Changelog for graphviz-php-2.49.3-9.4.x86_64.rpm :

* Thu Mar 07 2024 Thomas Renninger - VUL-0: CVE-2023-46045: graphviz: out-of-bounds read via a crafted config6a file bsc#1219491 A gvc-detect-plugin-installation-failure-and-display-an-error.patch- Some alphabetical re-ordering and other spec file changes which should not have any functional change which came from some kind of auto-spec cleaner
* Thu Feb 22 2024 Michael Vetter - Use %patch -P N instead of deprecated %patchN.- Update graphviz-rpmlintrc
* Tue Nov 28 2023 Bernhard Wiedemann - Require bitstream-vera-fonts for correct .png rendering by doxygen+dot
* Wed Mar 01 2023 Stefan Brüns - Fix RPM conditionals for PHP, elif does not work on Leap 15.x- Remove unused ghostscript_any BuildRequires for qt5 and main flavors
* Mon Nov 14 2022 pgajdosAATTsuse.com- php8 support was added in swig 4.1.0
* Wed Oct 19 2022 Klaus Kämpf - add swig-4.1.0.patch to work around graphviz\'s incompatibility with swig-4.1.0.
* Fri Aug 12 2022 Stephan Kulow - Split the Qt5 dependencies from addons flavor - it\'s just gvedit
* Mon Jan 10 2022 Stefan Brüns - Remove pointless libgraphviz6 subpackage only containing broken and unnecessary ld.so.conf.d dropin.- Add required Provides and Obsoletes for library package split.- Remove unversioned symlinks for plugins, breaking shared library policy.- Remove duplicate python3 bindings in wrong directory (again).- Add missing post scriptlet for webp plugin.- Fix postun scriptlets for all plugins (be silent when graphviz gets removed completely, report errors otherwise).- Cleanup spec file.- Disable Java bindings, as unused/untested, and packaging is quite broken.
* Wed Nov 24 2021 Dirk Müller - update to 2.49.3: - gvpr \"split\", \"tokens\", and \"index\" functions produce incorrect results This was a regression that occurred between 2.47.1 and 2.47.2. - Lefty is disabled by default in the Autotools build system. To re-enable it, pass `--enable-lefty` to `./configure`. In a future release, Lefty will be removed. - remove PHP5 support in SWIG bindings - Msys experimental packages are included in release artifacts - CMake build system incorrectly aliases gv2gml to gml2gv - Gv2gml Doesn\'t escape quotes in attributes - GVPR incorrectly understands color schemes- reenable lefty to fix addons build
* Wed Oct 27 2021 Christian Vögl - Split libgraphviz into tlibcdt, libcgraph, libgvc, libgvpr, libpathplan, libxdot, and liblab_gamut packages, in order to fix shlib naming policy errors (boo#1191756)
* Sat Oct 16 2021 Dirk Müller - update to 2.49.1: - the CMake build system installs gzipped man pages if `gzip` is available #1883 - CMake projects using Graphviz as a subproject (`add_subdirectory`) can now link against and use `gvc`. - various problems in the generation of Javascript bindings - 2.48.0: test suite is failing #2112 - Ensure correct file-level dependency for generated file in cmake generated projects #2119 - compile failures with a C++20-compatible toolchain #2122 - compile errors on macOS when using Bison 3.8 #2127 - Make Graphviz buildable as a cmake subproject/subdirectory #1477 - Header not found in Cmake project #2109 - a very basic C++ API for a subset of the functions in lib/cgraph and lib/gvc, allowing a graph to be rendered from DOT source to a specified format. The new API is available through two new libraries: lib/cgraph++ and lib/gvc++. It is experimental, meaning that it might have breaking changes also in upcoming patch or minor releases (towards #2001) - CMake builds now support an `with_expat` option that allows the support for using HTML-like labels through the optional expat library to be explicitly enabled (default) or disabled - CMake builds now support an with_zlib option that allows the support for raster image compression through the optional zlib library to be explicitly enabled (default) or disabled - the CMake build system now enables `-Wextra` when building C++ - some Cgraph functions that take `char
*` arguments that they do not modify have been updated to take `const char
*` arguments #634 - incorrectly using the `layout` attribute on anything other than a graph now results in a warning about this being invalid #2078 - `edgepaint` accepts more standard `--` prefixed command line arguments and rejects invalid options #1971 - improved detection of Lefty dependencies in the Autotools build system - libexpr rejects printing the time (`%t`) if no format is provided - `-DDATE=…` option in the CMake build system has been removed - the Autotools build system no longer writes the DATE file and the portable source tarball no longer includes this - The attached dot file causes a segfault when processed #2095 - fix typos and update URLs in `edgepaint` usage text and man page - Fix clang\'s undefined behavior warning in dotLayout - gvpr doesn\'t build on macOS but MKDEFS_EXECUTABLE points to wrong directory #2101 - the generated gdefs.h header is no longer installed - `ccomps` out-of-memory message no longer incorrectly refers to `gc` - do not abort when `calloc(0, x)` or `calloc(x, 0)` in `gcalloc` return `NULL` - failed Exshort_t type discrimination #1799 - dot manpage is in wrong directory on Windows #1936 - CMake builds fail when when the ltdl library is not available even if the `enable_ltdl` option is `ON` - CMake builds fail when when the optional `zlib` library is not available - fix graph rotation in quartz plugin
* Mon Sep 06 2021 Christian Voegl - Changelog Update for SLES: The following patch has been backported to SLES and is therefore missing from the Factory changelog:
* graphviz-malformed_input.patch (boo#1132091)
* Mon Aug 30 2021 Christian Vögl - Changelog Update for SLES: The Following patches have been backported to SLES and are therefore missing from the Factory changelog:
* graphviz-2.40.1-fix-dot-segfault.patch (bsc#1151207)
* graphviz-out-of-bounds-write.patch (bsc#1185833)
* graphviz-null_dereference.patch (bsc#1185833)
* Wed Aug 11 2021 Christian Vögl - Dropped python2 subpackages as the bindings are removed in 2.48- Update to version 2.48.0 (changes since 2.47.1)
* marginally more accurate computations in Smyrna sphere projection
* Perl is no longer required to build Graphviz #2067
* nop more reliably returns success and failure exit statuses
* implicit 63 character limit on plugin names is removed in GVC
* remove Python 2 bindings #1992
* improved thread-safety in Graphviz bindings Makefile
* the CMake build system now enables -Wextra when building C++
* some Cgraph functions that take char
* arguments that they do not modify have been updated to take const char
* arguments #634
* incorrectly using the layout attribute on anything other than a graph now results in a warning about this being invalid #2078
* edgepaint accepts more standard -- prefixed command line arguments and rejects invalid options #1971
* improved detection of Lefty dependencies in the Autotools build system
* Fix: out of bounds read when attempting to load a plugin whose name is ≥63 characters
* Fix: out of bounds read when examining a registered plugin whose name is ≥63 characters
* Fix: do not fclose(NULL) in gvmap
* Fix: Uninitialized variable read in delaunay_tri potentially mismatched format string in tclpkg
* Fix: ortho\'s eqEndSeg incorrectly modifies its arguments #2047
* Fix: Autotools enables -Wtrampolines and -Wlogical-op for Clang #2066
* Fix: node_distinct_coloring failure due to out-of-memory now reported correctly instead of referring to a failure to open lab_gamut
* Fix: a typo GD_LIBS to GDLIB_LIBS in tclpkg/tcldot/Makefile.am !2022
* Fix: Autotools build system sets libgd variables now instead of incorrectly setting GTK variables
* Fix: HTML strings used as labels are distinguishable in GXL output by kind=\"HTML-like string\"
* Fix: a Bashism removed from the Autotools build system
* Fix: when Criterion is available, the command_line test binary is no longer built and installed by default, but rather during make check
* Fix: round-tripping a file through gv2gxl and then gxl2gv no longer causes HTML-like labels to become non-HTML like labels #517
* Fix: fix ODR violation by including the ortho object files in the gvc lib also for CMake and MSbuild #2096
* Mon Jun 28 2021 Steve Kowalik - Update graphviz-2.20.2-interpreter_names.patch so the Python demo uses Python 3.
* Wed Jun 02 2021 Christophe Giboudeaux - Install epl-v10.txt instead of COPYING. The COPYING file is a symlink to epl-v10.txt.
* Fri May 14 2021 Ferdinand Thiessen - Update to version 2.47.1
* More detailed error messages when opening input file fails
* The edges in JSON output are ordered now
* Fixed xdot man page does not document some functions
* Fixed PIC renderer
* Fixed dot conversion to dia format
* Fixed memory leak of reference-counted HTML strings
* Fix for TBbalance attribute code
* Fixed HTML parser error with single closing square bracket in table row
* Fixed reference counted strings put the HTML bit in the middle of the reference count
* Fixed & escape disappearing
* Fixed gvpr -? to actually print usage and exit non-zero
* Fixed memory leak in libmingle
* Fixed memory leak in ANN bridge
* Fixed buffer overflow in unflatten
* Fixed agxbputc macro does not bracket its arguments- Drop upstream fixed graphviz-2.46-fix-shebang.patch
* Using POSIX shell, no need for ksh
* Wed Apr 14 2021 Andreas Schwab - Remove obsolete pre_checkin.sh
* Thu Apr 08 2021 Christian Vögl - Buildrequire full ghostscript in the addons package to avoid a conflict betwen ghostcript-mini and ghostscript-devel
* Tue Mar 16 2021 Christian Vögl - Replace ghostscript-mini dependency with ghostscript_any
* Mon Mar 01 2021 Christian Vögl - Add graphviz-webp package to for webp image support
* Tue Feb 23 2021 Christian Vögl - Reenable ghostscript, but require just ghostscript-mini
* Thu Feb 18 2021 Christian Vögl - Update to new release 2.46.1 (changes since 2.44.1)
* Support for building against Guile 2.2
* Portable source is now also offered as a .tar.xz
* CentOS/RHEL 6 is no longer supported
* Vestiges of Qt4 support have been removed
* C++11 support is now required of the C++ compiler used to build Graphviz
* C99 support is now required of the C compiler used to build Graphviz
* Question about userout() function in agerror.c #1924
* The minimum version of Python required to run the test suite is 3.6
* memory leak in label construction
* gvedit compilation errors out, but works if manually compiled with qt5 #1862
* incorrect HTML BR attribute parsing code #1913
* broken overflow checks in RectArea #1906
* various memory leaks !1699
* Fix bad free in lefty !1709
* typo in pathcross #1926
* Out-of-bounds write caused by incorrect error handling of malloc in genUserdata #1928
* Offer .tar.xz files too #454
* Header file graphviz_version.h has no include guards #1929
* regression: newlines embedded in quoted labels / node names are not preserved in 2.46.0 #1931
* Properly fill graphviz_version.h !1706
* Cgraph\'s agxbuf API gained a new function agxbdisown(), for dissociating
* backing memory from the managed buffer
* Build system support for the Elbrus 2000 CPU, thanks to Michael Shigorin
* Cgraph\'s agheap() API has been removed
* Autotools build system support for eFence has been removed
* Building Graphviz with ICC defaults to -O2 instead of -O0
* Build system work arounds for GCC 3 have been removed
* Incomplete support for running the test suite under CMake has been removed
* Portable source tarballs now use the “ustar” POSIX format
* Minimum version of Flex required to build Graphviz is now 2.5.2
* Minimum version of Bison required to build Graphviz is now 3.0
* Minimum version of CMake required to build Graphviz using CMake is now 3.1
* gvpr: line numbers in gvpr errors/warnings are incorrect #1594
* URL typo in patchwork man page
* Escaped backslashes are not correctly handled when producing xdot with dot #165
* heap-over-flow(off-by-null) in lib/common/shapes.c #1700
* Windows MSBuild executables have the wrong version #1745
* Cast Overflow at pango_textlayout #1314
* x11 back end segfaults if display is unavailable #1776
* typo in cmd/gvpr/lib/clustg #1781
* Segfault in dot #1783
* Incorrect \'Arrow type \"s\" unknown\' error #1444
* segfault on reading 0x10 #1724
* Null-dereference READ (144736912) #1676
* \"Warning! PATH too long installer unable to modify PATH!\" using CMake Windows installer and PATH length > 1024 #1770
* gvedit -? gives \"option - unrecognized - ignored\" instead of showing usage #1813
* lefty is not built for Windows (fixed for MSBuild builds only) #1818
* a failure to detect OpenGL glGenTextures() errors has been corrected
* sfio does compile time benchmarknig #1422
* iffe \"lib\" check always succeeds when compiler optimises #1521
* syntax error near text who is not present #1411
* Explicitly links with libstdc++; should allow libc++ if appropriate #163
* A macOS file that was erroneously excluded from portable source tarballs has
* been restored
* Add option -? for usage to diffimg
* Add option -? for usage to dotty
* Add option -? for usage to lneato
* Add option -? for usage to vimdot
* Fix smyrna -? to actually print usage instead of error
* Fix edgepaint -? to actually print usage instead of error
* Remove \'\"\' from usage text in non-Windows version of dotty
* Correct misspelled \'smyrna\' in usage
* Fix edgepaint -o option
* Correct shebang of gvmap.sh to use ksh
* Fix gvmap.sh -? option to exit with zero exit status
* Graphviz doesn\'t build on MacOS with the latest libc++ #1785
* make fails if ps2pdf is not installed (using autotools) #1763
* multiple graphs to file output causes a segfault #1845
* lefty PTY functionality relies on file descriptor implementation details #1823
* buffer overflow in fdpgen
* Crashes by VRML output when current directory is not writable #793
* Segmentation fault when newrank=true #1221
* sfdp craches #236
* fdp segmentation fault with GK=0 #1290
* fdp crash #1865
* Graphviz always crash with this simple dot file #167
* Seg fault in dot #1771
* gml2gv doesn\'t handle some attributes correctly #1869
* Add missing circo, fdp, neato, osage, patchwork, sfdp & twopi tools to Windows builds (copies of dot)
* Add gv2gml tool to CMake (copy of gml2gv on Windows, symlink to gml2gv otherwise)
* Regression: fdp generates internal names in the output #1876
* Regression: fdp assertion error on cluster in edge #1877
* Regression in id / <title> in svg for twopi #1907- graphviz-2.46-fix-shebang.patch added to make rpmlint happy- graphviz-no_strict_aliasing.patch changed to be applicable to current files- configure without ghostscript to break new build cycle- Update source URLs