Hello community, here is the log from the commit of package gstreamer for openSUSE:Factory checked in at 2016-02-03 10:18:57 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/gstreamer (Old) and /work/SRC/openSUSE:Factory/.gstreamer.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "gstreamer" Changes: -------- --- /work/SRC/openSUSE:Factory/gstreamer/gstreamer.changes 2015-11-24 22:28:56.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.gstreamer.new/gstreamer.changes 2016-02-03 10:19:01.000000000 +0100 @@ -1,0 +2,58 @@ +Tue Jan 19 16:56:23 UTC 2016 - meiss...@suse.com + +- Hook gst-ptp-helper helper into SUSE permissions framework + (boo#960173): + + Add permissions to requires(pre). + + Add set_permissions to post and verify_permissions to + verifyscript. + +------------------------------------------------------------------- +Mon Jan 18 11:19:51 UTC 2016 - dims...@opensuse.org + +- Adjustments post security review (boo#960173): + + Add libcap-devel BuildRequires: rely on capabilities instead of + flagging the binary suid. + + Pass --with-ptp-helper-permissions=capabilities to configure: + ensure there is no auto-fallback to attempting to install the + binary suid in case capabilities would not work. + +------------------------------------------------------------------- +Wed Dec 23 14:19:07 UTC 2015 - dims...@opensuse.org + +- Update to version 1.6.2: + + Crashes in gst-libav with sinks that did not provide a buffer + pool but supported video metadata were fixed. This affected + d3dvideosink and some 3rd party sinks. Also related fixes for + crashes when a downstream buffer pool failed allocation. + + Big GL performance improvement on iOS by a factor of 2 by using + Apple's sync extension. + + Deadlocks in the DirectSound elements on Windows, and the + behaviour of its mute property were fixed. + + The Direct3D video sink does not crash anymore when minimizing + the window. + + The library soname generation on Android >= 6.0 was fixed, + which previously caused GStreamer to fail to load there. + + File related elements have large-file (>2GB) support on Android + now. + + gst-libav was updated to ffmpeg 2.8.3. + + Deserialization of custom events in the GDP depayloader was + fixed. + + Missing OpenGL context initialization in the Qt/QML video sink + was fixed in certain situations. + + Interoperability with some broken RTSP servers using HTTP + tunnel was improved. + + Various compilation fixes for Windows. + + Various smaller memory leak and other fixes in different + places. + + Bugs fixed: bgo#734098, bgo#738292, bgo#741608, bgo#753823, + bgo#755106, bgo#755222, bgo#755614, bgo#756028, bgo#756951, + bgo#757155, bgo#757264, bgo#757453, bgo#757454, bgo#757732, + bgo#757854, bgo#757873, bgo#757895, bgo#757924, bgo#757929, + bgo#757935, bgo#758029, bgo#758151, bgo#758204, bgo#758205, + bgo#758276, bgo#758285, bgo#758286, bgo#758337, bgo#758344, + bgo#758512, bgo#758620, bgo#758861, bgo#758912, bgo#758913, + bgo#758921, bgo#759019, bgo#759380. +- Add -fPIE to CFLAGS and -pie to LDFLAGS in order to ensure our + executables are built position independent. + +------------------------------------------------------------------- Old: ---- gstreamer-1.6.1.tar.xz New: ---- gstreamer-1.6.2.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ gstreamer-doc.spec ++++++ --- /var/tmp/diff_new_pack.rywLzV/_old 2016-02-03 10:19:02.000000000 +0100 +++ /var/tmp/diff_new_pack.rywLzV/_new 2016-02-03 10:19:02.000000000 +0100 @@ -1,7 +1,7 @@ # # spec file for package gstreamer-doc # -# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -19,7 +19,7 @@ Name: gstreamer-doc %define _name gstreamer %define build_doc 1 -Version: 1.6.1 +Version: 1.6.2 Release: 0 %define gst_branch 1.0 Summary: Streaming-Media Framework Runtime @@ -42,6 +42,7 @@ BuildRequires: flex BuildRequires: glib2-devel >= 2.32.0 BuildRequires: gnome-patch-translation +BuildRequires: libcap-devel BuildRequires: libtool BuildRequires: libxml2-devel BuildRequires: translation-update-upstream @@ -69,6 +70,7 @@ Requires: libgstreamer-1_0-0 >= %{version} Recommends: %{name}-lang = %{version} %endif +Requires(pre): permissions BuildRoot: %{_tmppath}/%{name}-%{version}-build %description @@ -163,8 +165,10 @@ %if %suse_version >= 1110 NOCONFIGURE=1 ./autogen.sh %endif -export CFLAGS="%{optflags} -fno-strict-aliasing" +export CFLAGS="%{optflags} -fno-strict-aliasing -fPIE" +export LDFLAGS="-pie" %configure\ + --with-ptp-helper-permissions=capabilities \ %if %build_doc --enable-gtk-doc\ --enable-docbook\ @@ -216,8 +220,12 @@ %endif %fdupes %{buildroot} -%clean -rm -rf %{buildroot} +%verifyscript +%verify_permissions -e %{_libexecdir}/gstreamer-%{gst_branch}/gst-ptp-helper + +%post +%set_permissions %{_libexecdir}/gstreamer-%{gst_branch}/gst-ptp-helper + %if ! %build_doc %post -n libgstreamer-1_0-0 -p /sbin/ldconfig @@ -250,7 +258,7 @@ %{_libdir}/gstreamer-%{gst_branch}/*.so %dir %{_libexecdir}/gstreamer-%{gst_branch} %{_libexecdir}/gstreamer-%{gst_branch}/gst-plugin-scanner -%{_libexecdir}/gstreamer-%{gst_branch}/gst-ptp-helper +%verify(not mode caps) %{_libexecdir}/gstreamer-%{gst_branch}/gst-ptp-helper %{_datadir}/bash-completion/completions/ %{_datadir}/bash-completion/helpers/ ++++++ gstreamer.spec ++++++ --- /var/tmp/diff_new_pack.rywLzV/_old 2016-02-03 10:19:02.000000000 +0100 +++ /var/tmp/diff_new_pack.rywLzV/_new 2016-02-03 10:19:02.000000000 +0100 @@ -1,7 +1,7 @@ # # spec file for package gstreamer # -# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -19,7 +19,7 @@ Name: gstreamer %define _name gstreamer %define build_doc 0 -Version: 1.6.1 +Version: 1.6.2 Release: 0 %define gst_branch 1.0 Summary: Streaming-Media Framework Runtime @@ -42,6 +42,7 @@ BuildRequires: flex BuildRequires: glib2-devel >= 2.32.0 BuildRequires: gnome-patch-translation +BuildRequires: libcap-devel BuildRequires: libtool BuildRequires: libxml2-devel BuildRequires: translation-update-upstream @@ -69,6 +70,7 @@ Requires: libgstreamer-1_0-0 >= %{version} Recommends: %{name}-lang = %{version} %endif +Requires(pre): permissions BuildRoot: %{_tmppath}/%{name}-%{version}-build %description @@ -163,8 +165,10 @@ %if %suse_version >= 1110 NOCONFIGURE=1 ./autogen.sh %endif -export CFLAGS="%{optflags} -fno-strict-aliasing" +export CFLAGS="%{optflags} -fno-strict-aliasing -fPIE" +export LDFLAGS="-pie" %configure\ + --with-ptp-helper-permissions=capabilities \ %if %build_doc --enable-gtk-doc\ --enable-docbook\ @@ -216,8 +220,12 @@ %endif %fdupes %{buildroot} -%clean -rm -rf %{buildroot} +%verifyscript +%verify_permissions -e %{_libexecdir}/gstreamer-%{gst_branch}/gst-ptp-helper + +%post +%set_permissions %{_libexecdir}/gstreamer-%{gst_branch}/gst-ptp-helper + %if ! %build_doc %post -n libgstreamer-1_0-0 -p /sbin/ldconfig @@ -250,7 +258,7 @@ %{_libdir}/gstreamer-%{gst_branch}/*.so %dir %{_libexecdir}/gstreamer-%{gst_branch} %{_libexecdir}/gstreamer-%{gst_branch}/gst-plugin-scanner -%{_libexecdir}/gstreamer-%{gst_branch}/gst-ptp-helper +%verify(not mode caps) %{_libexecdir}/gstreamer-%{gst_branch}/gst-ptp-helper %{_datadir}/bash-completion/completions/ %{_datadir}/bash-completion/helpers/ ++++++ gstreamer-1.6.1.tar.xz -> gstreamer-1.6.2.tar.xz ++++++ ++++ 7770 lines of diff (skipped)