From f5138c336d222034553139c9c5b7003924f66133 Mon Sep 17 00:00:00 2001 From: "Benjamin A. Beasley" Date: Sat, 24 Sep 2022 09:16:00 -0400 Subject: [PATCH 01/17] Spec file formatting tweaks --- advancecomp.spec | 43 +++++++++++++++++++++++++++++-------------- 1 file changed, 29 insertions(+), 14 deletions(-) diff --git a/advancecomp.spec b/advancecomp.spec index e521331..a9e9b02 100644 --- a/advancecomp.spec +++ b/advancecomp.spec @@ -1,7 +1,8 @@ Name: advancecomp Version: 2.1 -Release: 19%{?dist} -Summary: Recompression utilities for png, mng, zip and gz files +Release: 21%{?dist} +Summary: Recompression utilities for .png, .mng, .zip and .gz files + License: GPLv3 URL: http://www.advancemame.it/ Source0: https://github.com/amadvance/advancecomp/releases/download/v%{version}/advancecomp-%{version}.tar.gz @@ -11,23 +12,29 @@ Patch0: advancecomp-CVE-2019-8383.patch # CVE-2019-9210 advancecomp: integer overflow in png_compress in pngex.cc Patch1: advancecomp-CVE-2019-9210.patch -BuildRequires: gcc gcc-c++ -BuildRequires: tofrodos -BuildRequires: zlib-devel +BuildRequires: gcc +BuildRequires: gcc-c++ +BuildRequires: make + BuildRequires: dos2unix -BuildRequires: make +BuildRequires: tofrodos + +BuildRequires: zlib-devel %description -AdvanceCOMP is a set of recompression utilities for .PNG, .MNG and .ZIP files. -The main features are : -* Recompress ZIP, PNG and MNG files using the Deflate 7-Zip implementation. -* Recompress MNG files using Delta and Move optimization. +AdvanceCOMP contains recompression utilities for your .zip archives, +.png images, .mng video clips and .gz files. + +The official site of AdvanceCOMP is: + + http://www.advancemame.it This package contains: -* advzip - Recompression and test utility for zip files -* advpng - Recompression utility for png files -* advmng - Recompression utility for mng files -* advdef - Recompression utility for deflate streams in png, mng and gz files + advzip - Recompression and test utility for zip files + advpng - Recompression utility for png files + advmng - Recompression utility for mng files + advdef - Recompression utility for deflate streams in .png, .mng and .gz files + %prep %setup -q @@ -36,22 +43,30 @@ This package contains: dos2unix -k doc/*.txt + %build export CXXFLAGS="-std=c++14 $RPM_OPT_FLAGS" %configure make %{?_smp_mflags} + %install make install DESTDIR=%{buildroot} + %files %license COPYING %doc AUTHORS HISTORY README %doc doc/{adv*,authors,history,readme}.txt + %{_bindir}/* %{_mandir}/man1/* + %changelog +* Sat Sep 24 2022 Benjamin A. Beasley - 2.1-21 +- Spec file formatting tweaks + * Wed Jan 19 2022 Fedora Release Engineering - 2.1-19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild From 89ebc9d6812663bfe7ed27fdffe389df498d4f2f Mon Sep 17 00:00:00 2001 From: "Benjamin A. Beasley" Date: Sat, 24 Sep 2022 09:20:54 -0400 Subject: [PATCH 02/17] Convert URLs from HTTP to HTTPS --- advancecomp.spec | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/advancecomp.spec b/advancecomp.spec index a9e9b02..c72efd9 100644 --- a/advancecomp.spec +++ b/advancecomp.spec @@ -4,7 +4,7 @@ Release: 21%{?dist} Summary: Recompression utilities for .png, .mng, .zip and .gz files License: GPLv3 -URL: http://www.advancemame.it/ +URL: https://www.advancemame.it/ Source0: https://github.com/amadvance/advancecomp/releases/download/v%{version}/advancecomp-%{version}.tar.gz # CVE-2019-8383 advancecomp: denial of service in function adv_png_unfilter_8 @@ -27,7 +27,7 @@ AdvanceCOMP contains recompression utilities for your .zip archives, The official site of AdvanceCOMP is: - http://www.advancemame.it + https://www.advancemame.it This package contains: advzip - Recompression and test utility for zip files @@ -66,6 +66,7 @@ make install DESTDIR=%{buildroot} %changelog * Sat Sep 24 2022 Benjamin A. Beasley - 2.1-21 - Spec file formatting tweaks +- Convert URLs from HTTP to HTTPS * Wed Jan 19 2022 Fedora Release Engineering - 2.1-19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild From 1570d416969bfc498b4b30753beb298d498ef41f Mon Sep 17 00:00:00 2001 From: "Benjamin A. Beasley" Date: Sat, 24 Sep 2022 09:26:11 -0400 Subject: [PATCH 03/17] Use modern spec file macros (make_build/make_install/etc.) --- advancecomp.spec | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/advancecomp.spec b/advancecomp.spec index c72efd9..f028b57 100644 --- a/advancecomp.spec +++ b/advancecomp.spec @@ -37,21 +37,21 @@ This package contains: %prep -%setup -q -%patch0 -p1 -b .CVE-2019-8383 -%patch1 -p1 -b .CVE-2019-9210 - +%autosetup -p1 dos2unix -k doc/*.txt %build -export CXXFLAGS="-std=c++14 $RPM_OPT_FLAGS" +# error: ISO C++17 does not allow dynamic exception specifications +%set_build_flags +export CXXFLAGS="-std=gnu++14 ${CXXFLAGS-}" + %configure -make %{?_smp_mflags} +%make_build %install -make install DESTDIR=%{buildroot} +%make_install %files @@ -67,6 +67,7 @@ make install DESTDIR=%{buildroot} * Sat Sep 24 2022 Benjamin A. Beasley - 2.1-21 - Spec file formatting tweaks - Convert URLs from HTTP to HTTPS +- Use modern spec file macros (make_build/make_install/etc.) * Wed Jan 19 2022 Fedora Release Engineering - 2.1-19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild From e477b0918cfd84d126a7146b02e627d4258f7e09 Mon Sep 17 00:00:00 2001 From: "Benjamin A. Beasley" Date: Sat, 24 Sep 2022 09:44:07 -0400 Subject: [PATCH 04/17] Unbundle libdeflate --- advancecomp.spec | 34 ++++++++++++++++++++++++++++++++++ 1 file changed, 34 insertions(+) diff --git a/advancecomp.spec b/advancecomp.spec index f028b57..3093ece 100644 --- a/advancecomp.spec +++ b/advancecomp.spec @@ -12,6 +12,9 @@ Patch0: advancecomp-CVE-2019-8383.patch # CVE-2019-9210 advancecomp: integer overflow in png_compress in pngex.cc Patch1: advancecomp-CVE-2019-9210.patch +BuildRequires: autoconf +BuildRequires: automake + BuildRequires: gcc BuildRequires: gcc-c++ BuildRequires: make @@ -19,8 +22,17 @@ BuildRequires: make BuildRequires: dos2unix BuildRequires: tofrodos +# System library supported by upstream BuildRequires: zlib-devel +%if 0%{?el7} +# No libdeflate package in EPEL7 +Provides: bundled(libdeflate) = 0.6 +%else +# Unbundled downstream +BuildRequires: pkgconfig(libdeflate) +%endif + %description AdvanceCOMP contains recompression utilities for your .zip archives, .png images, .mng video clips and .gz files. @@ -40,12 +52,33 @@ This package contains: %autosetup -p1 dos2unix -k doc/*.txt +%if ! 0%{?el7} +# Patch out bundled libdeflate +rm -rvf libdeflate +sed -r -i '/libdeflate/d' Makefile.am +# Fix up #include paths. The find-then-modify pattern keeps us from discarding +# mtimes on any sources that do not need modification. +find . -type f -exec gawk \ + '/^[[:blank:]]*#include.*libdeflate/ { print FILENAME; nextfile }' \ + '{}' '+' | + xargs -r -t sed -r -i 's@^([[:blank:]]*#include.*)libdeflate/@\1@' +%endif + %build +autoreconf --force --install --verbose + # error: ISO C++17 does not allow dynamic exception specifications %set_build_flags export CXXFLAGS="-std=gnu++14 ${CXXFLAGS-}" +%if ! 0%{?el7} +# Link against system libdeflate +export CFLAGS="$(pkgconf --cflags libdeflate) ${CFLAGS-}" +export CXXFLAGS="$(pkgconf --cflags libdeflate) ${CXXFLAGS-}" +export LDFLAGS="$(pkgconf --libs libdeflate) ${LDFLAGS-}" +%endif + %configure %make_build @@ -68,6 +101,7 @@ export CXXFLAGS="-std=gnu++14 ${CXXFLAGS-}" - Spec file formatting tweaks - Convert URLs from HTTP to HTTPS - Use modern spec file macros (make_build/make_install/etc.) +- Unbundle libdeflate * Wed Jan 19 2022 Fedora Release Engineering - 2.1-19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild From 693ba3e44d46dac20326bcea260b477a4e0735ed Mon Sep 17 00:00:00 2001 From: "Benjamin A. Beasley" Date: Sat, 24 Sep 2022 10:22:11 -0400 Subject: [PATCH 05/17] Unbundle zopfli where it is available as a system library (i.e., Fedora) --- advancecomp.spec | 33 ++++++++++++++++++++++++++++++++- 1 file changed, 32 insertions(+), 1 deletion(-) diff --git a/advancecomp.spec b/advancecomp.spec index 3093ece..a31316e 100644 --- a/advancecomp.spec +++ b/advancecomp.spec @@ -33,6 +33,16 @@ Provides: bundled(libdeflate) = 0.6 BuildRequires: pkgconfig(libdeflate) %endif +%if 0%{?el9} || 0%{?el8} || 0%{?el7} +# No libzopfli/zopfli-devel in these distributions +# Version number based on HISTORY, which mentions that upstream commit +# 6818a0859063b946094fb6f94732836404a0d89a was used from +# https://github.com/google/zopfli/. +Provides: bundled(zopfli) = 1.0.2%{?!el7:^20160527git6818a08} +%else +BuildRequires: zopfli-devel +%endif + %description AdvanceCOMP contains recompression utilities for your .zip archives, .png images, .mng video clips and .gz files. @@ -55,7 +65,7 @@ dos2unix -k doc/*.txt %if ! 0%{?el7} # Patch out bundled libdeflate rm -rvf libdeflate -sed -r -i '/libdeflate/d' Makefile.am +sed -r -i '/libdeflate[\/_]/d' Makefile.am # Fix up #include paths. The find-then-modify pattern keeps us from discarding # mtimes on any sources that do not need modification. find . -type f -exec gawk \ @@ -64,6 +74,21 @@ find . -type f -exec gawk \ xargs -r -t sed -r -i 's@^([[:blank:]]*#include.*)libdeflate/@\1@' %endif +%if !(0%{?el9} || 0%{?el8} || 0%{?el7}) +# Patch out bundled zopfli +rm -rvf zopfli +sed -r -i \ + -e '/zopfli[\/_]/d' \ + -e 's/((\(7z_SOURCES\)|WindowOut\.h).*)[[:blank:]]*\\/\1/' \ + Makefile.am +# Fix up #include paths. The find-then-modify pattern keeps us from discarding +# mtimes on any sources that do not need modification. +find . -type f -exec gawk \ + '/^[[:blank:]]*#include.*zopfli/ { print FILENAME; nextfile }' \ + '{}' '+' | + xargs -r -t sed -r -i -e 's@^([[:blank:]]*#include.*)zopfli/@\1@' +%endif + %build autoreconf --force --install --verbose @@ -79,6 +104,11 @@ export CXXFLAGS="$(pkgconf --cflags libdeflate) ${CXXFLAGS-}" export LDFLAGS="$(pkgconf --libs libdeflate) ${LDFLAGS-}" %endif +%if !(0%{?el9} || 0%{?el8} || 0%{?el7}) +# Link against system zopfli +export LDFLAGS="-lzopfli ${LDFLAGS-}" +%endif + %configure %make_build @@ -102,6 +132,7 @@ export LDFLAGS="$(pkgconf --libs libdeflate) ${LDFLAGS-}" - Convert URLs from HTTP to HTTPS - Use modern spec file macros (make_build/make_install/etc.) - Unbundle libdeflate +- Unbundle zopfli where it is available as a system library (i.e., Fedora) * Wed Jan 19 2022 Fedora Release Engineering - 2.1-19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild From dc80c7c66041cadbb5f9add6d838b880cbcdde1c Mon Sep 17 00:00:00 2001 From: "Benjamin A. Beasley" Date: Wed, 28 Sep 2022 09:11:53 -0400 Subject: [PATCH 06/17] Remove unnecessary BR on tofrodos MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Makefile.am uses “todos”, but only when a tool called “advd2” is installed. --- advancecomp.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/advancecomp.spec b/advancecomp.spec index a31316e..40b0e52 100644 --- a/advancecomp.spec +++ b/advancecomp.spec @@ -20,7 +20,6 @@ BuildRequires: gcc-c++ BuildRequires: make BuildRequires: dos2unix -BuildRequires: tofrodos # System library supported by upstream BuildRequires: zlib-devel @@ -133,6 +132,7 @@ export LDFLAGS="-lzopfli ${LDFLAGS-}" - Use modern spec file macros (make_build/make_install/etc.) - Unbundle libdeflate - Unbundle zopfli where it is available as a system library (i.e., Fedora) +- Remove unnecessary BR on tofrodos * Wed Jan 19 2022 Fedora Release Engineering - 2.1-19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild From 6ffa16ec04bd620a7d492bdc6a1d2a5c4a1dc749 Mon Sep 17 00:00:00 2001 From: "Benjamin A. Beasley" Date: Wed, 28 Sep 2022 10:49:35 -0400 Subject: [PATCH 07/17] Properly document bundled 7z code --- advancecomp.spec | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) diff --git a/advancecomp.spec b/advancecomp.spec index 40b0e52..c9761eb 100644 --- a/advancecomp.spec +++ b/advancecomp.spec @@ -3,6 +3,13 @@ Version: 2.1 Release: 21%{?dist} Summary: Recompression utilities for .png, .mng, .zip and .gz files +# The bundled and forked 7z (7-Zip code) in 7z/ is under the “LGPL” license. +# Based on https://www.7-zip.org/license.txt, and the absence of any mention of +# license changes in https://www.7-zip.org/history.txt, 7-Zip has always been +# licensed under LGPL-2.1-or-later, specifically; we thus assume this is the +# intended specific license for the contents of the 7z/ directory. None of the +# sources that would be covered by the “unRAR license restriction” or the +# BSD-3-Clause license for LZFSE are present in this fork. License: GPLv3 URL: https://www.advancemame.it/ Source0: https://github.com/amadvance/advancecomp/releases/download/v%{version}/advancecomp-%{version}.tar.gz @@ -42,6 +49,24 @@ Provides: bundled(zopfli) = 1.0.2%{?!el7:^20160527git6818a08} BuildRequires: zopfli-devel %endif +# From 7z/README: +# +# This directory contains some source files from the +# 7z archive utility. (www.7-zip.org) +# +# All the files in this directory was originally released +# with the LGPL license. +# +# All the modifications made on the original files must +# be considered Copyright (C) 2002 Andrea Mazzoleni and +# released under the LGPL license. +# +# It is not clear which version was forked. Because 7-Zip does not provide a +# library, and because the implementation is modified, there is no possibility +# of unbundling. Note that this was forked from the original 7-Zip, not from +# p7zip. +Provides: bundled(7z) + %description AdvanceCOMP contains recompression utilities for your .zip archives, .png images, .mng video clips and .gz files. @@ -133,6 +158,7 @@ export LDFLAGS="-lzopfli ${LDFLAGS-}" - Unbundle libdeflate - Unbundle zopfli where it is available as a system library (i.e., Fedora) - Remove unnecessary BR on tofrodos +- Properly document bundled 7z code * Wed Jan 19 2022 Fedora Release Engineering - 2.1-19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild From cc779274fda6c18eac715fbaa05402574cd4207f Mon Sep 17 00:00:00 2001 From: "Benjamin A. Beasley" Date: Wed, 28 Sep 2022 11:00:53 -0400 Subject: [PATCH 08/17] Convert to rpmautospec --- advancecomp.spec | 203 +---------------------------------------------- changelog | 200 ++++++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 202 insertions(+), 201 deletions(-) create mode 100644 changelog diff --git a/advancecomp.spec b/advancecomp.spec index c9761eb..bf7859b 100644 --- a/advancecomp.spec +++ b/advancecomp.spec @@ -1,6 +1,6 @@ Name: advancecomp Version: 2.1 -Release: 21%{?dist} +Release: %autorelease Summary: Recompression utilities for .png, .mng, .zip and .gz files # The bundled and forked 7z (7-Zip code) in 7z/ is under the “LGPL” license. @@ -151,203 +151,4 @@ export LDFLAGS="-lzopfli ${LDFLAGS-}" %changelog -* Sat Sep 24 2022 Benjamin A. Beasley - 2.1-21 -- Spec file formatting tweaks -- Convert URLs from HTTP to HTTPS -- Use modern spec file macros (make_build/make_install/etc.) -- Unbundle libdeflate -- Unbundle zopfli where it is available as a system library (i.e., Fedora) -- Remove unnecessary BR on tofrodos -- Properly document bundled 7z code - -* Wed Jan 19 2022 Fedora Release Engineering - 2.1-19 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - -* Wed Jul 21 2021 Fedora Release Engineering - 2.1-18 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - -* Mon Jan 25 2021 Fedora Release Engineering - 2.1-17 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - -* Fri Jul 31 2020 Fedora Release Engineering - 2.1-16 -- Second attempt - Rebuilt for - https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - -* Mon Jul 27 2020 Jeff Law - 2.1-15 -- Force C++14 as the code is not ready for C++17 - -* Mon Jul 27 2020 Fedora Release Engineering - 2.1-14 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - -* Tue Jan 28 2020 Fedora Release Engineering - 2.1-13 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - -* Wed Jul 24 2019 Fedora Release Engineering - 2.1-12 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild - -* Fri May 10 2019 Than Ngo - 2.1-11 -- Backport for #1708563, CVE-2019-8383 - denial of service in function adv_png_unfilter_8 - -* Wed Mar 06 2019 Than Ngo - 2.1-10 -- Backport, fix a buffer overflow with image of invalid size - -* Fri Mar 01 2019 Than Ngo - 2.1-9 -- fixed CVE-2019-9210 advancecomp: integer overflow in png_compress in pngex.cc - -* Thu Jan 31 2019 Fedora Release Engineering - 2.1-8 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild - -* Tue Jan 29 2019 Matthias Saou 2.1-7 -- Fix doc EOL. -- Minor cosmetic updates (summary, description...). - -* Sat Jul 14 2018 Christian Dersch - 2.1-6 -- BuildRequires: gcc-c++ - -* Thu Jul 12 2018 Fedora Release Engineering - 2.1-5 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - -* Wed Mar 07 2018 Than Ngo - 2.1-4 -- updated to 2.1 (fix CVE-2018-1056) - -* Wed Feb 07 2018 Fedora Release Engineering - 1.23-4 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - -* Wed Aug 02 2017 Fedora Release Engineering - 1.23-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - -* Wed Jul 26 2017 Fedora Release Engineering - 1.23-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - -* Tue Feb 28 2017 Christian Dersch - 1.23-1 -- new version - -* Fri Feb 10 2017 Fedora Release Engineering - 1.20-4 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - -* Sun Nov 13 2016 Christian Dersch - 1.20-3 -- revert to 1.20, 1.22 does not build and also needs unbundling of libdeflate first - -* Sun Nov 13 2016 Christian Dersch - 1.22-1 -- new version - -* Wed Feb 03 2016 Fedora Release Engineering - 1.20-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - -* Mon Oct 05 2015 Christian Dersch - 1.20-1 -- new version 1.20 -- use license tag - -* Tue Jun 16 2015 Fedora Release Engineering - 1.19-5 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - -* Sat May 02 2015 Kalev Lember - 1.19-4 -- Rebuilt for GCC 5 C++11 ABI change - -* Fri Aug 15 2014 Fedora Release Engineering - 1.19-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - -* Sat Jun 07 2014 Fedora Release Engineering - 1.19-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - -* Thu Mar 20 2014 Christopher Meng - 1.19-1 -- Update to 1.19 - -* Mon Feb 10 2014 Christopher Meng - 1.18-1 -- Update to 1.18 - -* Sat Aug 03 2013 Fedora Release Engineering - 1.15-19 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild - -* Wed Feb 13 2013 Fedora Release Engineering - 1.15-18 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild - -* Wed Jul 18 2012 Fedora Release Engineering - 1.15-17 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild - -* Fri Apr 27 2012 Peter Robinson - 1.15-16 -- Add disttag, modernise spec file - -* Tue Feb 28 2012 Fedora Release Engineering - 1.15-15 -- Rebuilt for c++ ABI breakage - -* Thu Jan 12 2012 Fedora Release Engineering - 1.15-14 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild - -* Mon Feb 07 2011 Fedora Release Engineering - 1.15-13 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild - -* Fri Jul 24 2009 Fedora Release Engineering - 1.15-12 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild - -* Mon Feb 23 2009 Fedora Release Engineering - 1.15-11 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild - -* Tue Feb 19 2008 Fedora Release Engineering - 1.15-10 -- Autorebuild for GCC 4.3 - -* Wed Aug 22 2007 Matthias Saou 1.15-9 -- Rebuild for new BuildID feature. - -* Fri Aug 3 2007 Matthias Saou 1.15-8 -- Update License field. -- Remove dist tag, since the package will seldom change. - -* Thu Mar 29 2007 Matthias Saou 1.15-7 -- Switch to using DESTDIR install method. - -* Thu Mar 29 2007 Matthias Saou 1.15-6 -- Switch to use downloads.sf.net source URL. -- Tweak defattr. - -* Mon Aug 28 2006 Matthias Saou 1.15-5 -- FC6 rebuild, remove gcc-c++ build requirement (it's a default). - -* Mon Mar 6 2006 Matthias Saou 1.15-4 -- FC5 rebuild. - -* Wed Feb 8 2006 Matthias Saou 1.15-3 -- Rebuild for new gcc/glibc. - -* Tue Jan 24 2006 Matthias Saou 1.15-2 -- Rebuild for FC5. - -* Wed Nov 2 2005 Matthias Saou 1.15-1 -- Update to 1.15, includes 64bit fixes. - -* Fri May 27 2005 Matthias Saou 1.14-5 -- Update 64bit patch to a cleaner approach as Ralf suggested. - -* Thu May 26 2005 Jeremy Katz - 1.14-4 -- fix build on 64bit arches - -* Sun May 22 2005 Jeremy Katz - 1.14-3 -- rebuild on all arches - -* Thu Apr 7 2005 Michael Schwendt 1.14-2 -- rebuilt - -* Wed Feb 23 2005 Matthias Saou 1.14-1 -- Update to 1.14. - -* Mon Nov 29 2004 Matthias Saou 1.13-1 -- Update to 1.13. - -* Tue Nov 2 2004 Matthias Saou 1.12-1 -- Update to 1.12. - -* Tue Aug 24 2004 Matthias Saou 1.11-1 -- Update to 1.11. - -* Mon May 17 2004 Matthias Saou 1.10-1 -- Update to 1.10. - -* Mon Nov 3 2003 Matthias Saou 1.7-2 -- Rebuild for Fedora Core 1. -- Added missing build dependencies, thanks to mach. - -* Tue Aug 26 2003 Matthias Saou -- Update to 1.7. - -* Thu May 22 2003 Matthias Saou -- Initial RPM release. +%autochangelog diff --git a/changelog b/changelog new file mode 100644 index 0000000..4a8110f --- /dev/null +++ b/changelog @@ -0,0 +1,200 @@ +* Sat Sep 24 2022 Benjamin A. Beasley - 2.1-21 +- Spec file formatting tweaks +- Convert URLs from HTTP to HTTPS +- Use modern spec file macros (make_build/make_install/etc.) +- Unbundle libdeflate +- Unbundle zopfli where it is available as a system library (i.e., Fedora) +- Remove unnecessary BR on tofrodos +- Properly document bundled 7z code + +* Wed Jan 19 2022 Fedora Release Engineering - 2.1-19 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild + +* Wed Jul 21 2021 Fedora Release Engineering - 2.1-18 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild + +* Mon Jan 25 2021 Fedora Release Engineering - 2.1-17 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + +* Fri Jul 31 2020 Fedora Release Engineering - 2.1-16 +- Second attempt - Rebuilt for + https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + +* Mon Jul 27 2020 Jeff Law - 2.1-15 +- Force C++14 as the code is not ready for C++17 + +* Mon Jul 27 2020 Fedora Release Engineering - 2.1-14 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + +* Tue Jan 28 2020 Fedora Release Engineering - 2.1-13 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild + +* Wed Jul 24 2019 Fedora Release Engineering - 2.1-12 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild + +* Fri May 10 2019 Than Ngo - 2.1-11 +- Backport for #1708563, CVE-2019-8383 - denial of service in function adv_png_unfilter_8 + +* Wed Mar 06 2019 Than Ngo - 2.1-10 +- Backport, fix a buffer overflow with image of invalid size + +* Fri Mar 01 2019 Than Ngo - 2.1-9 +- fixed CVE-2019-9210 advancecomp: integer overflow in png_compress in pngex.cc + +* Thu Jan 31 2019 Fedora Release Engineering - 2.1-8 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild + +* Tue Jan 29 2019 Matthias Saou 2.1-7 +- Fix doc EOL. +- Minor cosmetic updates (summary, description...). + +* Sat Jul 14 2018 Christian Dersch - 2.1-6 +- BuildRequires: gcc-c++ + +* Thu Jul 12 2018 Fedora Release Engineering - 2.1-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild + +* Wed Mar 07 2018 Than Ngo - 2.1-4 +- updated to 2.1 (fix CVE-2018-1056) + +* Wed Feb 07 2018 Fedora Release Engineering - 1.23-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild + +* Wed Aug 02 2017 Fedora Release Engineering - 1.23-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild + +* Wed Jul 26 2017 Fedora Release Engineering - 1.23-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild + +* Tue Feb 28 2017 Christian Dersch - 1.23-1 +- new version + +* Fri Feb 10 2017 Fedora Release Engineering - 1.20-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild + +* Sun Nov 13 2016 Christian Dersch - 1.20-3 +- revert to 1.20, 1.22 does not build and also needs unbundling of libdeflate first + +* Sun Nov 13 2016 Christian Dersch - 1.22-1 +- new version + +* Wed Feb 03 2016 Fedora Release Engineering - 1.20-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild + +* Mon Oct 05 2015 Christian Dersch - 1.20-1 +- new version 1.20 +- use license tag + +* Tue Jun 16 2015 Fedora Release Engineering - 1.19-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild + +* Sat May 02 2015 Kalev Lember - 1.19-4 +- Rebuilt for GCC 5 C++11 ABI change + +* Fri Aug 15 2014 Fedora Release Engineering - 1.19-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild + +* Sat Jun 07 2014 Fedora Release Engineering - 1.19-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild + +* Thu Mar 20 2014 Christopher Meng - 1.19-1 +- Update to 1.19 + +* Mon Feb 10 2014 Christopher Meng - 1.18-1 +- Update to 1.18 + +* Sat Aug 03 2013 Fedora Release Engineering - 1.15-19 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild + +* Wed Feb 13 2013 Fedora Release Engineering - 1.15-18 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild + +* Wed Jul 18 2012 Fedora Release Engineering - 1.15-17 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild + +* Fri Apr 27 2012 Peter Robinson - 1.15-16 +- Add disttag, modernise spec file + +* Tue Feb 28 2012 Fedora Release Engineering - 1.15-15 +- Rebuilt for c++ ABI breakage + +* Thu Jan 12 2012 Fedora Release Engineering - 1.15-14 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild + +* Mon Feb 07 2011 Fedora Release Engineering - 1.15-13 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild + +* Fri Jul 24 2009 Fedora Release Engineering - 1.15-12 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild + +* Mon Feb 23 2009 Fedora Release Engineering - 1.15-11 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild + +* Tue Feb 19 2008 Fedora Release Engineering - 1.15-10 +- Autorebuild for GCC 4.3 + +* Wed Aug 22 2007 Matthias Saou 1.15-9 +- Rebuild for new BuildID feature. + +* Fri Aug 3 2007 Matthias Saou 1.15-8 +- Update License field. +- Remove dist tag, since the package will seldom change. + +* Thu Mar 29 2007 Matthias Saou 1.15-7 +- Switch to using DESTDIR install method. + +* Thu Mar 29 2007 Matthias Saou 1.15-6 +- Switch to use downloads.sf.net source URL. +- Tweak defattr. + +* Mon Aug 28 2006 Matthias Saou 1.15-5 +- FC6 rebuild, remove gcc-c++ build requirement (it's a default). + +* Mon Mar 6 2006 Matthias Saou 1.15-4 +- FC5 rebuild. + +* Wed Feb 8 2006 Matthias Saou 1.15-3 +- Rebuild for new gcc/glibc. + +* Tue Jan 24 2006 Matthias Saou 1.15-2 +- Rebuild for FC5. + +* Wed Nov 2 2005 Matthias Saou 1.15-1 +- Update to 1.15, includes 64bit fixes. + +* Fri May 27 2005 Matthias Saou 1.14-5 +- Update 64bit patch to a cleaner approach as Ralf suggested. + +* Thu May 26 2005 Jeremy Katz - 1.14-4 +- fix build on 64bit arches + +* Sun May 22 2005 Jeremy Katz - 1.14-3 +- rebuild on all arches + +* Thu Apr 7 2005 Michael Schwendt 1.14-2 +- rebuilt + +* Wed Feb 23 2005 Matthias Saou 1.14-1 +- Update to 1.14. + +* Mon Nov 29 2004 Matthias Saou 1.13-1 +- Update to 1.13. + +* Tue Nov 2 2004 Matthias Saou 1.12-1 +- Update to 1.12. + +* Tue Aug 24 2004 Matthias Saou 1.11-1 +- Update to 1.11. + +* Mon May 17 2004 Matthias Saou 1.10-1 +- Update to 1.10. + +* Mon Nov 3 2003 Matthias Saou 1.7-2 +- Rebuild for Fedora Core 1. +- Added missing build dependencies, thanks to mach. + +* Tue Aug 26 2003 Matthias Saou +- Update to 1.7. + +* Thu May 22 2003 Matthias Saou +- Initial RPM release. From a4f5db5e1846dc3d73c709671161208f66abb9ed Mon Sep 17 00:00:00 2001 From: "Benjamin A. Beasley" Date: Wed, 28 Sep 2022 11:41:50 -0400 Subject: [PATCH 09/17] Drop {authors,history,readme}.txt These duplicate AUTHORS, HISTORY, and README, respectively. --- advancecomp.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/advancecomp.spec b/advancecomp.spec index bf7859b..0950637 100644 --- a/advancecomp.spec +++ b/advancecomp.spec @@ -144,7 +144,7 @@ export LDFLAGS="-lzopfli ${LDFLAGS-}" %files %license COPYING %doc AUTHORS HISTORY README -%doc doc/{adv*,authors,history,readme}.txt +%doc doc/adv*.txt %{_bindir}/* %{_mandir}/man1/* From 93fdecd0e5bd1bf99aafb2fa5173ffa6633db8c9 Mon Sep 17 00:00:00 2001 From: "Benjamin A. Beasley" Date: Wed, 28 Sep 2022 10:58:02 -0400 Subject: [PATCH 10/17] Update License to SPDX --- advancecomp.spec | 26 ++++++++++++++++++-------- 1 file changed, 18 insertions(+), 8 deletions(-) diff --git a/advancecomp.spec b/advancecomp.spec index 0950637..5afeef6 100644 --- a/advancecomp.spec +++ b/advancecomp.spec @@ -3,14 +3,24 @@ Version: 2.1 Release: %autorelease Summary: Recompression utilities for .png, .mng, .zip and .gz files -# The bundled and forked 7z (7-Zip code) in 7z/ is under the “LGPL” license. -# Based on https://www.7-zip.org/license.txt, and the absence of any mention of -# license changes in https://www.7-zip.org/history.txt, 7-Zip has always been -# licensed under LGPL-2.1-or-later, specifically; we thus assume this is the -# intended specific license for the contents of the 7z/ directory. None of the -# sources that would be covered by the “unRAR license restriction” or the -# BSD-3-Clause license for LZFSE are present in this fork. -License: GPLv3 +# Source file headers all specify GPL-2.0-or-later (see source file headers), +# except: +# +# The bundled and forked 7z (7-Zip code) in 7z/ is under the “LGPL” license. +# Based on https://www.7-zip.org/license.txt, and the absence of any mention +# of license changes in https://www.7-zip.org/history.txt, 7-Zip has always +# been licensed under LGPL-2.1-or-later, specifically; we thus assume this is +# the intended specific license for the contents of the 7z/ directory. None +# of the sources that would be covered by the “unRAR license restriction” or +# the BSD-3-Clause license for LZFSE are present in this fork. +# +# Certain build-system files, which do not contribute to the license of the +# binary RPM, are under other permissible licenses. +# +# However, in version 1.17, the COPYING file was updated to GPLv3, with a +# changelog message (in HISTORY and elsewhere) of “Changes to GPL3.” We +# interpret this as an overall license of GPL-3.0-only. +License: GPL-3.0-only AND GPL-2.0-or-later AND LGPL-2.1-or-later URL: https://www.advancemame.it/ Source0: https://github.com/amadvance/advancecomp/releases/download/v%{version}/advancecomp-%{version}.tar.gz From 844feb6f04b18e6bcc158cf466c63de66c2a4891 Mon Sep 17 00:00:00 2001 From: "Benjamin A. Beasley" Date: Wed, 28 Sep 2022 11:40:06 -0400 Subject: [PATCH 11/17] Update to 2.3 (close RHBZ#2075857) --- .gitignore | 1 + advancecomp-CVE-2019-8383.patch | 44 -------------- advancecomp-CVE-2019-9210.patch | 100 -------------------------------- advancecomp.spec | 14 +---- sources | 2 +- 5 files changed, 5 insertions(+), 156 deletions(-) delete mode 100644 advancecomp-CVE-2019-8383.patch delete mode 100644 advancecomp-CVE-2019-9210.patch diff --git a/.gitignore b/.gitignore index 7ed4cc9..2ec630f 100644 --- a/.gitignore +++ b/.gitignore @@ -6,3 +6,4 @@ advancecomp-1.15.tar.gz /advancecomp.spec /advancecomp-1.23.tar.gz /advancecomp-2.1.tar.gz +/advancecomp-2.3.tar.gz diff --git a/advancecomp-CVE-2019-8383.patch b/advancecomp-CVE-2019-8383.patch deleted file mode 100644 index 3a9b35e..0000000 --- a/advancecomp-CVE-2019-8383.patch +++ /dev/null @@ -1,44 +0,0 @@ -commit 78a56b21340157775be2462a19276b4d31d2bd01 -Author: Andrea Mazzoleni -Date: Fri Jan 4 20:49:25 2019 +0100 - - Fix a buffer overflow caused by invalid images - -diff --git a/lib/png.c b/lib/png.c -index 0939a5a..cbf140b 100644 ---- a/lib/png.c -+++ b/lib/png.c -@@ -603,6 +603,7 @@ adv_error adv_png_read_ihdr( - unsigned pixel; - unsigned width; - unsigned width_align; -+ unsigned scanline; - unsigned height; - unsigned depth; - int r; -@@ -719,9 +720,23 @@ adv_error adv_png_read_ihdr( - goto err_ptr; - } - -- *dat_size = height * (width_align * pixel + 1); -+ /* check for overflow */ -+ if (pixel == 0 || width_align >= UINT_MAX / pixel) { -+ error_set("Invalid image size"); -+ goto err_ptr; -+ } -+ -+ scanline = width_align * pixel + 1; -+ -+ /* check for overflow */ -+ if (scanline == 0 || height >= UINT_MAX / scanline) { -+ error_set("Invalid image size"); -+ goto err_ptr; -+ } -+ -+ *dat_size = height * scanline; - *dat_ptr = malloc(*dat_size); -- *pix_scanline = width_align * pixel + 1; -+ *pix_scanline = scanline; - *pix_ptr = *dat_ptr + 1; - - z.zalloc = 0; diff --git a/advancecomp-CVE-2019-9210.patch b/advancecomp-CVE-2019-9210.patch deleted file mode 100644 index dc40bc8..0000000 --- a/advancecomp-CVE-2019-9210.patch +++ /dev/null @@ -1,100 +0,0 @@ -commit 7894a6e684ce68ddff9f4f4919ab8e3911ac8040 -Author: Andrea Mazzoleni -Date: Fri Jan 4 20:49:48 2019 +0100 - - Fix a buffer overflow caused by invalid chunks - -diff --git a/pngex.cc b/pngex.cc -index 55d16f5..3f5b49f 100644 ---- a/pngex.cc -+++ b/pngex.cc -@@ -163,6 +163,10 @@ void png_print_chunk(unsigned type, unsigned char* data, unsigned size) - - switch (type) { - case ADV_MNG_CN_MHDR : -+ if (size < 28) { -+ cout << " invalid chunk size"; -+ break; -+ } - cout << " width:" << be_uint32_read(data+0) << " height:" << be_uint32_read(data+4) << " frequency:" << be_uint32_read(data+8); - cout << " simplicity:" << be_uint32_read(data+24); - cout << "(bit"; -@@ -174,6 +178,10 @@ void png_print_chunk(unsigned type, unsigned char* data, unsigned size) - cout << ")"; - break; - case ADV_MNG_CN_DHDR : -+ if (size < 4) { -+ cout << " invalid chunk size"; -+ break; -+ } - cout << " id:" << be_uint16_read(data+0); - switch (data[2]) { - case 0 : cout << " img:unspecified"; break; -@@ -243,6 +251,10 @@ void png_print_chunk(unsigned type, unsigned char* data, unsigned size) - } - break; - case ADV_MNG_CN_DEFI : -+ if (size < 2) { -+ cout << " invalid chunk size"; -+ break; -+ } - cout << " id:" << be_uint16_read(data+0); - if (size >= 3) { - switch (data[2]) { -@@ -266,6 +278,10 @@ void png_print_chunk(unsigned type, unsigned char* data, unsigned size) - } - break; - case ADV_MNG_CN_MOVE : -+ if (size < 13) { -+ cout << " invalid chunk size"; -+ break; -+ } - cout << " id_from:" << be_uint16_read(data+0) << " id_to:" << be_uint16_read(data+2); - switch (data[4]) { - case 0 : cout << " type:replace"; break; -@@ -275,6 +291,10 @@ void png_print_chunk(unsigned type, unsigned char* data, unsigned size) - cout << " x:" << (int)be_uint32_read(data + 5) << " y:" << (int)be_uint32_read(data + 9); - break; - case ADV_MNG_CN_PPLT : -+ if (size < 1) { -+ cout << " invalid chunk size"; -+ break; -+ } - switch (data[0]) { - case 0 : cout << " type:replacement_rgb"; break; - case 1 : cout << " type:delta_rgb"; break; -@@ -285,7 +305,7 @@ void png_print_chunk(unsigned type, unsigned char* data, unsigned size) - default : cout << " type:?"; break; - } - i = 1; -- while (i Date: Wed, 28 Sep 2022 11:54:40 -0400 Subject: [PATCH 12/17] Drop EPEL conditionals from Fedora branches --- advancecomp.spec | 21 --------------------- 1 file changed, 21 deletions(-) diff --git a/advancecomp.spec b/advancecomp.spec index 5610ada..2f2d136 100644 --- a/advancecomp.spec +++ b/advancecomp.spec @@ -36,23 +36,10 @@ BuildRequires: dos2unix # System library supported by upstream BuildRequires: zlib-devel -%if 0%{?el7} -# No libdeflate package in EPEL7 -Provides: bundled(libdeflate) = 0.6 -%else # Unbundled downstream BuildRequires: pkgconfig(libdeflate) -%endif -%if 0%{?el9} || 0%{?el8} || 0%{?el7} -# No libzopfli/zopfli-devel in these distributions -# Version number based on HISTORY, which mentions that upstream commit -# 6818a0859063b946094fb6f94732836404a0d89a was used from -# https://github.com/google/zopfli/. -Provides: bundled(zopfli) = 1.0.2%{?!el7:^20160527git6818a08} -%else BuildRequires: zopfli-devel -%endif # From 7z/README: # @@ -91,7 +78,6 @@ This package contains: %autosetup -p1 dos2unix -k doc/*.txt -%if ! 0%{?el7} # Patch out bundled libdeflate rm -rvf libdeflate sed -r -i '/libdeflate[\/_]/d' Makefile.am @@ -101,9 +87,7 @@ find . -type f -exec gawk \ '/^[[:blank:]]*#include.*libdeflate/ { print FILENAME; nextfile }' \ '{}' '+' | xargs -r -t sed -r -i 's@^([[:blank:]]*#include.*)libdeflate/@\1@' -%endif -%if !(0%{?el9} || 0%{?el8} || 0%{?el7}) # Patch out bundled zopfli rm -rvf zopfli sed -r -i \ @@ -116,24 +100,19 @@ find . -type f -exec gawk \ '/^[[:blank:]]*#include.*zopfli/ { print FILENAME; nextfile }' \ '{}' '+' | xargs -r -t sed -r -i -e 's@^([[:blank:]]*#include.*)zopfli/@\1@' -%endif %build %set_build_flags autoreconf --force --install --verbose -%if ! 0%{?el7} # Link against system libdeflate export CFLAGS="$(pkgconf --cflags libdeflate) ${CFLAGS-}" export CXXFLAGS="$(pkgconf --cflags libdeflate) ${CXXFLAGS-}" export LDFLAGS="$(pkgconf --libs libdeflate) ${LDFLAGS-}" -%endif -%if !(0%{?el9} || 0%{?el8} || 0%{?el7}) # Link against system zopfli export LDFLAGS="-lzopfli ${LDFLAGS-}" -%endif %configure %make_build From 2bd7f1276b73808378b4f73ca10d867a32e81857 Mon Sep 17 00:00:00 2001 From: "Benjamin A. Beasley" Date: Wed, 28 Sep 2022 17:21:51 -0400 Subject: [PATCH 13/17] Stricter file globs --- advancecomp.spec | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/advancecomp.spec b/advancecomp.spec index 2f2d136..3cb9413 100644 --- a/advancecomp.spec +++ b/advancecomp.spec @@ -124,11 +124,13 @@ export LDFLAGS="-lzopfli ${LDFLAGS-}" %files %license COPYING -%doc AUTHORS HISTORY README -%doc doc/adv*.txt +%doc AUTHORS +%doc HISTORY +%doc README +%doc doc/adv{def,mng,png,zip}.txt -%{_bindir}/* -%{_mandir}/man1/* +%{_bindir}/adv{def,mng,png,zip} +%{_mandir}/man1/adv{def,mng,png,zip}.1* %changelog From 0937c36cd08e97b7684434dcd9dbe18c7d912460 Mon Sep 17 00:00:00 2001 From: "Benjamin A. Beasley" Date: Wed, 28 Sep 2022 17:24:48 -0400 Subject: [PATCH 14/17] Add a comment about upstream tests --- advancecomp.spec | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/advancecomp.spec b/advancecomp.spec index 3cb9413..cd174f9 100644 --- a/advancecomp.spec +++ b/advancecomp.spec @@ -122,6 +122,11 @@ export LDFLAGS="-lzopfli ${LDFLAGS-}" %make_install +# We don’t run upstream tests (%%make_build check) because they are too +# brittle, expecting recompressed outputs to be identical. Across platforms, +# compilers, and unbundled library versions, this doesn’t hold up. + + %files %license COPYING %doc AUTHORS From e39bc9c9d6dd7b28aae33eae9e9e5e19866c4a68 Mon Sep 17 00:00:00 2001 From: "Benjamin A. Beasley" Date: Thu, 29 Sep 2022 08:21:33 -0400 Subject: [PATCH 15/17] =?UTF-8?q?Identify=20bundled=207-Zip=20as=20?= =?UTF-8?q?=E2=80=9C7zip=E2=80=9D=20rather=20than=20=E2=80=9C7z=E2=80=9D?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This is closer to the upstream name, to “p7zip”, and to existing usage in the “retroarch” package. --- advancecomp.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/advancecomp.spec b/advancecomp.spec index cd174f9..29c366a 100644 --- a/advancecomp.spec +++ b/advancecomp.spec @@ -57,7 +57,7 @@ BuildRequires: zopfli-devel # library, and because the implementation is modified, there is no possibility # of unbundling. Note that this was forked from the original 7-Zip, not from # p7zip. -Provides: bundled(7z) +Provides: bundled(7zip) %description AdvanceCOMP contains recompression utilities for your .zip archives, From ea15009eb1404c01e403a1afb39af55a0fd3fbf9 Mon Sep 17 00:00:00 2001 From: "Benjamin A. Beasley" Date: Wed, 23 Nov 2022 15:45:08 -0500 Subject: [PATCH 16/17] Update to 2.4 (close RHBZ#2145023) - Security fix for CVE-2022-35014, CVE-2022-35015, CVE-2022-35016, CVE-2022-35017, CVE-2022-35018, CVE-2022-35019, CVE-2022-35020 --- .gitignore | 1 + advancecomp.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 2ec630f..90d97e9 100644 --- a/.gitignore +++ b/.gitignore @@ -7,3 +7,4 @@ advancecomp-1.15.tar.gz /advancecomp-1.23.tar.gz /advancecomp-2.1.tar.gz /advancecomp-2.3.tar.gz +/advancecomp-2.4.tar.gz diff --git a/advancecomp.spec b/advancecomp.spec index 29c366a..f949b14 100644 --- a/advancecomp.spec +++ b/advancecomp.spec @@ -1,5 +1,5 @@ Name: advancecomp -Version: 2.3 +Version: 2.4 Release: %autorelease Summary: Recompression utilities for .png, .mng, .zip and .gz files diff --git a/sources b/sources index 59b074f..3b60e66 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (advancecomp-2.3.tar.gz) = 129bb820a044b03b94d9980c7fc675ee5c273ba8ba84f1fdd341c6b2d9847c3f379cc21e64bb75c0a3c5a45a3df9e560d92143728adb4e8834ae0525ff7d5d1c +SHA512 (advancecomp-2.4.tar.gz) = 648e89b684725743df4338a0958cdb9c37a7676f4b1a7209d016be0348d089eae9a0d20b3531838fc42887990f4c57749926c27e619887d8106a197961696a06 From 9a76a9a0d699b9659432ed44040927e39cc528f0 Mon Sep 17 00:00:00 2001 From: "Benjamin A. Beasley" Date: Sun, 22 Jan 2023 13:43:51 -0500 Subject: [PATCH 17/17] Update to 2.5 (close RHBZ#2162990; fix RHBZ#2161641) --- .gitignore | 1 + advancecomp.spec | 2 +- sources | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 90d97e9..91d5d6f 100644 --- a/.gitignore +++ b/.gitignore @@ -8,3 +8,4 @@ advancecomp-1.15.tar.gz /advancecomp-2.1.tar.gz /advancecomp-2.3.tar.gz /advancecomp-2.4.tar.gz +/advancecomp-2.5.tar.gz diff --git a/advancecomp.spec b/advancecomp.spec index f949b14..4458095 100644 --- a/advancecomp.spec +++ b/advancecomp.spec @@ -1,5 +1,5 @@ Name: advancecomp -Version: 2.4 +Version: 2.5 Release: %autorelease Summary: Recompression utilities for .png, .mng, .zip and .gz files diff --git a/sources b/sources index 3b60e66..04420d1 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (advancecomp-2.4.tar.gz) = 648e89b684725743df4338a0958cdb9c37a7676f4b1a7209d016be0348d089eae9a0d20b3531838fc42887990f4c57749926c27e619887d8106a197961696a06 +SHA512 (advancecomp-2.5.tar.gz) = c508526415dc002dad442e3f55202494ab2c49ecac3f5ea6e1a3fe27d224dd9a1a33dace02f59c18123d3f4bc74e3f03556b1cff6541cb88dcaaa32ac35c0043