Changelog for
file-devel-5.15-lp151.4.32.1.x86_64.rpm :
* Wed Dec 17 2014 wernerAATTsuse.de- Port and add upstream patches 0001-limit-the-number-of-program-and-section-header-numbe.patch 0002-Stop-reporting-bad-capabilities-after-the-first-few.patch 0003-reduce-recursion-level-from-20-to-10-and-make-a-symb.patch 0004-adjust-limits-better-from-NetBSD.patch 0005-bump-recursion-to-15-and-allow-it-to-be-set-from-the.patch 0006-Don-t-bail-if-there-was-no-error-buf-could-have-been.patch to fix CVE-2014-8116 and CVE-2014-8117 (bsc#910252 and bsc#910253)
* Thu Oct 23 2014 wernerAATTsuse.de- Add patch file-5.20-CVE-2014-3710.patch to fic bsc#902367 CVE-2014-3710: file: out-of-bounds read in elf note headers
* Mon Mar 17 2014 wernerAATTsuse.de- Add patch 0001-off-by-one-in-out-of-bounds-calculations-Jan-Kaluza.patch to finally fix bnc#866750
* Tue Mar 04 2014 wernerAATTsuse.de- Add the upstream patch 0001-PR-313-Aaron-Reffett-Check-properly-for-exceeding-th.patch to solve bnc#866750 - file: crash when parsing some PE executables- Modify the upstream patch 0001-prevent-infinite-recursion.patch to fit with former applied patch
* Tue Mar 04 2014 wernerAATTsuse.de- Add the upstream patches 0001-count-indirect-recursion-as-recursion.patch 0001-prevent-infinite-recursion.patch to solve bnc#864589 - CVE-2014-1943: file: infinite recursion
* Tue Nov 19 2013 wernerAATTsuse.de- Submit it to openSUSE:13.1 to solve bnc#847062
* Mon Nov 04 2013 jengelhAATTinai.de- Set RPM groups
* Tue Oct 01 2013 wernerAATTsuse.de- Add changes of Andreas Stieger
* Mon Sep 30 2013 wernerAATTsuse.de- Update to file version 5.15 (bug fix release, no new featuress)
* Don\'t mix errors and regular output if there was an error
* in magic_descriptor() don\'t close the file and try to restore its position
* Don\'t treat magic as an error if offset was past EOF (Christoph Biedl)
* Fix spacing issues in softmagic and elf (Jan Kaluza)
* Fix segmentation fault with multiple magic_load commands.
* The way \"default\" was implemented was not very useful because the \"if something was printed at that level\" was not easily controlled by the user, and the format was bound to a string which is too restrictive. Add a \"clear\" for that level keyword and make \"default\" void.
* disallow strength setting in \"name\" entries- Adjust for upstream changes:
* file-5.14-tex.dif
* file-5.07-elf.dif
* file-5.12-ocloexec.patch
* file-5.12-nitpick.dif
* file-5.13.dif- Drop patches, applied upstream:
* file-5.13-whitespace.patch
* elf-invalid-byte-order.patch
* Sun Sep 29 2013 andreas.stiegerAATTgmx.de- add file-5.15-clear-invalid.patch to fix an invalid format