chmlib-0.40-bp160.1.8

- drop chmlib-0.39.diff - superseded by
  chmlib-0001-Patch-to-fix-integer-types-problem-by-Goswin-von-Bre.patch
- add
  chmlib-0001-Patch-to-fix-integer-types-problem-by-Goswin-von-Bre.patch,
  chmlib-0002-Fix-for-extract_chmLib-confusing-empty-files-with-di.patch,
  chm_http-port-shortopt.patch, chm_http-bind-localhost.patch,
  chm_http-output-server-address.patch, chmlib-c99.patch: restrict
  access to localhost to somewhat reduce reach

- security update
- modified patches
  % chmlib-0.39.diff (-p1)
- added patches
  CVE-2025-48172 [bsc#1245803], integer overflow in _chm_decompress_block of chm_lib.c can lead to heap buffer overflow
  + chmlib-CVE-2025-48172.patch

- Upgrade old specfile constructs.
- Remove --with-pic (no effect with --disable-static).

- Use url for source
- Cleanup spec file with spec-cleaner

- patch license to follow spdx.org standard

- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Implement shlib policy

- build examples to an -examples sub-package (bnc#488307)

- Update to version 0.40:
  + minor bugfix release
  + fix a few bugs related to the example programs, including
    stability issues related to chm_http.
  + remove the bashisms from mozilla_helper.sh.

- remove static libraries and "la" files

- fix -devel requir'ing release number

- update to version 0.39:
  * all of the dynamically-sized buffers which were allocated on
    the stack before have been changed to heap allocations. This
    circumvents some dangerous security flaws. (#239747)

- update to version 0.38:
  * fix extract_chmLib directory traversal problem (#197808)
  * bugfix to allow successful reading of more chm files

- Port to all future systems.

- Initial package of version 0.37.4