diff --git a/abi_symbols b/abi_symbols --- a/abi_symbols +++ b/abi_symbols @@ -14,6 +14,7 @@ libSDL2_image-2.0.so.0:IMG_LoadPCX_RW libSDL2_image-2.0.so.0:IMG_LoadPNG_RW libSDL2_image-2.0.so.0:IMG_LoadPNM_RW +libSDL2_image-2.0.so.0:IMG_LoadSVG_RW libSDL2_image-2.0.so.0:IMG_LoadTGA_RW libSDL2_image-2.0.so.0:IMG_LoadTIF_RW libSDL2_image-2.0.so.0:IMG_LoadTexture @@ -31,6 +32,8 @@ libSDL2_image-2.0.so.0:IMG_QuitTIF libSDL2_image-2.0.so.0:IMG_QuitWEBP libSDL2_image-2.0.so.0:IMG_ReadXPMFromArray +libSDL2_image-2.0.so.0:IMG_SaveJPG +libSDL2_image-2.0.so.0:IMG_SaveJPG_RW libSDL2_image-2.0.so.0:IMG_SavePNG libSDL2_image-2.0.so.0:IMG_SavePNG_RW libSDL2_image-2.0.so.0:IMG_isBMP @@ -42,8 +45,15 @@ libSDL2_image-2.0.so.0:IMG_isPCX libSDL2_image-2.0.so.0:IMG_isPNG libSDL2_image-2.0.so.0:IMG_isPNM +libSDL2_image-2.0.so.0:IMG_isSVG libSDL2_image-2.0.so.0:IMG_isTIF libSDL2_image-2.0.so.0:IMG_isWEBP libSDL2_image-2.0.so.0:IMG_isXCF libSDL2_image-2.0.so.0:IMG_isXPM libSDL2_image-2.0.so.0:IMG_isXV +libSDL2_image-2.0.so.0:nsvgCreateRasterizer +libSDL2_image-2.0.so.0:nsvgDelete +libSDL2_image-2.0.so.0:nsvgDeleteRasterizer +libSDL2_image-2.0.so.0:nsvgParse +libSDL2_image-2.0.so.0:nsvgRasterize +libSDL2_image-2.0.so.0:nsvg__parseXML diff --git a/abi_symbols32 b/abi_symbols32 --- a/abi_symbols32 +++ b/abi_symbols32 @@ -14,6 +14,7 @@ libSDL2_image-2.0.so.0:IMG_LoadPCX_RW libSDL2_image-2.0.so.0:IMG_LoadPNG_RW libSDL2_image-2.0.so.0:IMG_LoadPNM_RW +libSDL2_image-2.0.so.0:IMG_LoadSVG_RW libSDL2_image-2.0.so.0:IMG_LoadTGA_RW libSDL2_image-2.0.so.0:IMG_LoadTIF_RW libSDL2_image-2.0.so.0:IMG_LoadTexture @@ -31,6 +32,8 @@ libSDL2_image-2.0.so.0:IMG_QuitTIF libSDL2_image-2.0.so.0:IMG_QuitWEBP libSDL2_image-2.0.so.0:IMG_ReadXPMFromArray +libSDL2_image-2.0.so.0:IMG_SaveJPG +libSDL2_image-2.0.so.0:IMG_SaveJPG_RW libSDL2_image-2.0.so.0:IMG_SavePNG libSDL2_image-2.0.so.0:IMG_SavePNG_RW libSDL2_image-2.0.so.0:IMG_isBMP @@ -42,8 +45,15 @@ libSDL2_image-2.0.so.0:IMG_isPCX libSDL2_image-2.0.so.0:IMG_isPNG libSDL2_image-2.0.so.0:IMG_isPNM +libSDL2_image-2.0.so.0:IMG_isSVG libSDL2_image-2.0.so.0:IMG_isTIF libSDL2_image-2.0.so.0:IMG_isWEBP libSDL2_image-2.0.so.0:IMG_isXCF libSDL2_image-2.0.so.0:IMG_isXPM libSDL2_image-2.0.so.0:IMG_isXV +libSDL2_image-2.0.so.0:nsvgCreateRasterizer +libSDL2_image-2.0.so.0:nsvgDelete +libSDL2_image-2.0.so.0:nsvgDeleteRasterizer +libSDL2_image-2.0.so.0:nsvgParse +libSDL2_image-2.0.so.0:nsvgRasterize +libSDL2_image-2.0.so.0:nsvg__parseXML diff --git a/files/security/cve-2017-2887.patch b/files/security/cve-2017-2887.patch deleted file mode 100644 --- a/files/security/cve-2017-2887.patch +++ /dev/null @@ -1,33 +0,0 @@ -# HG changeset patch -# User Sam Lantinga -# Date 1507329619 25200 -# Fri Oct 06 15:40:19 2017 -0700 -# Node ID 318484db0705d07d4d1f4c0a1d3d5ea69f6ba2b0 -# Parent 7ad06019831d474380fd5a63e518d21219031519 -Fixed security vulnerability in XCF image loader (thanks Yves!) - -diff -r 7ad06019831d -r 318484db0705 IMG_xcf.c ---- a/IMG_xcf.c Mon Sep 18 16:10:17 2017 -0700 -+++ b/IMG_xcf.c Fri Oct 06 15:40:19 2017 -0700 -@@ -251,6 +251,7 @@ - } - - static void xcf_read_property (SDL_RWops * src, xcf_prop * prop) { -+ Uint32 len; - prop->id = SDL_ReadBE32 (src); - prop->length = SDL_ReadBE32 (src); - -@@ -274,7 +275,12 @@ - break; - case PROP_COMPRESSION: - case PROP_COLOR: -- SDL_RWread (src, &prop->data, prop->length, 1); -+ if (prop->length > sizeof(prop->data)) { -+ len = sizeof(prop->data); -+ } else { -+ len = prop->length; -+ } -+ SDL_RWread(src, &prop->data, len, 1); - break; - case PROP_VISIBLE: - prop->data.visible = SDL_ReadBE32 (src); diff --git a/package.yml b/package.yml --- a/package.yml +++ b/package.yml @@ -1,8 +1,8 @@ name : sdl2-image -version : 2.0.1 -release : 5 +version : 2.0.3 +release : 6 source : - - https://www.libsdl.org/projects/SDL_image/release/SDL2_image-2.0.1.tar.gz : 3a3eafbceea5125c04be585373bfd8b3a18f259bd7eae3efc4e6d8e60e0d7f64 + - https://www.libsdl.org/projects/SDL_image/release/SDL2_image-2.0.3.tar.gz : 3510c25da735ffcd8ce3b65073150ff4f7f9493b866e85b83738083b556d2368 license : Zlib component : multimedia.library summary : SDL_image is an image file loading library. @@ -11,14 +11,13 @@ emul32 : yes optimize : speed builddeps : + - pkgconfig32(libturbojpeg) - pkgconfig32(libpng) - pkgconfig32(libtiff-4) - pkgconfig32(libwebp) - pkgconfig32(sdl2) - pkgconfig32(zlib) - - libjpeg-turbo-32bit-devel setup : | - %patch -p1 < $pkgfiles/security/cve-2017-2887.patch %configure --disable-static --prefix=/usr build : | %make diff --git a/pspec_x86_64.xml b/pspec_x86_64.xml --- a/pspec_x86_64.xml +++ b/pspec_x86_64.xml @@ -29,7 +29,7 @@ emul32 - sdl2-image + sdl2-image /usr/lib32/lib*.so.* @@ -42,8 +42,8 @@ programming.devel - sdl2-image-32bit - sdl2-image-devel + sdl2-image-32bit + sdl2-image-devel /usr/lib32/lib*.so @@ -57,7 +57,7 @@ programming.devel - sdl2-image + sdl2-image /usr/include/ @@ -66,12 +66,12 @@ - - 2017-10-11 - 2.0.1 + + 2018-03-05 + 2.0.3 Packaging update Pierre-Yves pyu@riseup.net \ No newline at end of file