------------------------------------------------------------------- Sat Mar 10 09:17:21 UTC 2018 - jengelh@inai.de - Update description. ------------------------------------------------------------------- Wed Feb 28 16:25:37 UTC 2018 - dimstar@opensuse.org - Modernize spec-file by calling spec-cleaner ------------------------------------------------------------------- Mon Feb 12 10:28:17 UTC 2018 - bjorn.lie@gmail.com - Add gcab-revert-git-dep.patch: Revert new dependency on git, having a builddependency on git just to able to show version when using a git checkout is a bit much (bgo#793406). - Following the above patch, drop git BuildRequires. ------------------------------------------------------------------- Fri Feb 9 23:49:52 UTC 2018 - luc14n0@linuxmail.org - Update to version 1.1: + Add git version in --version. + Fix list of new symbols in index page. + Fix unused declarations. - Drop fixed upstream patches: gcab-meson-build-fixes.patch; gcab-folder-simplify_sort_cfiles.patch; gcab-doc-fixes.patch. - Drop intltool BuildRequires: it's no longer a requirement after upstream migration to Gettext. - Add git BuildRequires: new dependency. - Add a little summary of its content to the main package description. ------------------------------------------------------------------- Tue Jan 23 20:27:11 UTC 2018 - bjorn.lie@gmail.com - Add gcab-doc-fixes.patch: Two documentation build fixes. - Add gcab-folder-simplify_sort_cfiles.patch: folder: simplify _sort_cfiles(), get rid of warnings. ------------------------------------------------------------------- Tue Jan 23 16:19:12 UTC 2018 - bjorn.lie@gmail.com - Update to version 1.0 (CVE-2018-5345): + This fixes the security bug known as CVE-2018-5345. + New Features: - Add a helper executable to create massive compressed archives. - Add a special binary to use just for fuzzing. - Add gcab_cabinet_get_size(). - Add gcab_file_new_with_bytes(). - Add gcab_file_set_attributes(). - Add gcab_file_set_date(). - Add gcab_folder_get_comptype(). - Add gcab_folder_get_file_by_name(). - Add some self tests to test libgcab. - Switch to the Meson buildsystem. + Bugfixes: - Do not return translated errors from libraries. - Fix a large memory leak when parsing LZX cab files. - Fix a theoretical crash when building the table entries. - Replace all the custom typedefd unsigned types with working versions. - Return detailed errors from gcab_cabinet_get_signature(). - Use g_autoptr() to fix countless memory leaks when parsing corrupt files. - Use g_autoptr() to fix several memory leaks on error in the library. - Use G_DECLARE_FINAL_TYPE to remove lots of C boilerplate. + Updated translations. - Add gcab-meson-build-fixes.patch: Fixes to meson build to match the former autotools build. - Add meson and gtk-doc BuildRequires and use meson, meson_build and meson_install macros, following upstreams switch to meson. - Replace gobject-introspection with pkgconfig(gobject-introspection-1.0) BuildRequires: Actually build introspection support, split out new sub-package typelib-1_0-GCab-1_0. - Pass docs=true, introspection=true and tests=false to meson, only build the features we want. - No longer delete .la files, meson build does not generate them. ------------------------------------------------------------------- Tue Jan 23 16:09:51 UTC 2018 - bjorn.lie@gmail.com - Update to version 0.8 (CVE-2018-5345): + This fixes the security bug known as CVE-2018-5345. + Always check the return value when writing to the stream. + Do not crash when ncbytes is larger than the buffer size. + Don't encode timezone in generated files. + Don't use version script if unsupported. + Explicitly enable C99 support. + Fix a few 'Dereference of null pointer' warnings. + Fix buffer overrun when generating Huffman codes. + Fix builddir != srcdir builds. + Fix dependency on generated .h file. + Fix invalid return annotation. + Fix the calculation of the checksum on big endian machines. + Fix -Wimplicit-fallthrough=. + Use glib-mkenum's prefixes to avoid sed. + Updated translations. - Minor spec cleanup, use autosetup macro. ------------------------------------------------------------------- Sat Mar 12 16:10:10 UTC 2016 - zaitor@opensuse.org - Update to version 0.7: + Learn to rewind if needed during extraction (bgo#763377). + Fix extraction of files without cdata (bgo#763376). + Do not abort with a critical warning if a file has an incorrect checksum. + Set utf8 flag automatically (bgo#754091). + Fix wrong modification date (bgo#753040). + Build warning fixes. + Updated translations. - Drop gcab-checksum.patch: Fixed in a different way upstream. ------------------------------------------------------------------- Mon Mar 30 15:16:56 UTC 2015 - dimstar@opensuse.org - Update to version 0.6: + Fix for the AFL-detected crashes. + Add file information getters (get_attributes(), get_date(), get_size()). + gcab learned --list-details to list files with those informations. + Fix the file date when creating cab. + Build-sys fixes. ------------------------------------------------------------------- Sat Mar 21 16:48:27 UTC 2015 - schwab@linux-m68k.org - Add gcab-checksum.patch: fix checksum computation (bgo#746580). ------------------------------------------------------------------- Mon Mar 9 16:34:49 UTC 2015 - zaitor@opensuse.org - Update to version 0.5: + Fix path traversal: do not escape from output directory. + Add gcab_cabinet_get_signature(). + Build warning fixes. + Updated translations. - Drop gcab-CVE-2015-0552.patch: fixed upstream. ------------------------------------------------------------------- Tue Jan 6 11:08:14 UTC 2015 - dimstar@opensuse.org - Add gcab-CVE-2015-0552.patch: Avoid path traversal (boo#911814, bgo#742331, CVE-2015-0552). ------------------------------------------------------------------- Wed Mar 6 20:29:35 UTC 2013 - dimstar@opensuse.org - Initial package, version 0.4.