.

-------------------------------------------------------------------
Wed Feb 28 16:25:37 UTC 2018 - dimstar@opensuse.org

- Modernize spec-file by calling spec-cleaner

-------------------------------------------------------------------
Mon Feb 12 10:28:17 UTC 2018 - bjorn.lie@gmail.com

- Add gcab-revert-git-dep.patch: Revert new dependency on git,
  having a builddependency on git just to able to show version when
  using a git checkout is a bit much (bgo#793406).
- Following the above patch, drop git BuildRequires.

-------------------------------------------------------------------
Fri Feb  9 23:49:52 UTC 2018 - luc14n0@linuxmail.org

- Update to version 1.1:
  + Add git version in --version.
  + Fix list of new symbols in index page.
  + Fix unused declarations.
- Drop fixed upstream patches:
  gcab-meson-build-fixes.patch;
  gcab-folder-simplify_sort_cfiles.patch;
  gcab-doc-fixes.patch.
- Drop intltool BuildRequires: it's no longer a requirement after
  upstream migration to Gettext.
- Add git BuildRequires: new dependency.
- Add a little summary of its content to the main package
  description.

-------------------------------------------------------------------
Tue Jan 23 20:27:11 UTC 2018 - bjorn.lie@gmail.com

- Add gcab-doc-fixes.patch: Two documentation build fixes.
- Add gcab-folder-simplify_sort_cfiles.patch: folder: simplify
  _sort_cfiles(), get rid of warnings.

-------------------------------------------------------------------
Tue Jan 23 16:19:12 UTC 2018 - bjorn.lie@gmail.com

- Update to version 1.0 (CVE-2018-5345):
  + This fixes the security bug known as CVE-2018-5345.
  + New Features:
    - Add a helper executable to create massive compressed
      archives.
    - Add a special binary to use just for fuzzing.
    - Add gcab_cabinet_get_size().
    - Add gcab_file_new_with_bytes().
    - Add gcab_file_set_attributes().
    - Add gcab_file_set_date().
    - Add gcab_folder_get_comptype().
    - Add gcab_folder_get_file_by_name().
    - Add some self tests to test libgcab.
    - Switch to the Meson buildsystem.
  + Bugfixes:
    - Do not return translated errors from libraries.
    - Fix a large memory leak when parsing LZX cab files.
    - Fix a theoretical crash when building the table entries.
    - Replace all the custom typedefd unsigned types with working
      versions.
    - Return detailed errors from gcab_cabinet_get_signature().
    - Use g_autoptr() to fix countless memory leaks when parsing
      corrupt files.
    - Use g_autoptr() to fix several memory leaks on error in the
      library.
    - Use G_DECLARE_FINAL_TYPE to remove lots of C boilerplate.
  + Updated translations.
- Add gcab-meson-build-fixes.patch: Fixes to meson build to match
  the former autotools build.
- Add meson and gtk-doc BuildRequires and use meson, meson_build
  and meson_install macros, following upstreams switch to meson.
- Replace gobject-introspection with
  pkgconfig(gobject-introspection-1.0) BuildRequires: Actually
  build introspection support, split out new sub-package
  typelib-1_0-GCab-1_0.
- Pass docs=true, introspection=true and tests=false to meson,
  only build the features we want.
- No longer delete .la files, meson build does not generate them.

-------------------------------------------------------------------
Tue Jan 23 16:09:51 UTC 2018 - bjorn.lie@gmail.com

- Update to version 0.8 (CVE-2018-5345):
  + This fixes the security bug known as CVE-2018-5345.
  + Always check the return value when writing to the stream.
  + Do not crash when ncbytes is larger than the buffer size.
  + Don't encode timezone in generated files.
  + Don't use version script if unsupported.
  + Explicitly enable C99 support.
  + Fix a few 'Dereference of null pointer' warnings.
  + Fix buffer overrun when generating Huffman codes.
  + Fix builddir != srcdir builds.
  + Fix dependency on generated .h file.
  + Fix invalid return annotation.
  + Fix the calculation of the checksum on big endian machines.
  + Fix -Wimplicit-fallthrough=.
  + Use glib-mkenum's prefixes to avoid sed.
  + Updated translations.
- Minor spec cleanup, use autosetup macro.

-------------------------------------------------------------------
Sat Mar 12 16:10:10 UTC 2016 - zaitor@opensuse.org

- Update to version 0.7:
  + Learn to rewind if needed during extraction (bgo#763377).
  + Fix extraction of files without cdata (bgo#763376).
  + Do not abort with a critical warning if a file has an incorrect
    checksum.
  + Set utf8 flag automatically (bgo#754091).
  + Fix wrong modification date (bgo#753040).
  + Build warning fixes.
  + Updated translations.
- Drop gcab-checksum.patch: Fixed in a different way upstream.

-------------------------------------------------------------------
Mon Mar 30 15:16:56 UTC 2015 - dimstar@opensuse.org

- Update to version 0.6:
  + Fix for the AFL-detected crashes.
  + Add file information getters (get_attributes(), get_date(),
    get_size()).
  + gcab learned --list-details to list files with those
    informations.
  + Fix the file date when creating cab.
  + Build-sys fixes.

-------------------------------------------------------------------
Sat Mar 21 16:48:27 UTC 2015 - schwab@linux-m68k.org

- Add gcab-checksum.patch: fix checksum computation (bgo#746580).

-------------------------------------------------------------------
Mon Mar  9 16:34:49 UTC 2015 - zaitor@opensuse.org

- Update to version 0.5:
  + Fix path traversal: do not escape from output directory.
  + Add gcab_cabinet_get_signature().
  + Build warning fixes.
  + Updated translations.
- Drop gcab-CVE-2015-0552.patch: fixed upstream.

-------------------------------------------------------------------
Tue Jan  6 11:08:14 UTC 2015 - dimstar@opensuse.org

- Add gcab-CVE-2015-0552.patch: Avoid path traversal (boo#911814,
  bgo#742331, CVE-2015-0552).

-------------------------------------------------------------------
Wed Mar  6 20:29:35 UTC 2013 - dimstar@opensuse.org

- Initial package, version 0.4.

Places

File gcab.changes of Package gcab (Revision 7311210608f3fca04482c4dbd5353073)

Places