- Use %patch -P N instead of deprecated %patchN (forwarded request 1151818 from pgajdos)

• Files Changed
• Browse Source

- Update to fig2dev version 3.2.9 (Aug 2023)
  o Write utf8-encoded postscript and tex-outputs.
    Ticket numbers refer to https://sourceforge.net/p/mcj/tickets/#.
  o Include sys/wait.h to build on some bsds.
  o Process crafted input files, tickets #142, #145, #146, #147, #148,
    and #152.
  o Correctly scale dxf output, ticket #91.
  o Correct a typo causing incorrect eps import, ticket #137.
  o Regression, pass driver names to driver, ticket #139.
- Port and rename patch transfig-3.2.8.dif which is now transfig-3.2.9.dif
- Port patches
  * fig2dev-3.2.6-fig2mpdf.patch
  * transfig-fix-afl.patch
- Remove patches now upstream
  * 0001-Make-ModDate-and-CreationDate-in-PDF-reproducible.patch
  * 1b09a8.patch

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- This Update includes the fixes for
  * bsc#1190618, CVE-2020-21529: stack buffer overflow in the bezier_spline function in genepic.c.
  * bsc#1190615, CVE-2020-21530: segmentation fault in the read_objects function in read.c.
  * bsc#1190617, CVE-2020-21531: global buffer overflow in the conv_pattern_index function in gencgm.c.
  * bsc#1190616, CVE-2020-21532: global buffer overflow in the setfigfont function in genepic.c.
  * bsc#1190612, CVE-2020-21533: stack buffer overflow in the read_textobject function in read.c.
  * bsc#1190611, CVE-2020-21534: global buffer overflow in the get_line function in read.c.
  * bsc#1190607, CVE-2020-21535: segmentation fault in the gencgm_start function in gencgm.c.
  * bsc#1192019, CVE-2021-32280: NULL pointer dereference in compute_closed_spline() in trans_spline.c

• Files Changed
• Browse Source

- Update to fig2dev version 3.2.8 Patchlevel 8b (Aug 2021)
  o Detect the output language from the output file name.
  o On the command line, a minus (-) as input or output file name refers
    to standard input or standard output.
  o Correct buffer overflows and segfaults, mainly due to maliciously
    crafted input files, tickets #113-117, #122, #123, #125-#135.
  o With -Lepic -P, generate a complete tex file.
  o Correctly produce a gif if a transparent color is given, ticket #121.
  o Return with error if no space is left on the device. Ticket #101.
- Remove patch 6827c09d.patch now upstream
- Add patch 1b09a8.patch from upstream (for ticket #137)
- Port patch fig2dev-3.2.6-fig2mpdf.patch back

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

- Add upstream commit as patch 6827c09d.patch
  Global buffer overflow in fig2dev/read.c in function read_colordef() 
  (boo#1186329, CVE-2021-3561)

• Files Changed
• Browse Source

- Update to fig2dev version 3.2.8 Patchlevel 8a (Mar 2021)
  o Allow closed splines with three points.
  o Fix build under Darwin.
- Correct hunk offsets of the patch
  o transfig-3.2.8.dif

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

- Add upstream security patches/commits
  * 100e27.patch
  * 3065eb.patch
  * ca48cc.patch

- Do hardening via compile and linker flags

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

- Add patch CVE-2019-19555.patch
  * Even if we are not affected add fix for CVE-2019-19555

• Files Changed
• Browse Source

- Update to fig2dev version 3.2.7 (Patchlevel 7b (Oct 2019)
  o A X color database is not needed, but can be provided. The location of
    the database can be given at compile time, default /etc/X11/rgb.txt.
  Ticket numbers refer to https://sourceforge.net/p/mcj/tickets/#.
  Debian bug numbers refer to https://bugs.debian.org/#.
  o Do not clip objects with line-thickness 0 having arrows. Ticket #53.
  o Do not segfault on circle/half circle arrowheads with a magnification
    larger 42. Always draw circle arrowheads with 40 points. Ticket #52.
  o Allow circles or ellipses with negative radii. Ticket #49.
  o Avoid "dimension too large error" with tikz output by avoiding
    coordinate values smaller than -16383.
  o Make tests (test1.c) work with -fsanitize=address compiler option.
  o Obey join-style of lines in tikz output.
  o Pass utf8-strings to svg output, escape some chars (<>&).
  o Accept inclined boxes and change them to polygons. Fixes ticket #43.
  o Make tests #27 and #33 work on Mac Darwin, failed due to whitespace
    formatting differences. From Hanspeter Niederstrasser. Ticket #40.
  o Use only latex, neither etex or tex, to test tikz output. Usage of
    etex, after hint from Roland Rosenfeld, closed debian bug 920368.
  o For tikz output, do not draw arrows on a single point line.
  o Omit spurious showpage when including jpg-file. From Rainer Buchty.
  o Correct a few memory leaks and corruptions. See commit d1c54f6.
  o Change negative color numbers to default color. Fixes ticket #30.
  o A spline with one point would cause segfault. Fixed, see ticket #29.
  o Allow one char without newline in the last line of an input file.
    Fixes ticket #28.
  o Harden input, mainly against files in which an incomplete object would
    be created and freeing the object would violate memory, i.e, it may
    cause segfault. See, e.g., ticket #27.
  o Properly initalize line storage when reading fig files version 1.3.

• Files Changed
• Browse Source

- Add patch transfig-03ea4578.patch from upstream commit 03ea4578
  to fix bsc#1143650 with CVE-2019-14275

• Files Changed
• Browse Source

- Add patch transfig-e0c4b024.patch from upstream commit e0c4b024
  to fix bsc#1106531 with CVE-2018-16140

• Files Changed
• Browse Source

- Update to fig2dev version 3.2.7a (Patchlevel 7a (April 2018))
  o  Language         previous option         current option
    ------------------------------------------------------------
     cgm              -b dummy                -a
     epic             -A scale                -d scale
     eepic            -A scale                -d scale
     eepicemu         -A scale                -d scale
     gbx              -i on|off               -v
     ibmgl            -m mag,xoff,yoff        -m mag -x xoff -y yoff
     mp               -I file                 -d file
     ps               -S dummy                -o
  o Print language-specific help text by using fig2dev -L lang -h.
  o Add option -M, multipage, for MetaPost output language.
  o Add option -P, pagemode, and -z to choose a pagesize for pdf output.
  o Add option -W (scaling of figures not possible) for tikz.
  o Add option -b, border width, for LaTeX output language.
  o Add option -f for pstex_t and pdftex_t output language.
  o Add uk_UA and ru_RU encodings for PostScript output. Ticket #12.
  o Fix regression whereupon flipped ellipses were not read. Ticket #23.
  o Distribute i18n files ru_RU.CP1251.ps and uk_UA.KOI8-U.ps.
  o Make test "survive debian bug #890016" succeed on 32 bit systems.
  o Distribute the X bitmaps files within fig2dev, no need to install
    these files. The files were needed for Tk and Perl/Tk output.
  o Add option -w, wrap (create stand-alone perl file) for Perl/Tk output.
  o Update help text: Output help for dxf and textyl output language,
    add description of -g option for Tk/Tcl and Perl/Tk output, allow -f
    option for pstex_t and pdftex_t output language.
  o Sanitize input. Do not segfault on malformed input files. Fixes debian
    bugs 881143, 881144, 881396, 890015, 890016, 882021 and also 882022.
  o Do not put an %%Orientation: comment into PostScript output. Some

• Files Changed
• Browse Source