* Mon Oct 25 2021 eich@suse.com
- Fix:
* CVE-2019-20007 https://sourceforge.net/p/ezxml/bugs/13
* CVE-2019-20006 https://sourceforge.net/p/ezxml/bugs/15
* CVE-2019-20201 https://sourceforge.net/p/ezxml/bugs/16
* CVE-2019-20202 https://sourceforge.net/p/ezxml/bugs/17
* CVE-2019-20199 https://sourceforge.net/p/ezxml/bugs/18
* CVE-2019-20200 https://sourceforge.net/p/ezxml/bugs/19
* CVE-2019-20198 https://sourceforge.net/p/ezxml/bugs/20
* CVE-2021-26221 https://sourceforge.net/p/ezxml/bugs/21
* CVE-2021-26222 https://sourceforge.net/p/ezxml/bugs/22
* CVE-2021-30485 https://sourceforge.net/p/ezxml/bugs/25
* CVE-2021-31229 https://sourceforge.net/p/ezxml/bugs/26
* CVE-2021-31347 &
* CVE-2021-31348 https://sourceforge.net/p/ezxml/bugs/27
* CVE-2021-31598 https://sourceforge.net/p/ezxml/bugs/28
(bsc#1191856)
Note:
* CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23
not relevant for netcdf: code isn't used.
* CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14
Issue cannot be reproduced and no patch is available upstream.
Added:
* Fix-CVE-2021-30485-bug-25.patch
* Fix-CVE-2021-31229-bug-26-CVE-2019-20201-bug-16-CVE-2019-20198-bug-20.patch
* Fix-CVE-2021-31347-bug-27.patch
* Fix-for-CVE-2019-20006-CVE-2019-20202-CVE-2021-31598-ezxml-bug-15-17-28.patch
* Fix-for-CVE-2019-20007-ezxml-bug-13.patch
* Fix-for-CVE-2019-20199-ezxml-bug-18.patch
* Fix-for-CVE-2019-20200-ezxml-bug-19.patch
* Fix-for-CVE-2021-26221-ezxml-bug-21.patch
* Fix-for-CVE-2021-26222-ezxml-bug-22.patch
* Fri Jan 29 2021 eich@suse.com
- Define-byteswap-functions-before-use.patch:
Define byteswap() functions before use (bsc#1181523).
* Wed Dec 09 2020 eich@suse.com
- Change 'Requires:' to hdf5 to %requires_eq to match the exact
version of hdf5 in the dependency. This should take care of
HPC packages ignoring proper ABI versioning (boo#1179521).
* Fri Nov 06 2020 aguerrero@suse.com
- Update to version 4.7.4.
* Support has been added for HDF5-1.12.0.
* Support has been added for multiple filters per variable.
* Now nc_inq_var_szip retuns 0 for parameter values if szip is not in
use for var.
* Now allow parallel I/O with filters, for HDF5-1.10.3 and later.
* Increased default size of cache buffer to 16 MB, from 4 MB. Increased
number of slots to 4133.
* Allow zlib compression to be used with parallel I/O writes, if HDF5
version is 1.10.3 or greater.
* Restore use of szip compression when writing data (including writing
in parallel if HDF5 version is 1.10.3 or greater).
* Enable use of compact storage option for small vars in netCDF/HDF5 files.
* Updated benchmarking program bm_file.c to better handle very large files.
* Added version number to dispatch table, and now check version with
nc_def_user_format().
* Increased size of maximum allowed name in HDF4 files to NC_MAX_NAME.
* Bug Fixes:
- Correct behavior for the command line utilities when
directly accessing a directory using utf8 characters.
- Attempts to set filters or chunked storage on scalar vars will now
return NC_EINVAL. Scalar vars cannot be chunked, and only chunked
vars can have filters. Previously the library ignored these attempts,
and always storing scalars as contiguous storage.
- Fixed problem of growing memory when netCDF-4 files were
opened and closed.
Further details can be found at:
https://github.com/Unidata/netcdf-c/releases/tag/v4.7.4
- Bump soname from 15 to 18.
- Add Fix-logging-argument.patch:
Fix argument to logging function.
- get_filter_info-get-correct-number-of-filter-elements.patch
Fix intermittend issue found by unit tests.
* Mon Aug 17 2020 normand@linux.vnet.ibm.com
- Ignore make check error for ppc64 & s390x
(both failed on tst_filter.sh) tracked upstream
via email subject [netCDF #XWG-388823]
* Thu Jul 23 2020 eich@suse.com
- Add build support for gcc10 to HPC build (bsc#1174439).
- Remove unused build option.
* Mon Jul 20 2020 eich@suse.com
- Add support for OpenMPI 4 (disabled on < 15.3)
* Mon Jul 20 2020 eich@suse.com
- Remove requirements for parallel-netcdf from non-HPC builds:
without the '--enable-pnetcdf' configure option, this doesn't
make sense.
* Mon Jul 20 2020 eich@suse.com
- Remove build restrictions for SLE builds: build all flavors for
SLE.
- Fix ldconfig args for HPC packages: no caching should be done
as these libs are made available thru LD_LIBRARY_PATH tweaking.
- Adhere to common conventions regarding NetCDF and PnetCDF:
NetCDF modules should be called 'netcdf' - regardless whether
they are 'serial' or use MPI (boo#1174291).
* Sat Mar 28 2020 eich@suse.com
- Build macro package netcdf-devel-data only for non-HPC builds
(boo#1167947).