Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

libcgraph6-2.49.3-9.1 RPM for x86_64

From OpenSuSE Tumbleweed for x86_64

Name: libcgraph6 Distribution: openSUSE Tumbleweed
Version: 2.49.3 Vendor: openSUSE
Release: 9.1 Build date: Sat Mar 9 20:58:38 2024
Group: System/Libraries Build host: h02-ch2b
Size: 101514 Source RPM: graphviz-2.49.3-9.1.src.rpm
Packager: https://bugs.opensuse.org
Url: https://www.graphviz.org/
Summary: Library for graph programming
Libcgraph supports graph programming by maintaining graphs in memory and
reading and writing graph files. Graphs are composed of nodes, edges, and
nested subgraphs. These graph objects may be attributed with string
name-value pairs and programmer-defined records.

Provides

Requires

License

EPL-1.0

Changelog

* Thu Mar 07 2024 Thomas Renninger <trenn@suse.de>
  - VUL-0: CVE-2023-46045: graphviz: out-of-bounds read via a crafted config6a file
    bsc#1219491
    A gvc-detect-plugin-installation-failure-and-display-an-error.patch
  - Some alphabetical re-ordering and other spec file changes which should
    not have any functional change which came from some kind of auto-spec
    cleaner
* Thu Feb 22 2024 Michael Vetter <mvetter@suse.com>
  - Use %patch -P N instead of deprecated %patchN.
  - Update graphviz-rpmlintrc
* Tue Nov 28 2023 Bernhard Wiedemann <bwiedemann@suse.com>
  - Require bitstream-vera-fonts for correct .png rendering by doxygen+dot
* Wed Mar 01 2023 Stefan Brüns <stefan.bruens@rwth-aachen.de>
  - Fix RPM conditionals for PHP, elif does not work on Leap 15.x
  - Remove unused ghostscript_any BuildRequires for qt5 and main
    flavors
* Mon Nov 14 2022 pgajdos@suse.com
  - php8 support was added in swig 4.1.0
* Wed Oct 19 2022 Klaus Kämpf <kkaempf@suse.com>
  - add swig-4.1.0.patch to work around graphviz's incompatibility
    with swig-4.1.0.
* Fri Aug 12 2022 Stephan Kulow <coolo@suse.com>
  - Split the Qt5 dependencies from addons flavor - it's just gvedit
* Mon Jan 10 2022 Stefan Brüns <stefan.bruens@rwth-aachen.de>
  - Remove pointless libgraphviz6 subpackage only containing broken
    and unnecessary ld.so.conf.d dropin.
  - Add required Provides and Obsoletes for library package split.
  - Remove unversioned symlinks for plugins, breaking shared library
    policy.
  - Remove duplicate python3 bindings in wrong directory (again).
  - Add missing post scriptlet for webp plugin.
  - Fix postun scriptlets for all plugins (be silent when graphviz
    gets removed completely, report errors otherwise).
  - Cleanup spec file.
  - Disable Java bindings, as unused/untested, and packaging
    is quite broken.
* Wed Nov 24 2021 Dirk Müller <dmueller@suse.com>
  - update to 2.49.3:
    - gvpr "split", "tokens", and "index" functions produce incorrect results
      This was a regression that occurred between 2.47.1 and 2.47.2.
    - Lefty is disabled by default in the Autotools build system. To re-enable it,
      pass `--enable-lefty` to `./configure`. In a future release, Lefty will be
      removed.
    - remove PHP5 support in SWIG bindings
    - Msys experimental packages are included in release artifacts
    - CMake build system incorrectly aliases gv2gml to gml2gv
    - Gv2gml Doesn't escape quotes in attributes
    - GVPR incorrectly understands color schemes
  - reenable lefty to fix addons build
* Wed Oct 27 2021 Christian Vögl <christian.voegl@suse.com>
  - Split libgraphviz into tlibcdt, libcgraph, libgvc, libgvpr, libpathplan,
    libxdot, and  liblab_gamut packages, in order to fix shlib naming policy
    errors (boo#1191756)
* Sat Oct 16 2021 Dirk Müller <dmueller@suse.com>
  - update to 2.49.1:
    - the CMake build system installs gzipped man pages if `gzip` is available #1883
    - CMake projects using Graphviz as a subproject (`add_subdirectory`) can now
      link against and use `gvc`.
    - various problems in the generation of Javascript bindings
    - 2.48.0: test suite is failing #2112
    - Ensure correct file-level dependency for generated file in cmake generated
      projects #2119
    - compile failures with a C++20-compatible toolchain #2122
    - compile errors on macOS when using Bison 3.8 #2127
    - Make Graphviz buildable as a cmake subproject/subdirectory #1477
    - Header not found in Cmake project #2109
    - a very basic C++ API for a subset of the functions in lib/cgraph and
      lib/gvc, allowing a graph to be rendered from DOT source to a
      specified format. The new API is available through two new
      libraries: lib/cgraph++ and lib/gvc++. It is experimental, meaning
      that it might have breaking changes also in upcoming patch or minor
      releases (towards #2001)
    - CMake builds now support an `with_expat` option that allows the support for
      using HTML-like labels through the optional expat library to be explicitly
      enabled (default) or disabled
    - CMake builds now support an with_zlib option that allows the support for
      raster image compression through the optional zlib library to be explicitly
      enabled (default) or disabled
    - the CMake build system now enables `-Wextra` when building C++
    - some Cgraph functions that take `char*` arguments that they do not modify have
      been updated to take `const char*` arguments #634
    - incorrectly using the `layout` attribute on anything other than a graph now
      results in a warning about this being invalid #2078
    - `edgepaint` accepts more standard `--` prefixed command line arguments and
      rejects invalid options #1971
    - improved detection of Lefty dependencies in the Autotools build system
    - libexpr rejects printing the time (`%t`) if no format is provided
    - `-DDATE=…` option in the CMake build system has been removed
    - the Autotools build system no longer writes the DATE file and the portable
      source tarball no longer includes this
    - The attached dot file causes a segfault when processed #2095
    - fix typos and update URLs in `edgepaint` usage text and man page
    - Fix clang's undefined behavior warning in dotLayout
    - gvpr doesn't build on macOS but MKDEFS_EXECUTABLE points to wrong
      directory #2101
    - the generated gdefs.h header is no longer installed
    - `ccomps` out-of-memory message no longer incorrectly refers to `gc`
    - do not abort when `calloc(0, x)` or `calloc(x, 0)` in `gcalloc` return `NULL`
    - failed Exshort_t type discrimination #1799
    - dot manpage is in wrong directory on Windows #1936
    - CMake builds fail when when the ltdl library is not available even if the
      `enable_ltdl` option is `ON`
    - CMake builds fail when when the optional `zlib` library is not available
    - fix graph rotation in quartz plugin
* Mon Sep 06 2021 Christian Voegl <christian.voegl@suse.com>
  - Changelog Update for SLES:
    The following patch has been backported to SLES and is therefore
    missing from the Factory changelog:
    * graphviz-malformed_input.patch (boo#1132091)
* Mon Aug 30 2021 Christian Vögl <christian.voegl@suse.com>
  - Changelog Update for SLES:
    The Following patches have been backported to SLES and are therefore
    missing from the Factory changelog:
    * graphviz-2.40.1-fix-dot-segfault.patch (bsc#1151207)
    * graphviz-out-of-bounds-write.patch (bsc#1185833)
    * graphviz-null_dereference.patch (bsc#1185833)
* Wed Aug 11 2021 Christian Vögl <christian.voegl@suse.com>
  - Dropped python2 subpackages as the bindings are removed in 2.48
  - Update to version 2.48.0 (changes since 2.47.1)
    * marginally more accurate computations in Smyrna sphere projection
    * Perl is no longer required to build Graphviz #2067
    * nop more reliably returns success and failure exit statuses
    * implicit 63 character limit on plugin names is removed in GVC
    * remove Python 2 bindings #1992
    * improved thread-safety in Graphviz bindings Makefile
    * the CMake build system now enables -Wextra when building C++
    * some Cgraph functions that take char* arguments that they do not modify have
      been updated to take const char* arguments #634
    * incorrectly using the layout attribute on anything other than a graph now
      results in a warning about this being invalid #2078
    * edgepaint accepts more standard -- prefixed command line arguments and
      rejects invalid options #1971
    * improved detection of Lefty dependencies in the Autotools build system
    * Fix: out of bounds read when attempting to load a plugin whose name is ≥63 characters
    * Fix: out of bounds read when examining a registered plugin whose name is ≥63 characters
    * Fix: do not fclose(NULL) in gvmap
    * Fix: Uninitialized variable read in delaunay_tri
      potentially mismatched format string in tclpkg
    * Fix: ortho's eqEndSeg incorrectly modifies its arguments #2047
    * Fix: Autotools enables -Wtrampolines and -Wlogical-op for Clang #2066
    * Fix: node_distinct_coloring failure due to out-of-memory now reported correctly
      instead of referring to a failure to open lab_gamut
    * Fix: a typo GD_LIBS to GDLIB_LIBS in tclpkg/tcldot/Makefile.am !2022
    * Fix: Autotools build system sets libgd variables now instead of incorrectly setting
      GTK variables
    * Fix: HTML strings used as labels are distinguishable in GXL output by kind="HTML-like string"
    * Fix: a Bashism removed from the Autotools build system
    * Fix: when Criterion is available, the command_line test binary is no longer built
      and installed by default, but rather during make check
    * Fix: round-tripping a file through gv2gxl and then gxl2gv no longer causes
      HTML-like labels to become non-HTML like labels #517
    * Fix: fix ODR violation by including the ortho object files in the gvc lib also for
      CMake and MSbuild #2096
* Mon Jun 28 2021 Steve Kowalik <steven.kowalik@suse.com>
  - Update graphviz-2.20.2-interpreter_names.patch so the Python demo
    uses Python 3.
* Wed Jun 02 2021 Christophe Giboudeaux <christophe@krop.fr>
  - Install epl-v10.txt instead of COPYING.
    The COPYING file is a symlink to epl-v10.txt.
* Fri May 14 2021 Ferdinand Thiessen <rpm@fthiessen.de>
  - Update to version 2.47.1
    * More detailed error messages when opening input file fails
    * The edges in JSON output are ordered now
    * Fixed xdot man page does not document some functions
    * Fixed PIC renderer
    * Fixed dot conversion to dia format
    * Fixed memory leak of reference-counted HTML strings
    * Fix for TBbalance attribute code
    * Fixed HTML parser error with single closing square bracket in
      table row
    * Fixed reference counted strings put the HTML bit in the middle
      of the reference count
    * Fixed &amp; escape disappearing
    * Fixed gvpr -? to actually print usage and exit non-zero
    * Fixed memory leak in libmingle
    * Fixed memory leak in ANN bridge
    * Fixed buffer overflow in unflatten
    * Fixed agxbputc macro does not bracket its arguments
  - Drop upstream fixed graphviz-2.46-fix-shebang.patch
    * Using POSIX shell, no need for ksh
* Wed Apr 14 2021 Andreas Schwab <schwab@suse.de>
  - Remove obsolete pre_checkin.sh
* Thu Apr 08 2021 Christian Vögl <christian.voegl@suse.com>
  - Buildrequire full ghostscript in the addons package
    to avoid a conflict betwen ghostcript-mini and ghostscript-devel
* Tue Mar 16 2021 Christian Vögl <christian.voegl@suse.com>
  - Replace ghostscript-mini dependency with ghostscript_any
* Mon Mar 01 2021 Christian Vögl <christian.voegl@suse.com>
  - Add graphviz-webp package to for webp image support
* Tue Feb 23 2021 Christian Vögl <christian.voegl@suse.com>
  - Reenable ghostscript, but require just ghostscript-mini
* Thu Feb 18 2021 Christian Vögl <christian.voegl@suse.com>
  - Update to new release 2.46.1 (changes since 2.44.1)
    * Support for building against Guile 2.2
    * Portable source is now also offered as a .tar.xz
    * CentOS/RHEL 6 is no longer supported
    * Vestiges of Qt4 support have been removed
    * C++11 support is now required of the C++ compiler used to build Graphviz
    * C99 support is now required of the C compiler used to build Graphviz
    * Question about userout() function in agerror.c #1924
    * The minimum version of Python required to run the test suite is 3.6
    * memory leak in label construction
    * gvedit compilation errors out, but works if manually compiled with qt5 #1862
    * incorrect HTML BR attribute parsing code #1913
    * broken overflow checks in RectArea #1906
    * various memory leaks !1699
    * Fix bad free in lefty !1709
    * typo in pathcross #1926
    * Out-of-bounds write caused by incorrect error handling of malloc in genUserdata #1928
    * Offer .tar.xz files too #454
    * Header file graphviz_version.h has no include guards #1929
    * regression: newlines embedded in quoted labels / node names are not preserved in 2.46.0 #1931
    * Properly fill graphviz_version.h !1706
    * Cgraph's agxbuf API gained a new function agxbdisown(), for dissociating
    * backing memory from the managed buffer
    * Build system support for the Elbrus 2000 CPU, thanks to Michael Shigorin
    * Cgraph's agheap() API has been removed
    * Autotools build system support for eFence has been removed
    * Building Graphviz with ICC defaults to -O2 instead of -O0
    * Build system work arounds for GCC 3 have been removed
    * Incomplete support for running the test suite under CMake has been removed
    * Portable source tarballs now use the “ustar” POSIX format
    * Minimum version of Flex required to build Graphviz is now 2.5.2
    * Minimum version of Bison required to build Graphviz is now 3.0
    * Minimum version of CMake required to build Graphviz using CMake is now 3.1
    * gvpr: line numbers in gvpr errors/warnings are incorrect #1594
    * URL typo in patchwork man page
    * Escaped backslashes are not correctly handled when producing xdot with dot #165
    * heap-over-flow(off-by-null) in lib/common/shapes.c #1700
    * Windows MSBuild executables have the wrong version #1745
    * Cast Overflow at pango_textlayout #1314
    * x11 back end segfaults if display is unavailable #1776
    * typo in cmd/gvpr/lib/clustg #1781
    * Segfault in dot #1783
    * Incorrect 'Arrow type "s" unknown' error #1444
    * segfault on reading 0x10 #1724
    * Null-dereference READ (144736912) #1676
    * "Warning! PATH too long installer unable to modify PATH!" using CMake Windows installer and PATH length > 1024 #1770
    * gvedit -? gives "option - unrecognized - ignored" instead of showing usage #1813
    * lefty is not built for Windows (fixed for MSBuild builds only) #1818
    * a failure to detect OpenGL glGenTextures() errors has been corrected
    * sfio does compile time benchmarknig #1422
    * iffe "lib" check always succeeds when compiler optimises #1521
    * syntax error near text who is not present #1411
    * Explicitly links with libstdc++; should allow libc++ if appropriate #163
    * A macOS file that was erroneously excluded from portable source tarballs has
    * been restored
    * Add option -? for usage to diffimg
    * Add option -? for usage to dotty
    * Add option -? for usage to lneato
    * Add option -? for usage to vimdot
    * Fix smyrna -? to actually print usage instead of error
    * Fix edgepaint -? to actually print usage instead of error
    * Remove '"' from usage text in non-Windows version of dotty
    * Correct misspelled 'smyrna' in usage
    * Fix edgepaint -o option
    * Correct shebang of gvmap.sh to use ksh
    * Fix gvmap.sh -? option to exit with zero exit status
    * Graphviz doesn't build on MacOS with the latest libc++ #1785
    * make fails if ps2pdf is not installed (using autotools) #1763
    * multiple graphs to file output causes a segfault #1845
    * lefty PTY functionality relies on file descriptor implementation details #1823
    * buffer overflow in fdpgen
    * Crashes by VRML output when current directory is not writable #793
    * Segmentation fault when newrank=true #1221
    * sfdp craches #236
    * fdp segmentation fault with GK=0 #1290
    * fdp crash #1865
    * Graphviz always crash with this simple dot file #167
    * Seg fault in dot #1771
    * gml2gv doesn't handle some attributes correctly #1869
    * Add missing circo, fdp, neato, osage, patchwork, sfdp & twopi tools to Windows builds (copies of dot)
    * Add gv2gml tool to CMake (copy of gml2gv on Windows, symlink to gml2gv otherwise)
    * Regression: fdp generates internal names in the output #1876
    * Regression: fdp assertion error on cluster in edge #1877
    * Regression in id / &lt;title&gt; in svg for twopi #1907
  - graphviz-2.46-fix-shebang.patch added to make rpmlint happy
  - graphviz-no_strict_aliasing.patch changed to be applicable to current files
  - configure without ghostscript to break new build cycle
  - Update source URLs

Files

/usr/lib64/libcgraph.so.6
/usr/lib64/libcgraph.so.6.0.0


Generated by rpm2html 1.8.1

Fabrice Bellet, Sat Mar 30 23:52:28 2024