------------------------------------------------------------------- Sun Jan 29 09:26:47 UTC 2023 - Cliff Zhao - Add pkgconf-CVE-2023-24056.patch: Backport commit 628b2b2baf from upstream, test for, and stop string processing, on truncation (bsc#1207394 CVE-2023-24056). ------------------------------------------------------------------- Mon Aug 23 09:18:29 UTC 2021 - Callum Farmer - Update to version 1.8.0: + Fix a minor memory leak relating to cross-personalities + Fix some edge cases with --redefine-prefix + Do not prepend sysroot_dir if the .pc file does not exist in the sysroot + Do not perform path filtering on default system include and library path lists. ------------------------------------------------------------------- Wed Jun 30 15:33:37 UTC 2021 - Callum Farmer - Update to 1.7.4 + Add PKG_CONFIG_DONT_DEFINE_PREFIX environment variable + Handle platforms where realpath(3) requires a pre-allocated buffer + Fix null-dereference crash when pulling a malformed 'uninstalled' .pc file into a dependency tree. ------------------------------------------------------------------- Wed Apr 7 16:19:46 UTC 2021 - Dirk Müller - do not own directories provided by filesystem - small cleanups inspired by spec-cleaner ------------------------------------------------------------------- Mon Aug 10 05:03:07 UTC 2020 - Neal Gompa - Add /usr/local paths to pkg-config(1) search path for non RPM builds (boo#1175039) ------------------------------------------------------------------- Mon Jun 15 08:30:00 UTC 2020 - Callum Farmer - Update to 1.7.3 - Bug fixes: + Fix a possible out of boundary write when evaluating dependencies. Patch by Tobias Stöckmann. + Fix escaping logic on Windows. Patch by Vincent Torri. + Fix out of boundary reads and writes with a malformed fragment. Patches by Tobias Stöckmann. + Fix a possible out of boundary write when evaluating tuples. Patch by Tobias Stöckmann. + Fix a windows-specific crash relating to path fixups. + Fix a possible out of boundary access in the parser for the cross-compile database. Patch by Tobias Stöckmann. + Missing files for building with Meson are now included in the tarball. Patch by Neal Gompa. + Fix calculation of package atoms on Windows with paths that use both directory separator characters. + Fix a possible buffer overflow involving newline escaping. Patch by Tobias Stöckmann. + Fix an out of boundary access in the parser. Patch by Tobias Stöckmann. + Fix leakage of strcmp() result value in pkgconf_compare_version() responses. + Return the default personality if loading a cross-compile personality file failed. + Do not complain about newlines when validating package versions. + Properly detect strndup() on Windows when building with Meson. - Enhancements: + A new --shared option and WantDefaultStatic cross-compile configuration option have been added. This allows for toolchains to specify that static linking should be used by default. + Support for the PKG_CONFIG_MSVC_SYNTAX environment variable has been added. Patch by Dan Kegel. + Support for the PKGCONF_PKG_PKGF_DONT_MERGE_SPECIAL_FRAGMENTS client flag which disables emulation of freedesktop.org pkg-config fragment merging semantics has been added. Patch by Karen Arutyunov. ------------------------------------------------------------------- Mon Aug 12 09:35:34 UTC 2019 - Neal Gompa - Update to 1.6.3 + Fixed a memory leak when deduplicating paths. + Fixed strndup-related build regression on Windows. + Added --modversion description to pkgconf(1) man page. + Properly tokenize versions. Versions cannot logically contain whitespace, as dependency-lists would not properly tokenize if they could. A diagnostic is generated for malformed version strings containing whitespace when --validate is used. ------------------------------------------------------------------- Fri Aug 9 00:19:43 UTC 2019 - Neal Gompa - Co-own aclocal directory to avoid requiring autoconf-archive ------------------------------------------------------------------- Mon Aug 5 12:46:49 UTC 2019 - Neal Gompa - Add missing -gnu ABI suffix to platform names in pkgconf-pkg-config (boo#1144318) ------------------------------------------------------------------- Mon Jul 15 00:28:33 UTC 2019 - Neal Gompa - Fix license tag for pkgconf-m4 ------------------------------------------------------------------- Mon Jul 15 00:04:56 UTC 2019 - Neal Gompa - Set pkgconf to provide pkgconfig on Tumbleweed (post SUSE Linux 15) ------------------------------------------------------------------- Wed May 1 12:32:54 UTC 2019 - Neal Gompa - Update to 1.6.1 + Fixed an issue where a personality may not be properly selected due to argv[0] containing a full path. + Fixed a regression where having an empty PKG_CONFIG_LIBDIR environment variable would not eliminate the default search paths. + Use POSIX realpath(3) instead of readlink() for deduplicating the search path. Use _fullpath() on Windows for the same purpose. + The dequoting logic for tuples has been improved to ensure that quotes *inside* a value remain quoted when necessary. + Fixed issue where packages which referenced missing packages in Requires.private may have crashed due to memory corruption issues in some circumstances. + Fixed warnings reported by GCC 8 diagnostics. + Add LIBPKGCONF_VERSION and LIBPKGCONF_VERSION_STR macros for determining libpkgconf version. + Add pkgconf_fragment_copy_list() to copy a fragment list to another fragment list. + Fix edge cases for path canonicalization (especially on Windows) - Add personality.d directories for cross-targets - Add pkgconf rpm macros for pkgconf directories - Simplify platform-pkg-config wrapper to work with POSIX sh ------------------------------------------------------------------- Tue Aug 21 12:27:05 UTC 2018 - Neal Gompa - Update to 1.5.3 + Fix edge cases involving dequoting zero-length tuples that can lead to a buffer overflow under the right circumstances. Thanks to A. Wilcox for reporting and supplying a patch. (boo#1105438 - CVE-2018-1000221) + Ensure environment variables override values learned from personality files or built-in defaults. + Add pkgconf-personality(5) manpage documenting the personality file format. - Drop BR pkgconfig and manually specified pkgconfig() Provides for devel subpackage to avoid dependency loops. ------------------------------------------------------------------- Wed Jun 20 10:51:58 UTC 2018 - Karol Babioch - Update to version 1.5.1 - fixed a crash with some invalid multi-line .pc files - Update to version 1.5.0 - pkgconf now supports the proposed Requires.internal pkg-config extension, by merging it with the Requires.private list (there is no functional difference between the two in our resolver implementation) - Support for cross-compilation personalities have been added. To make use of this functionality, create a file in the new personality.d directory that sits inside the pkgconfig directory. The personality file format is described in pc-personality(5). - Support for Haiku has been added, including interpretation of BELIBRARIES and other toolchain specifics. - tuples are now appropriately dequoted when added by the parser - Applied spec-cleaner ------------------------------------------------------------------- Sun May 20 12:34:57 UTC 2018 - Neal Gompa - Add BR pkgconfig to generate pkgconfig() deps ------------------------------------------------------------------- Sun May 20 01:32:46 UTC 2018 - Neal Gompa - Update to 1.4.2 + Bug fixes - ensure pkgconf_dependency_t nodes have a solution marked when satisfied by an indirect provider (gh#pkgconf/pkgconf#172) - revert some quoting changes because they don't work well with certain GCC edge cases (gh#pkgconf/pkgconf#168) ------------------------------------------------------------------- Mon Feb 19 15:56:36 UTC 2018 - Neal Gompa - Initial packaging based on Fedora and Mageia packaging