Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package gerbv for openSUSE:Factory checked 
in at 2022-11-20 19:46:57
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/gerbv (Old)
 and      /work/SRC/openSUSE:Factory/.gerbv.new.1597 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "gerbv"

Sun Nov 20 19:46:57 2022 rev:11 rq:1036820 version:2.9.4

Changes:
--------
--- /work/SRC/openSUSE:Factory/gerbv/gerbv.changes      2022-05-12 
23:02:00.204929164 +0200
+++ /work/SRC/openSUSE:Factory/.gerbv.new.1597/gerbv.changes    2022-11-20 
19:46:59.541230314 +0100
@@ -1,0 +2,13 @@
+Thu Nov 17 14:26:10 UTC 2022 - Andrea Manzini <andrea.manz...@suse.com>
+
+- Update to 2.9.4
+  * Fix rotation
+  * libgerbv: Free the memory allocated in aperture macro comments
+  * Fix CVE-2021-40400: Gerbv RS-274X aperture macro outline primitive 
out-of-bounds read vulnerability
+  * Fix CVE-2021-40403: Gerbv pick-and-place rotation parsing use of 
uninitialized variable vulnerability
+  * Fix CVE-2021-40401: Gerbv RS-274X aperture definition tokenization 
use-after-free vulnerability
+  * Emit warning when G04 includes a CR or LF
+  * Support spaces in excellon XY drill lines
+  * Add support for Altium-style FILE_FORMAT comments
+
+-------------------------------------------------------------------

Old:
----
  gerbv-2.8.2.tar.gz

New:
----
  gerbv-2.9.4.tar.gz

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ gerbv.spec ++++++
--- /var/tmp/diff_new_pack.E1YXgx/_old  2022-11-20 19:47:01.057239077 +0100
+++ /var/tmp/diff_new_pack.E1YXgx/_new  2022-11-20 19:47:01.061239100 +0100
@@ -18,7 +18,7 @@
 
 Name:           gerbv
 %define libname lib%{name}
-Version:        2.8.2
+Version:        2.9.4
 Release:        0
 %define somajor 1
 Summary:        Gerber File Viewer that supports the RS-274X Standard

++++++ gerbv-2.8.2.tar.gz -> gerbv-2.9.4.tar.gz ++++++
++++ 6488 lines of diff (skipped)

Reply via email to