Update to 2.5 (close RHBZ#2162990; fix RHBZ#2161641)

- Security fix for CVE-2022-35014, CVE-2022-35015, CVE-2022-35016,
  CVE-2022-35017, CVE-2022-35018, CVE-2022-35019, CVE-2022-35020

.gitignore

@@ -9,4 +9,3 @@ advancecomp-1.15.tar.gz
 /advancecomp-2.3.tar.gz
 /advancecomp-2.4.tar.gz
 /advancecomp-2.5.tar.gz
-/advancecomp-2.6.tar.gz

advancecomp.rpmlintrc

@@ -1,6 +0,0 @@
-# Not real spelling errors
-addFilter(r" spelling-error \('[Rr]ecompression',")
-addFilter(r" spelling-error \('([pm]ng|gz)',")
-addFilter(r" spelling-error \('adv(zip|[pm]ng|def)',")
-# Intentional, with a justifying spec-file comment
-addFilter(r" no-%check-section")

advancecomp.spec

@@ -1,5 +1,5 @@
 Name:           advancecomp
-Version:        2.6
+Version:        2.5
 Release:        %autorelease
 Summary:        Recompression utilities for .png, .mng, .zip and .gz files
 
@@ -14,21 +14,15 @@ Summary:        Recompression utilities for .png, .mng, .zip and .gz files
 #   of the sources that would be covered by the “unRAR license restriction” or
 #   the BSD-3-Clause license for LZFSE are present in this fork.
 #
+#   Certain build-system files, which do not contribute to the license of the
+#   binary RPM, are under other permissible licenses.
+#
 # However, in version 1.17, the COPYING file was updated to GPLv3, with a
 # changelog message (in HISTORY and elsewhere) of “Changes to GPL3.” We
 # interpret this as an overall license of GPL-3.0-only.
 License:        GPL-3.0-only AND GPL-2.0-or-later AND LGPL-2.1-or-later
-# Additionally, the following bundled libraries are removed in %%prep and do
-# not contribute to the licenses of the binary RPMs:
-#
-# Apache-2.0:
-#   - zopfli/
-# MIT:
-#   - libdeflate/
-SourceLicense:  %{license} AND Apache-2.0 AND MIT
 URL:            https://www.advancemame.it/
-%global forgeurl https://github.com/amadvance/advancecomp
-Source:         %{forgeurl}/archive/v%{version}/advancecomp-%{version}.tar.gz
+Source0:        https://github.com/amadvance/advancecomp/archive/v%{version}/advancecomp-%{version}.tar.gz
 
 BuildRequires:  autoconf
 BuildRequires:  automake
@@ -43,12 +37,9 @@ BuildRequires:  dos2unix
 BuildRequires:  zlib-devel
 
 # Unbundled downstream
-BuildRequires:  pkgconfig(libdeflate) >= 1.19
-BuildRequires:  zopfli-devel
+BuildRequires:  pkgconfig(libdeflate)
 
-# The point of the 2.6 release was to upgrade the bundled libdeflate; enforce
-# this on the unbundled libdeflate.
-Requires:       libdeflate >= 1.19
+BuildRequires:  zopfli-devel
 
 # From 7z/README:
 #
@@ -84,12 +75,11 @@ This package contains:
 
 
 %prep
-%autosetup
-
+%autosetup -p1
 dos2unix -k doc/*.txt
 
 # Patch out bundled libdeflate
-rm -rv libdeflate
+rm -rvf libdeflate
 sed -r -i '/libdeflate[\/_]/d' Makefile.am
 # Fix up #include paths. The find-then-modify pattern keeps us from discarding
 # mtimes on any sources that do not need modification.
@@ -99,7 +89,7 @@ find . -type f -exec gawk \
   xargs -r -t sed -r -i 's@^([[:blank:]]*#include.*)libdeflate/@\1@'
 
 # Patch out bundled zopfli
-rm -rv zopfli
+rm -rvf zopfli
 sed -r -i \
     -e '/zopfli[\/_]/d' \
     -e 's/((\(7z_SOURCES\)|WindowOut\.h).*)[[:blank:]]*\\/\1/' \
@@ -112,7 +102,8 @@ find . -type f -exec gawk \
   xargs -r -t sed -r -i -e 's@^([[:blank:]]*#include.*)zopfli/@\1@'
 
 
-%conf
+%build
+%set_build_flags
 autoreconf --force --install --verbose
 
 # Link against system libdeflate
@@ -124,9 +115,6 @@ export LDFLAGS="$(pkgconf --libs libdeflate) ${LDFLAGS-}"
 export LDFLAGS="-lzopfli ${LDFLAGS-}"
 
 %configure
-
-
-%build
 %make_build
 
 

changelog

@@ -7,9 +7,6 @@
 - Remove unnecessary BR on tofrodos
 - Properly document bundled 7z code
 
-* Wed Jul 20 2022 Fedora Release Engineering <releng@fedoraproject.org> - 2.1-20
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
-
 * Wed Jan 19 2022 Fedora Release Engineering <releng@fedoraproject.org> - 2.1-19
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
 

sources

@@ -1 +1 @@
-SHA512 (advancecomp-2.6.tar.gz) = 63cbb0578f96fd3f55ccb49e31bfe945649d36a11558aa482332440943d6d347f161de797b8d4469562b1d551b274c22fe08818179926d56aa4746581d3926dd
+SHA512 (advancecomp-2.5.tar.gz) = c508526415dc002dad442e3f55202494ab2c49ecac3f5ea6e1a3fe27d224dd9a1a33dace02f59c18123d3f4bc74e3f03556b1cff6541cb88dcaaa32ac35c0043