summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorCoprDistGit <infra@openeuler.org>2024-08-06 02:46:37 +0000
committerCoprDistGit <infra@openeuler.org>2024-08-06 02:46:37 +0000
commit3d27784b65faa0cc6cb1e7b740444d5a040c46c3 (patch)
tree92187acfe4879398e1380011f0f31a018f5b752f
parenta329f3086095d92a2542328492ebd33dcaff93ca (diff)
automatic import of librsvg2openeuler24.03_LTS
-rw-r--r--.gitignore1
-rw-r--r--librsvg2-CVE-2023-38633.patch414
-rw-r--r--librsvg2.spec1033
-rw-r--r--sources1
4 files changed, 1449 insertions, 0 deletions
diff --git a/.gitignore b/.gitignore
index e69de29..64b0502 100644
--- a/.gitignore
+++ b/.gitignore
@@ -0,0 +1 @@
+/librsvg-2.50.7.tar.xz
diff --git a/librsvg2-CVE-2023-38633.patch b/librsvg2-CVE-2023-38633.patch
new file mode 100644
index 0000000..07ffbe6
--- /dev/null
+++ b/librsvg2-CVE-2023-38633.patch
@@ -0,0 +1,414 @@
+From d1f066bf2198bd46c5ba80cb5123b768ec16e37d Mon Sep 17 00:00:00 2001
+From: Federico Mena Quintero <federico@gnome.org>
+Date: Thu, 20 Jul 2023 11:12:53 -0600
+Subject: [PATCH] (#996): Fix arbitrary file read when href has special
+ characters
+
+In UrlResolver::resolve_href() we now explicitly disallow URLs that
+have a query string ("?") or a fragment identifier ("#").
+
+We also explicitly check for a base URL and not resolving to a path,
+for example, "file:///base/foo.svg" + "." would resolve to
+"file:///base/" - this is technically correct, but we don't want to
+resolve to directories.
+
+Also, we pass a canonicalized path name as a URL upstream, so that
+g_file_new_from_url() will consume it later, instead of passing the
+original and potentially malicious URL.
+
+Fixes https://gitlab.gnome.org/GNOME/librsvg/-/issues/996
+---
+ librsvg/rsvg-handle.c | 6 +-
+ rsvg_internals/src/allowed_url.rs | 229 +++++++++++++-----
+ .../src/filters/component_transfer.rs | 2 +-
+ tests/Makefile.am | 1 +
+ tests/fixtures/loading/bar.svg | 1 +
+ tests/fixtures/loading/foo.svg | 1 +
+ tests/fixtures/loading/subdir/baz.svg | 1 +
+ 7 files changed, 180 insertions(+), 61 deletions(-)
+ create mode 100644 tests/fixtures/loading/bar.svg
+ create mode 100644 tests/fixtures/loading/foo.svg
+ create mode 100644 tests/fixtures/loading/subdir/baz.svg
+
+diff --git a/librsvg/rsvg-handle.c b/librsvg/rsvg-handle.c
+index 95364db34..f49e4d30e 100644
+--- a/librsvg/rsvg-handle.c
++++ b/librsvg/rsvg-handle.c
+@@ -78,7 +78,11 @@
+ * </listitem>
+ *
+ * <listitem>
+- * All other URL schemes in references require a base URL. For
++ * URLs with queries ("?") or fragment identifiers ("#") are not allowed.
++ * </listitem>
++ *
++ * <listitem>
++ * All other URL schemes other than data: in references require a base URL. For
+ * example, this means that if you load an SVG with
+ * rsvg_handle_new_from_data() without calling rsvg_handle_set_base_uri(),
+ * then any referenced files will not be allowed (e.g. raster images to be
+diff --git a/rsvg_internals/src/allowed_url.rs b/rsvg_internals/src/allowed_url.rs
+index 3a99e00b8..ffa9a2315 100644
+--- a/rsvg_internals/src/allowed_url.rs
++++ b/rsvg_internals/src/allowed_url.rs
+@@ -2,9 +2,7 @@
+
+ use std::error;
+ use std::fmt;
+-use std::io;
+ use std::ops::Deref;
+-use std::path::{Path, PathBuf};
+ use url::Url;
+
+ use crate::error::HrefError;
+@@ -37,6 +35,12 @@ pub enum AllowedUrlError {
+ /// or in one directory below the base file.
+ NotSiblingOrChildOfBaseFile,
+
++ /// Loaded file:// URLs cannot have a query part, e.g. `file:///foo?blah`
++ NoQueriesAllowed,
++
++ /// URLs may not have fragment identifiers at this stage
++ NoFragmentIdentifierAllowed,
++
+ /// Error when obtaining the file path or the base file path
+ InvalidPath,
+
+@@ -59,6 +63,17 @@ impl AllowedUrl {
+ return Ok(AllowedUrl(url));
+ }
+
++ // Queries are not allowed.
++ if url.query().is_some() {
++ return Err(AllowedUrlError::NoQueriesAllowed);
++ }
++
++ // Fragment identifiers are not allowed. They should have been stripped
++ // upstream, by NodeId.
++ if url.fragment().is_some() {
++ return Err(AllowedUrlError::NoFragmentIdentifierAllowed);
++ }
++
+ // All other sources require a base url
+ if base_url.is_none() {
+ return Err(AllowedUrlError::BaseRequired);
+@@ -81,6 +96,26 @@ impl AllowedUrl {
+ return Err(AllowedUrlError::DisallowedScheme);
+ }
+
++ // The rest of this function assumes file: URLs; guard against
++ // incorrect refactoring.
++ assert!(url.scheme() == "file");
++
++ // If we have a base_uri of "file:///foo/bar.svg", and resolve an href of ".",
++ // Url.parse() will give us "file:///foo/". We don't want that, so check
++ // if the last path segment is empty - it will not be empty for a normal file.
++
++ if let Some(segments) = url.path_segments() {
++ if segments
++ .last()
++ .expect("URL path segments always contain at last 1 element")
++ .is_empty()
++ {
++ return Err(AllowedUrlError::NotSiblingOrChildOfBaseFile);
++ }
++ } else {
++ unreachable!("the file: URL cannot have an empty path");
++ }
++
+ // We have two file: URIs. Now canonicalize them (remove .. and symlinks, etc.)
+ // and see if the directories match
+
+@@ -98,13 +133,17 @@ impl AllowedUrl {
+
+ let base_parent = base_parent.unwrap();
+
+- let url_canon =
+- canonicalize(&url_path).map_err(|_| AllowedUrlError::CanonicalizationError)?;
+- let parent_canon =
+- canonicalize(&base_parent).map_err(|_| AllowedUrlError::CanonicalizationError)?;
+-
+- if url_canon.starts_with(parent_canon) {
+- Ok(AllowedUrl(url))
++ let path_canon = url_path
++ .canonicalize()
++ .map_err(|_| AllowedUrlError::CanonicalizationError)?;
++ let parent_canon = base_parent
++ .canonicalize()
++ .map_err(|_| AllowedUrlError::CanonicalizationError)?;
++
++ if path_canon.starts_with(parent_canon) {
++ // Finally, convert the canonicalized path back to a URL.
++ let path_to_url = Url::from_file_path(path_canon).unwrap();
++ Ok(AllowedUrl(path_to_url))
+ } else {
+ Err(AllowedUrlError::NotSiblingOrChildOfBaseFile)
+ }
+@@ -129,32 +168,22 @@ impl error::Error for AllowedUrlError {}
+
+ impl fmt::Display for AllowedUrlError {
+ fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+- match *self {
+- AllowedUrlError::HrefParseError(e) => write!(f, "href parse error: {}", e),
+- AllowedUrlError::BaseRequired => write!(f, "base required"),
+- AllowedUrlError::DifferentURISchemes => write!(f, "different URI schemes"),
+- AllowedUrlError::DisallowedScheme => write!(f, "disallowed scheme"),
+- AllowedUrlError::NotSiblingOrChildOfBaseFile => {
+- write!(f, "not sibling or child of base file")
+- }
+- AllowedUrlError::InvalidPath => write!(f, "invalid path"),
+- AllowedUrlError::BaseIsRoot => write!(f, "base is root"),
+- AllowedUrlError::CanonicalizationError => write!(f, "canonicalization error"),
++ use AllowedUrlError::*;
++ match self {
++ HrefParseError(e) => write!(f, "URL parse error: {e}"),
++ BaseRequired => write!(f, "base required"),
++ DifferentUriSchemes => write!(f, "different URI schemes"),
++ DisallowedScheme => write!(f, "disallowed scheme"),
++ NotSiblingOrChildOfBaseFile => write!(f, "not sibling or child of base file"),
++ NoQueriesAllowed => write!(f, "no queries allowed"),
++ NoFragmentIdentifierAllowed => write!(f, "no fragment identifier allowed"),
++ InvalidPath => write!(f, "invalid path"),
++ BaseIsRoot => write!(f, "base is root"),
++ CanonicalizationError => write!(f, "canonicalization error"),
+ }
+ }
+ }
+
+-// For tests, we don't want to touch the filesystem. In that case,
+-// assume that we are being passed canonical file names.
+-#[cfg(not(test))]
+-fn canonicalize<P: AsRef<Path>>(path: P) -> Result<PathBuf, io::Error> {
+- path.as_ref().canonicalize()
+-}
+-#[cfg(test)]
+-fn canonicalize<P: AsRef<Path>>(path: P) -> Result<PathBuf, io::Error> {
+- Ok(path.as_ref().to_path_buf())
+-}
+-
+ /// Parsed result of an href from an SVG or CSS file
+ ///
+ /// Sometimes in SVG element references (e.g. the `href` in the `<feImage>` element) we
+@@ -234,6 +263,8 @@ impl Href {
+ mod tests {
+ use super::*;
+
++ use std::path::PathBuf;
++
+ #[test]
+ fn disallows_relative_file_with_no_base_file() {
+ assert_eq!(
+@@ -284,56 +315,136 @@ mod tests {
+ );
+ }
+
++ fn url_from_test_fixtures(filename_relative_to_librsvg_srcdir: &str) -> Url {
++ let path = PathBuf::from(filename_relative_to_librsvg_srcdir);
++ let absolute = path
++ .canonicalize()
++ .expect("files from test fixtures are supposed to canonicalize");
++ Url::from_file_path(absolute).unwrap()
++ }
++
+ #[test]
+ fn allows_relative() {
+- assert_eq!(
+- AllowedUrl::from_href(
+- "foo.svg",
+- Some(Url::parse("file:///example/bar.svg").unwrap()).as_ref()
+- )
+- .unwrap()
+- .as_ref(),
+- "file:///example/foo.svg",
+- );
++ let resolved = AllowedUrl::from_href(
++ "foo.svg",
++ Some(url_from_test_fixtures("../tests/fixtures/loading/bar.svg")).as_ref()
++ ).unwrap();
++
++ let resolved_str = resolved.as_str();
++ assert!(resolved_str.ends_with("/loading/foo.svg"));
+ }
+
+ #[test]
+ fn allows_sibling() {
+- assert_eq!(
+- AllowedUrl::from_href(
+- "file:///example/foo.svg",
+- Some(Url::parse("file:///example/bar.svg").unwrap()).as_ref()
+- )
+- .unwrap()
+- .as_ref(),
+- "file:///example/foo.svg",
+- );
++ let sibling = url_from_test_fixtures("../tests/fixtures/loading/foo.svg");
++ let resolved = AllowedUrl::from_href(
++ sibling.as_str(),
++ Some(url_from_test_fixtures("../tests/fixtures/loading/bar.svg")).as_ref()
++ ).unwrap();
++
++ let resolved_str = resolved.as_str();
++ assert!(resolved_str.ends_with("/loading/foo.svg"));
+ }
+
+ #[test]
+ fn allows_child_of_sibling() {
+- assert_eq!(
+- AllowedUrl::from_href(
+- "file:///example/subdir/foo.svg",
+- Some(Url::parse("file:///example/bar.svg").unwrap()).as_ref()
+- )
+- .unwrap()
+- .as_ref(),
+- "file:///example/subdir/foo.svg",
+- );
++ let child_of_sibling = url_from_test_fixtures("../tests/fixtures/loading/subdir/baz.svg");
++ let resolved = AllowedUrl::from_href(
++ child_of_sibling.as_str(),
++ Some(url_from_test_fixtures("../tests/fixtures/loading/bar.svg")).as_ref()
++ ).unwrap();
++
++ let resolved_str = resolved.as_str();
++ assert!(resolved_str.ends_with("/loading/subdir/baz.svg"));
+ }
+
++ // Ignore on Windows since we test for /etc/passwd
++ #[cfg(unix)]
+ #[test]
+ fn disallows_non_sibling() {
+ assert_eq!(
+ AllowedUrl::from_href(
+ "file:///etc/passwd",
+- Some(Url::parse("file:///example/bar.svg").unwrap()).as_ref()
++ Some(url_from_test_fixtures("../tests/fixtures/loading/bar.svg")).as_ref()
+ ),
+ Err(AllowedUrlError::NotSiblingOrChildOfBaseFile)
+ );
+ }
+
++ #[test]
++ fn disallows_queries() {
++ assert!(matches!(
++ AllowedUrl::from_href(
++ ".?../../../../../../../../../../etc/passwd",
++ Some(url_from_test_fixtures("../tests/fixtures/loading/bar.svg")).as_ref(),
++ ),
++ Err(AllowedUrlError::NoQueriesAllowed)
++ ));
++ }
++
++ #[test]
++ fn disallows_weird_relative_uris() {
++ let base_url = url_from_test_fixtures("../tests/fixtures/loading/bar.svg");
++
++ assert!(
++ AllowedUrl::from_href(
++ ".@../../../../../../../../../../etc/passwd",
++ Some(&base_url),
++ ).is_err()
++ );
++ assert!(
++ AllowedUrl::from_href(
++ ".$../../../../../../../../../../etc/passwd",
++ Some(&base_url),
++ ).is_err()
++ );
++ assert!(
++ AllowedUrl::from_href(
++ ".%../../../../../../../../../../etc/passwd",
++ Some(&base_url),
++ ).is_err()
++ );
++ assert!(
++ AllowedUrl::from_href(
++ ".*../../../../../../../../../../etc/passwd",
++ Some(&base_url),
++ ).is_err()
++ );
++ assert!(
++ AllowedUrl::from_href(
++ "~/../../../../../../../../../../etc/passwd",
++ Some(&base_url),
++ ).is_err()
++ );
++ }
++
++ #[test]
++ fn disallows_dot_sibling() {
++ println!("cwd: {:?}", std::env::current_dir());
++ let base_url = url_from_test_fixtures("../tests/fixtures/loading/bar.svg");
++
++ assert!(matches!(
++ AllowedUrl::from_href(".", Some(&base_url)),
++ Err(AllowedUrlError::NotSiblingOrChildOfBaseFile)
++ ));
++ assert!(matches!(
++ AllowedUrl::from_href(".#../../../../../../../../../../etc/passwd", Some(&base_url)),
++ Err(AllowedUrlError::NoFragmentIdentifierAllowed)
++ ));
++ }
++
++ #[test]
++ fn disallows_fragment() {
++ // AllowedUrl::from_href() explicitly disallows fragment identifiers.
++ // This is because they should have been stripped before calling that function,
++ // by the Iri machinery.
++
++ assert!(matches!(
++ AllowedUrl::from_href("bar.svg#fragment", Some(Url::parse("https://example.com/foo.svg").unwrap()).as_ref()),
++ Err(AllowedUrlError::NoFragmentIdentifierAllowed)
++ ));
++ }
++
+ #[test]
+ fn parses_href() {
+ assert_eq!(
+diff --git a/rsvg_internals/src/filters/component_transfer.rs b/rsvg_internals/src/filters/component_transfer.rs
+index 235435ffa..6845eac18 100644
+--- a/rsvg_internals/src/filters/component_transfer.rs
++++ b/rsvg_internals/src/filters/component_transfer.rs
+@@ -261,7 +261,7 @@ macro_rules! func_or_default {
+ }
+ }
+ _ => &$func_default,
+- };
++ }
+ };
+ }
+
+diff --git a/tests/Makefile.am b/tests/Makefile.am
+index 13c2d51f2..b3faf2da5 100644
+--- a/tests/Makefile.am
++++ b/tests/Makefile.am
+@@ -82,6 +82,7 @@ dist_installed_test_data = \
+ $(wildcard $(srcdir)/fixtures/errors/*) \
+ $(wildcard $(srcdir)/fixtures/infinite-loop/*) \
+ $(wildcard $(srcdir)/fixtures/loading/*) \
++ $(wildcard $(srcdir)/fixtures/loading/subdir/*) \
+ $(wildcard $(srcdir)/fixtures/reftests/*.css) \
+ $(wildcard $(srcdir)/fixtures/reftests/*.svg) \
+ $(wildcard $(srcdir)/fixtures/reftests/*.png) \
+diff --git a/tests/fixtures/loading/bar.svg b/tests/fixtures/loading/bar.svg
+new file mode 100644
+index 000000000..304670099
+--- /dev/null
++++ b/tests/fixtures/loading/bar.svg
+@@ -0,0 +1 @@
++<!-- Empty file, used just to test URL validation -->
+diff --git a/tests/fixtures/loading/foo.svg b/tests/fixtures/loading/foo.svg
+new file mode 100644
+index 000000000..304670099
+--- /dev/null
++++ b/tests/fixtures/loading/foo.svg
+@@ -0,0 +1 @@
++<!-- Empty file, used just to test URL validation -->
+diff --git a/tests/fixtures/loading/subdir/baz.svg b/tests/fixtures/loading/subdir/baz.svg
+new file mode 100644
+index 000000000..304670099
+--- /dev/null
++++ b/tests/fixtures/loading/subdir/baz.svg
+@@ -0,0 +1 @@
++<!-- Empty file, used just to test URL validation -->
+--
+GitLab
+
diff --git a/librsvg2.spec b/librsvg2.spec
new file mode 100644
index 0000000..d4fe446
--- /dev/null
+++ b/librsvg2.spec
@@ -0,0 +1,1033 @@
+# https://github.com/rust-lang/rust/issues/47714
+%undefine _strict_symbol_defs_build
+
+# We want verbose builds
+%global _configure_disable_silent_rules 1
+
+# Use bundled deps as we don't ship the exact right versions for all the
+# required rust libraries
+%global bundled_rust_deps 1
+
+%global cairo_version 1.16.0
+
+Name: librsvg2
+Summary: An SVG library based on cairo
+Version: 2.50.7
+Release: 3%{?dist}
+
+License: LGPLv2+
+URL: https://wiki.gnome.org/Projects/LibRsvg
+Source0: https://download.gnome.org/sources/librsvg/2.50/librsvg-%{version}.tar.xz
+# https://bugzilla.redhat.com/show_bug.cgi?id=2224947
+Patch0: librsvg2-CVE-2023-38633.patch
+
+BuildRequires: chrpath
+BuildRequires: gcc
+BuildRequires: gobject-introspection-devel
+BuildRequires: make
+BuildRequires: pkgconfig(cairo) >= %{cairo_version}
+BuildRequires: pkgconfig(cairo-gobject) >= %{cairo_version}
+BuildRequires: pkgconfig(cairo-png) >= %{cairo_version}
+BuildRequires: pkgconfig(fontconfig)
+BuildRequires: pkgconfig(gdk-pixbuf-2.0)
+BuildRequires: pkgconfig(gio-2.0)
+BuildRequires: pkgconfig(gio-unix-2.0)
+BuildRequires: pkgconfig(glib-2.0)
+BuildRequires: pkgconfig(gthread-2.0)
+BuildRequires: pkgconfig(libxml-2.0)
+BuildRequires: pkgconfig(pangocairo)
+BuildRequires: pkgconfig(pangoft2)
+BuildRequires: vala
+%if 0%{?bundled_rust_deps}
+BuildRequires: cargo
+BuildRequires: rust
+%else
+BuildRequires: rust-packaging
+%endif
+# For Patch0.
+BuildRequires: autoconf automake gettext-devel
+
+Requires: cairo%{?_isa} >= %{cairo_version}
+Requires: cairo-gobject%{?_isa} >= %{cairo_version}
+# We install a gdk-pixbuf svg loader
+Requires: gdk-pixbuf2%{?_isa}
+
+%if 0%{?bundled_rust_deps}
+# Generated with a script from Firefox package:
+# https://gitlab.com/redhat/centos-stream/rpms/firefox/-/blob/c9s/get_rust_bundled_provides.sh
+Provides: bundled(crate(aho-corasick)) = 0.7.18
+Provides: bundled(crate(approx)) = 0.3.2
+Provides: bundled(crate(autocfg)) = 1.0.1
+Provides: bundled(crate(bitflags)) = 1.2.1
+Provides: bundled(crate(bytemuck)) = 1.5.1
+Provides: bundled(crate(byteorder)) = 1.4.3
+Provides: bundled(crate(cairo-rs)) = 0.8.1
+Provides: bundled(crate(cairo-sys-rs)) = 0.9.2
+Provides: bundled(crate(cast)) = 0.2.6
+Provides: bundled(crate(cfg-if)) = 1.0.0
+Provides: bundled(crate(convert_case)) = 0.4.0
+Provides: bundled(crate(crossbeam-channel)) = 0.5.1
+Provides: bundled(crate(crossbeam-deque)) = 0.8.0
+Provides: bundled(crate(crossbeam-epoch)) = 0.9.5
+Provides: bundled(crate(crossbeam-utils)) = 0.8.5
+Provides: bundled(crate(cssparser)) = 0.27.2
+Provides: bundled(crate(cssparser-macros)) = 0.6.0
+Provides: bundled(crate(data-url)) = 0.1.0
+Provides: bundled(crate(derive_more)) = 0.99.14
+Provides: bundled(crate(dtoa)) = 0.4.8
+Provides: bundled(crate(dtoa-short)) = 0.3.3
+Provides: bundled(crate(either)) = 1.6.1
+Provides: bundled(crate(encoding)) = 0.2.33
+Provides: bundled(crate(encoding-index-japanese)) = 1.20141219.5
+Provides: bundled(crate(encoding-index-korean)) = 1.20141219.5
+Provides: bundled(crate(encoding-index-simpchinese)) = 1.20141219.5
+Provides: bundled(crate(encoding-index-singlebyte)) = 1.20141219.5
+Provides: bundled(crate(encoding-index-tradchinese)) = 1.20141219.5
+Provides: bundled(crate(encoding_index_tests)) = 0.1.4
+Provides: bundled(crate(float-cmp)) = 0.8.0
+Provides: bundled(crate(form_urlencoded)) = 1.0.1
+Provides: bundled(crate(futf)) = 0.1.4
+Provides: bundled(crate(futures-channel)) = 0.3.15
+Provides: bundled(crate(futures-core)) = 0.3.15
+Provides: bundled(crate(futures-executor)) = 0.3.15
+Provides: bundled(crate(futures-io)) = 0.3.15
+Provides: bundled(crate(futures-macro)) = 0.3.15
+Provides: bundled(crate(futures-task)) = 0.3.15
+Provides: bundled(crate(futures-util)) = 0.3.15
+Provides: bundled(crate(fxhash)) = 0.2.1
+Provides: bundled(crate(gdk-pixbuf)) = 0.8.0
+Provides: bundled(crate(gdk-pixbuf-sys)) = 0.9.1
+Provides: bundled(crate(generic-array)) = 0.13.3
+Provides: bundled(crate(getrandom)) = 0.1.16
+Provides: bundled(crate(gio)) = 0.8.1
+Provides: bundled(crate(gio-sys)) = 0.9.1
+Provides: bundled(crate(glib)) = 0.9.3
+Provides: bundled(crate(glib-sys)) = 0.9.1
+Provides: bundled(crate(gobject-sys)) = 0.9.1
+Provides: bundled(crate(idna)) = 0.2.3
+Provides: bundled(crate(itertools)) = 0.9.0
+Provides: bundled(crate(itoa)) = 0.4.7
+Provides: bundled(crate(language-tags)) = 0.2.2
+Provides: bundled(crate(lazy_static)) = 1.4.0
+Provides: bundled(crate(libc)) = 0.2.95
+Provides: bundled(crate(libm)) = 0.2.1
+Provides: bundled(crate(librsvg_c_api)) = 0.0.1
+Provides: bundled(crate(locale_config)) = 0.3.0
+Provides: bundled(crate(log)) = 0.4.14
+Provides: bundled(crate(mac)) = 0.1.1
+Provides: bundled(crate(markup5ever)) = 0.10.1
+Provides: bundled(crate(matches)) = 0.1.8
+Provides: bundled(crate(matrixmultiply)) = 0.2.4
+Provides: bundled(crate(memchr)) = 2.4.0
+Provides: bundled(crate(memoffset)) = 0.6.4
+Provides: bundled(crate(nalgebra)) = 0.21.1
+Provides: bundled(crate(new_debug_unreachable)) = 1.0.4
+Provides: bundled(crate(nodrop)) = 0.1.14
+Provides: bundled(crate(num-complex)) = 0.2.4
+Provides: bundled(crate(num-integer)) = 0.1.44
+Provides: bundled(crate(num-rational)) = 0.2.4
+Provides: bundled(crate(num-traits)) = 0.2.14
+Provides: bundled(crate(num_cpus)) = 1.13.0
+Provides: bundled(crate(once_cell)) = 1.7.2
+Provides: bundled(crate(pango)) = 0.8.0
+Provides: bundled(crate(pango-sys)) = 0.9.1
+Provides: bundled(crate(pangocairo)) = 0.9.0
+Provides: bundled(crate(pangocairo-sys)) = 0.10.1
+Provides: bundled(crate(paste)) = 0.1.18
+Provides: bundled(crate(paste-impl)) = 0.1.18
+Provides: bundled(crate(percent-encoding)) = 2.1.0
+Provides: bundled(crate(pest)) = 2.1.3
+Provides: bundled(crate(phf)) = 0.8.0
+Provides: bundled(crate(phf_codegen)) = 0.8.0
+Provides: bundled(crate(phf_generator)) = 0.8.0
+Provides: bundled(crate(phf_macros)) = 0.8.0
+Provides: bundled(crate(phf_shared)) = 0.8.0
+Provides: bundled(crate(pin-project-lite)) = 0.2.6
+Provides: bundled(crate(pin-utils)) = 0.1.0
+Provides: bundled(crate(pkg-config)) = 0.3.19
+Provides: bundled(crate(ppv-lite86)) = 0.2.10
+Provides: bundled(crate(precomputed-hash)) = 0.1.1
+Provides: bundled(crate(proc-macro-hack)) = 0.5.19
+Provides: bundled(crate(proc-macro-nested)) = 0.1.7
+Provides: bundled(crate(proc-macro2)) = 1.0.27
+Provides: bundled(crate(quote)) = 1.0.9
+Provides: bundled(crate(rand)) = 0.7.3
+Provides: bundled(crate(rand_chacha)) = 0.2.2
+Provides: bundled(crate(rand_core)) = 0.5.1
+Provides: bundled(crate(rand_distr)) = 0.2.2
+Provides: bundled(crate(rand_pcg)) = 0.2.1
+Provides: bundled(crate(rawpointer)) = 0.2.1
+Provides: bundled(crate(rayon)) = 1.5.1
+Provides: bundled(crate(rayon-core)) = 1.9.1
+Provides: bundled(crate(rctree)) = 0.3.3
+Provides: bundled(crate(regex)) = 1.5.4
+Provides: bundled(crate(regex-syntax)) = 0.6.25
+Provides: bundled(crate(rgb)) = 0.8.27
+Provides: bundled(crate(rsvg_internals)) = 0.0.1
+Provides: bundled(crate(rustc_version)) = 0.3.3
+Provides: bundled(crate(scopeguard)) = 1.1.0
+Provides: bundled(crate(selectors)) = 0.22.0
+Provides: bundled(crate(semver)) = 0.11.0
+Provides: bundled(crate(semver-parser)) = 0.10.2
+Provides: bundled(crate(serde)) = 1.0.126
+Provides: bundled(crate(servo_arc)) = 0.1.1
+Provides: bundled(crate(simba)) = 0.1.5
+Provides: bundled(crate(siphasher)) = 0.3.5
+Provides: bundled(crate(slab)) = 0.4.3
+Provides: bundled(crate(smallvec)) = 1.6.1
+Provides: bundled(crate(stable_deref_trait)) = 1.2.0
+Provides: bundled(crate(string_cache)) = 0.8.1
+Provides: bundled(crate(string_cache_codegen)) = 0.5.1
+Provides: bundled(crate(syn)) = 1.0.72
+Provides: bundled(crate(tendril)) = 0.4.2
+Provides: bundled(crate(thin-slice)) = 0.1.1
+Provides: bundled(crate(time)) = 0.1.43
+Provides: bundled(crate(tinyvec)) = 0.3.4
+Provides: bundled(crate(tinyvec)) = 1.2.0
+Provides: bundled(crate(tinyvec_macros)) = 0.1.0
+Provides: bundled(crate(typenum)) = 1.13.0
+Provides: bundled(crate(ucd-trie)) = 0.1.3
+Provides: bundled(crate(unicode-bidi)) = 0.3.5
+Provides: bundled(crate(unicode-normalization)) = 0.1.19
+Provides: bundled(crate(unicode-xid)) = 0.2.2
+Provides: bundled(crate(url)) = 2.2.2
+Provides: bundled(crate(utf-8)) = 0.7.6
+Provides: bundled(crate(xml5ever)) = 0.16.1
+%endif
+
+%description
+An SVG library based on cairo.
+
+%package devel
+Summary: Libraries and include files for developing with librsvg
+Requires: %{name}%{?_isa} = %{version}-%{release}
+
+%description devel
+This package provides the necessary development libraries and include
+files to allow you to develop with librsvg.
+
+%package tools
+Summary: Extra tools for librsvg
+Requires: %{name}%{?_isa} = %{version}-%{release}
+
+%description tools
+This package provides extra utilities based on the librsvg library.
+
+%prep
+%autosetup -n librsvg-%{version} -p1
+%if 0%{?bundled_rust_deps}
+# Use the bundled deps
+%else
+# No bundled deps
+rm -vrf vendor .cargo Cargo.lock
+pushd rsvg_internals
+ %cargo_prep
+ mv .cargo ..
+popd
+%endif
+
+%if ! 0%{?bundled_rust_deps}
+%generate_buildrequires
+pushd rsvg_internals >/dev/null
+ %cargo_generate_buildrequires
+popd >/dev/null
+%endif
+
+%build
+# For Patch0.
+autoreconf --force --install
+
+%configure --disable-static \
+ --disable-gtk-doc \
+ --enable-introspection \
+ --enable-vala
+%make_build
+
+%install
+%make_install
+find %{buildroot} -type f -name '*.la' -print -delete
+
+%find_lang librsvg
+
+# Remove lib64 rpaths
+chrpath --delete %{buildroot}%{_bindir}/rsvg-convert
+chrpath --delete %{buildroot}%{_libdir}/gdk-pixbuf-2.0/*/loaders/libpixbufloader-svg.so
+
+# we install own docs
+rm -vrf %{buildroot}%{_datadir}/doc
+
+%files -f librsvg.lang
+%doc CONTRIBUTING.md README.md
+%license COPYING.LIB
+%{_libdir}/librsvg-2.so.*
+%{_libdir}/gdk-pixbuf-2.0/*/loaders/libpixbufloader-svg.so
+%dir %{_libdir}/girepository-1.0
+%{_libdir}/girepository-1.0/Rsvg-2.0.typelib
+%dir %{_datadir}/thumbnailers
+%{_datadir}/thumbnailers/librsvg.thumbnailer
+
+%files devel
+%{_libdir}/librsvg-2.so
+%{_includedir}/librsvg-2.0/
+%{_libdir}/pkgconfig/librsvg-2.0.pc
+%dir %{_datadir}/gir-1.0
+%{_datadir}/gir-1.0/Rsvg-2.0.gir
+%dir %{_datadir}/vala
+%dir %{_datadir}/vala/vapi
+%{_datadir}/vala/vapi/librsvg-2.0.vapi
+%dir %{_datadir}/gtk-doc
+%dir %{_datadir}/gtk-doc/html
+%{_datadir}/gtk-doc/html/rsvg-2.0
+
+%files tools
+%{_bindir}/rsvg-convert
+%{_mandir}/man1/rsvg-convert.1*
+
+%changelog
+* Wed Oct 04 2023 Tomas Popela <tpopela@redhat.com> - 2.50.7-3
+- Specify bundled crates (RHEL-4102)
+
+* Thu Aug 10 2023 David King <amigadave@amigadave.com> - 2.50.7-2
+- Fix CVE-2023-38633 (#2224947)
+
+* Tue Aug 24 2021 Kalev Lember <klember@redhat.com> - 2.50.7-1
+- Update to 2.50.7
+
+* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 2.50.6-2
+- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
+ Related: rhbz#1991688
+
+* Tue May 25 2021 Kalev Lember <klember@redhat.com> - 2.50.6-1
+- Update to 2.50.6
+
+* Wed May 05 2021 Kalev Lember <klember@redhat.com> - 2.50.5-1
+- Update to 2.50.5
+
+* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 2.50.3-2
+- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
+
+* Thu Jan 28 2021 Kalev Lember <klember@redhat.com> - 2.50.3-1
+- Update to 2.50.3
+
+* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 2.50.2-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
+
+* Wed Nov 25 2020 Kalev Lember <klember@redhat.com> - 2.50.2-1
+- Update to 2.50.2
+
+* Mon Oct 5 2020 Kalev Lember <klember@redhat.com> - 2.50.1-1
+- Update to 2.50.1
+
+* Fri Sep 11 2020 Kalev Lember <klember@redhat.com> - 2.50.0-1
+- Update to 2.50.0
+
+* Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 2.48.8-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
+
+* Mon Jul 20 2020 Kalev Lember <klember@redhat.com> - 2.48.8-1
+- Update to 2.48.8
+
+* Fri Jun 05 2020 Kalev Lember <klember@redhat.com> - 2.48.7-1
+- Update to 2.48.7
+
+* Tue Jun 02 2020 Kalev Lember <klember@redhat.com> - 2.48.6-1
+- Update to 2.48.6
+
+* Mon Jun 01 2020 Kalev Lember <klember@redhat.com> - 2.48.5-1
+- Update to 2.48.5
+
+* Fri Apr 24 2020 Kalev Lember <klember@redhat.com> - 2.48.4-1
+- Update to 2.48.4
+
+* Fri Apr 10 2020 Kalev Lember <klember@redhat.com> - 2.48.3-1
+- Update to 2.48.3
+
+* Tue Mar 31 2020 Kalev Lember <klember@redhat.com> - 2.48.2-1
+- Update to 2.48.2
+
+* Sat Mar 28 2020 Kalev Lember <klember@redhat.com> - 2.48.1-1
+- Update to 2.48.1
+
+* Sat Mar 07 2020 Kalev Lember <klember@redhat.com> - 2.48.0-1
+- Update to 2.48.0
+
+* Wed Jan 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 2.46.4-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
+
+* Wed Nov 27 2019 Kalev Lember <klember@redhat.com> - 2.46.4-1
+- Update to 2.46.4
+
+* Wed Oct 23 2019 Kalev Lember <klember@redhat.com> - 2.46.3-1
+- Update to 2.46.3
+
+* Mon Oct 14 2019 Kalev Lember <klember@redhat.com> - 2.46.2-1
+- Update to 2.46.2
+
+* Mon Oct 07 2019 Kalev Lember <klember@redhat.com> - 2.46.1-1
+- Update to 2.46.1
+
+* Fri Sep 20 2019 Kalev Lember <klember@redhat.com> - 2.46.0-2
+- Backport a patch to fix svg rendering in gnome-initial-setup (#1753183)
+
+* Mon Sep 09 2019 Kalev Lember <klember@redhat.com> - 2.46.0-1
+- Update to 2.46.0
+
+* Tue Sep 03 2019 Kalev Lember <klember@redhat.com> - 2.45.92-1
+- Update to 2.45.92
+
+* Mon Aug 19 2019 Kalev Lember <klember@redhat.com> - 2.45.91-1
+- Update to 2.45.91
+
+* Sun Aug 04 2019 Pete Walter <pwalter@fedoraproject.org> - 2.45.90-1
+- Update to 2.45.90
+
+* Fri Jul 26 2019 Pete Walter <pwalter@fedoraproject.org> - 2.45.8-1
+- Update to 2.45.8
+
+* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 2.45.7-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
+
+* Mon Jul 08 2019 Kalev Lember <klember@redhat.com> - 2.45.7-1
+- Update to 2.45.7
+
+* Tue May 14 2019 Kalev Lember <klember@redhat.com> - 2.45.6-1
+- Update to 2.45.6
+
+* Wed Mar 13 2019 Kalev Lember <klember@redhat.com> - 2.45.5-4
+- Go back to using bundled rust deps
+
+* Tue Feb 19 2019 Kalev Lember <klember@redhat.com> - 2.45.5-3
+- Rebuilt against fixed atk (#1626575)
+
+* Tue Feb 19 2019 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 2.45.5-2
+- Unbundle Rust deps
+
+* Sat Feb 16 2019 Kalev Lember <klember@redhat.com> - 2.45.5-1
+- Update to 2.45.5
+
+* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 2.45.4-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
+
+* Wed Jan 09 2019 Kalev Lember <klember@redhat.com> - 2.45.4-1
+- Update to 2.45.4
+
+* Wed Jan 09 2019 Kalev Lember <klember@redhat.com> - 2.45.3-2
+- Fix accidental soname bump
+
+* Wed Jan 09 2019 Kalev Lember <klember@redhat.com> - 2.45.3-1
+- Update to 2.45.3
+
+* Sat Dec 29 2018 Kalev Lember <klember@redhat.com> - 2.44.11-1
+- Update to 2.44.11
+
+* Tue Dec 18 2018 Kalev Lember <klember@redhat.com> - 2.44.10-1
+- Update to 2.44.10
+
+* Wed Nov 14 2018 Kalev Lember <klember@redhat.com> - 2.44.9-1
+- Update to 2.44.9
+
+* Fri Oct 26 2018 Kalev Lember <klember@redhat.com> - 2.44.8-1
+- Update to 2.44.8
+
+* Tue Oct 09 2018 Kalev Lember <klember@redhat.com> - 2.44.7-1
+- Update to 2.44.7
+
+* Fri Sep 28 2018 Kalev Lember <klember@redhat.com> - 2.44.6-1
+- Update to 2.44.6
+
+* Wed Sep 26 2018 Kalev Lember <klember@redhat.com> - 2.44.4-1
+- Update to 2.44.4
+
+* Thu Sep 20 2018 Kalev Lember <klember@redhat.com> - 2.44.3-1
+- Update to 2.44.3
+
+* Fri Sep 07 2018 Kalev Lember <klember@redhat.com> - 2.44.2-2
+- Rebuilt against fixed atk (#1626575)
+
+* Wed Sep 05 2018 Kalev Lember <klember@redhat.com> - 2.44.2-1
+- Update to 2.44.2
+
+* Wed Aug 08 2018 Kalev Lember <klember@redhat.com> - 2.43.4-1
+- Update to 2.43.4
+- Use bundled rust deps
+
+* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 2.43.1-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
+
+* Sun Jul 01 2018 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 2.43.1-2
+- Bump cssparser to 0.24
+
+* Sun Jun 24 2018 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 2.43.1-1
+- Update to 2.43.1
+
+* Tue May 08 2018 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 2.42.4-1
+- Update to 2.42.4
+
+* Thu May 03 2018 Josh Stone <jistone@redhat.com> - 2.42.3-2
+- Update rust dependencies.
+
+* Mon Mar 05 2018 Kalev Lember <klember@redhat.com> - 2.42.3-1
+- Update to 2.42.3
+
+* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 2.42.2-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
+
+* Fri Feb 02 2018 Kalev Lember <klember@redhat.com> - 2.42.2-1
+- Update to 2.42.2
+
+* Wed Jan 31 2018 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 2.42.1-2
+- Switch to %%ldconfig_scriptlets
+
+* Wed Jan 24 2018 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 2.42.1-1
+- Update to 2.42.1
+
+* Sat Dec 16 2017 Kalev Lember <klember@redhat.com> - 2.40.20-1
+- Update to 2.40.20
+
+* Mon Oct 09 2017 Kalev Lember <klember@redhat.com> - 2.40.19-1
+- Update to 2.40.19
+
+* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.40.18-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
+
+* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.40.18-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
+
+* Thu Jul 20 2017 Kalev Lember <klember@redhat.com> - 2.40.18-1
+- Update to 2.40.18
+
+* Tue Apr 11 2017 Kalev Lember <klember@redhat.com> - 2.40.17-1
+- Update to 2.40.17
+- Remove lib64 rpaths
+
+* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.40.16-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
+
+* Thu Sep 22 2016 Kalev Lember <klember@redhat.com> - 2.40.16-2
+- BR vala instead of obsolete vala-tools subpackage
+
+* Thu Jun 09 2016 Kalev Lember <klember@redhat.com> - 2.40.16-1
+- Update to 2.40.16
+
+* Sat Apr 02 2016 David King <amigadave@amigadave.com> - 2.40.15-1
+- Update to 2.40.15
+
+* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 2.40.13-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
+
+* Fri Jan 08 2016 David King <amigadave@amigadave.com> - 2.40.13-1
+- Update to 2.40.13
+- Fix bogus date in changelog
+
+* Wed Dec 02 2015 David King <amigadave@amigadave.com> - 2.40.12-1
+- Update to 2.40.12
+
+* Thu Oct 08 2015 Kalev Lember <klember@redhat.com> - 2.40.11-1
+- Update to 2.40.11
+- Drop ancient librsvg3 obsoletes
+
+* Sat Aug 08 2015 Kalev Lember <klember@redhat.com> - 2.40.10-1
+- Update to 2.40.10
+
+* Wed Aug 5 2015 Matthias Clasen <mclasen@redhat.com> - 2.40.9-3
+- Rely on gdk-pixbuf2 file triggers
+
+* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.40.9-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
+
+* Thu Mar 26 2015 Kalev Lember <kalevlember@gmail.com> - 2.40.9-1
+- Update to 2.40.9
+
+* Fri Feb 27 2015 David King <amigadave@amigadave.com> - 2.40.8-1
+- Update to 2.40.8
+
+* Mon Feb 16 2015 David King <amigadave@amigadave.com> - 2.40.7-1
+- Update to 2.40.7
+- Use license macro for COPYING and COPYING.LIB
+- Use pkgconfig for BuildRequires
+- Add URL
+
+* Wed Dec 03 2014 Richard Hughes <rhughes@redhat.com> - 2.40.6-1
+- Update to 2.40.6
+
+* Mon Oct 13 2014 Kalev Lember <kalevlember@gmail.com> - 2.40.5-1
+- Update to 2.40.5
+
+* Sun Sep 14 2014 Kalev Lember <kalevlember@gmail.com> - 2.40.4-1
+- Update to 2.40.4
+- Tighten subpackage deps with the _isa macro
+
+* Mon Aug 18 2014 Kalev Lember <kalevlember@gmail.com> - 2.40.3-1
+- Update to 2.40.3
+
+* Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.40.2-4
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
+
+* Tue Jul 22 2014 Kalev Lember <kalevlember@gmail.com> - 2.40.2-3
+- Rebuilt for gobject-introspection 1.41.4
+
+* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.40.2-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
+
+* Tue Mar 18 2014 Richard Hughes <rhughes@redhat.com> - 2.40.2-1
+- Update to 2.40.2
+
+* Mon Nov 25 2013 Richard Hughes <rhughes@redhat.com> - 2.40.1-1
+- Update to 2.40.1
+
+* Tue Oct 29 2013 Richard Hughes <rhughes@redhat.com> - 2.40.0-1
+- Update to 2.40.0
+
+* Thu Aug 22 2013 Kalev Lember <kalevlember@gmail.com> - 2.39.0-1
+- Update to 2.39.0
+
+* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.37.0-4
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
+
+* Sat May 11 2013 Kalev Lember <kalevlember@gmail.com> - 2.37.0-3
+- Split rsvg-view-3 and rsvg-convert to a -tools subpackage (#915403)
+
+* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.37.0-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
+
+* Tue Jan 15 2013 Matthias Clasen <mclasen@redhat.com> - 2.37.0-1
+- Update to 2.37.0
+
+* Tue Oct 16 2012 Kalev Lember <kalevlember@gmail.com> - 2.36.4-1
+- Update to 2.36.4
+
+* Sun Sep 23 2012 Kalev Lember <kalevlember@gmail.com> - 2.36.3-1
+- Update to 2.36.3
+- Package the librsvg Vala bindings
+
+* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.36.1-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
+
+* Tue Apr 17 2012 Kalev Lember <kalevlember@gmail.com> - 2.36.1-1
+- Update to 2.36.1
+- Removed unrecognized configure options
+- Include the man page in the rpm
+
+* Tue Mar 27 2012 Kalev Lember <kalevlember@gmail.com> - 2.36.0-1
+- Update to 2.36.0
+
+* Mon Feb 6 2012 Matthias Clasen <mclasen@redhat.com> - 2.35.2-1
+- Update to 2.35.2
+
+* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.35.1-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
+
+* Tue Dec 20 2011 Matthias Clasen <mclasen@redhat.com> - 2.35.1-1
+- Update to 2.35.1
+
+* Sat Dec 10 2011 Hans de Goede <hdegoede@redhat.com> - 2.35.0-3
+- Fix including rsvg.h always causing a deprecated warning, as this breaks
+ apps compiling with -Werror
+
+* Fri Nov 25 2011 Daniel Drake <dsd@laptop.org> - 2.35.0-2
+- Build gobject-introspection bindings
+
+* Tue Nov 22 2011 Matthias Clasen <mclasen@redhat.com> - 2.35.0-1
+- Update to 2.35.0
+
+* Mon Nov 7 2011 Matthias Clasen <mclasen@redhat.com> - 2.34.1-2
+- Rebuild against new libpng
+
+* Tue Sep 6 2011 Matthias Clasen <mclasen@redhat.com> - 2.34.1-1
+- Update to 2.34.1
+
+* Sun Apr 3 2011 Christopher Aillon <caillon@redhat.com> - 2.34.0-1
+- Update to 2.34.0
+
+* Fri Feb 18 2011 Matthias Clasen <mclasen@redhat.com> - 2.32.1-3
+- Fix a crash (#603183)
+
+* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.32.1-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
+
+* Fri Dec 3 2010 Matthias Clasen <mclasen@redhat.com> - 2.32.1-1
+- Update to 2.32.1
+
+* Mon Oct 18 2010 Parag Nemade <paragn AT fedoraproject.org> - 2.32.0-2
+- Merge-review cleanup (#226040)
+
+* Wed Sep 29 2010 Matthias Clasen <mclasen@redhat.com> 2.32.0-1
+- Update to 2.32.0
+
+* Mon Jul 19 2010 Bastien Nocera <bnocera@redhat.com> 2.31.0-2
+- Fix rawhide upgrade path with librsvg3
+
+* Fri Jul 2 2010 Matthias Clasen <mclasen@redhat.com> - 2.31.0-1
+- Update to 2.31.0
+
+* Fri Jul 02 2010 Adam Tkac <atkac redhat com> - 2.31.0-0.3.20100628git
+- fix crash in rsvg-gobject.c:instance_dispose function
+ (https://bugzilla.gnome.org/show_bug.cgi?id=623383)
+
+* Wed Jun 30 2010 Matthias Clasen <mclasen@redhat.com> - 2.31.0-0.2.20100628git
+- Fix the .pc file to require gdk-pixbuf-2.0
+
+* Mon Jun 28 2010 Matthias Clasen <mclasen@redhat.com> - 2.31.0-0.1.20100628git
+- Update to a git snapshot that builds against standalone gdk-pixbuf
+- Drop librsvg3 package
+- Drop svg theme engine
+
+* Fri Jun 11 2010 Bastien Nocera <bnocera@redhat.com> 2.26.3-3
+- Add missing scriptlets for librsvg3
+- Fix requires for librsvg3-devel package
+
+* Fri Jun 11 2010 Bastien Nocera <bnocera@redhat.com> 2.26.3-2
+- Add GTK3 port of the libraries
+
+* Sat May 1 2010 Matthias Clasen <mclasen@redhat.com> - 2.26.3-1
+- Update to 2.26.3
+
+* Tue Mar 30 2010 Matthias Clasen <mclasen@redhat.com> - 2.26.2-1
+- Update to 2.26.2
+
+* Mon Mar 29 2010 Matthias Clasen <mclasen@redhat.com> - 2.26.1-1
+- Update to 2.26.1
+
+* Sun Feb 14 2010 Matthias Clasen <mclasen@redhat.com> - 2.26.0-4
+- Add missing libs
+
+* Mon Aug 10 2009 Ville Skyttä <ville.skytta@iki.fi> - 2.26.0-3
+- Convert specfile to UTF-8.
+
+* Sat Jul 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.26.0-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
+
+* Mon Mar 16 2009 Matthias Clasen <mclasen@redhat.com> - 2.26.0-1
+- Update to 2.26.0
+
+* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.22.3-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
+
+* Mon Sep 22 2008 Matthias Clasen <mclasen@redhat.com> - 2.22.3-1
+- Update to 2.22.3
+
+* Thu Sep 18 2008 Matthias Clasen <mclasen@redhat.com> - 2.22.2-2
+- Plug a memory leak
+
+* Tue Mar 4 2008 Matthias Clasen <mclasen@redhat.com> - 2.22.2-1
+- Update to 2.22.2
+
+* Sun Feb 24 2008 Matthias Clasen <mclasen@redhat.com> - 2.22.1-1
+- Update to 2.22.1
+
+* Thu Feb 21 2008 Matthias Clasen <mclasen@redhat.com> - 2.22.0-1
+- Update to 2.22.0
+
+* Mon Feb 18 2008 Fedora Release Engineering <rel-eng@fedoraproject.org> - 2.20.0-2
+- Autorebuild for GCC 4.3
+
+* Sun Jan 20 2008 Matthias Clasen <mclasen@redhat.com> - 2.20.0-1
+- Update to 2.20.0
+
+* Tue Sep 11 2007 Matthias Clasen <mclasen@redhat.com> - 2.18.2-2
+- Plug memory leaks
+
+* Mon Sep 3 2007 Matthias Clasen <mclasen@redhat.com> - 2.18.2-1
+- Update to 2.18.2
+
+* Mon Sep 3 2007 Matthias Clasen <mclasen@redhat.com> - 2.18.1-1
+- Update to 2.18.1
+
+* Thu Aug 23 2007 Adam Jackson <ajax@redhat.com> - 2.18.0-4
+- Rebuild for build ID
+
+* Tue Aug 7 2007 Matthias Clasen <mclasen@redhat.com> - 2.18.0-3
+- Update license field
+
+* Wed Aug 1 2007 Matthias Clasen <mclasen@redhat.com> - 2.18.0-2
+- Don't let scriptlets fail (#243185)
+
+* Fri Jul 27 2007 Matthias Clasen <mclasen@redhat.com> - 2.18.0-1
+- Update to 2.18.0
+
+* Sat Nov 4 2006 Matthias Clasen <mclasen@redhat.com> - 2.16.1-1
+- Update to 2.16.1
+
+* Tue Sep 5 2006 Matthias Clasen <mclasen@redhat.com> - 2.16.0-2.fc6
+- Fix multilib issues
+
+* Thu Aug 31 2006 Matthias Clasen <mclasen@redhat.com> - 2.16.0-1.fc6
+- Update to 2.16.0
+- Require pkgconfig in the -devel package
+
+* Thu Aug 3 2006 Matthias Clasen <mclasen@redhat.com> - 2.15.90-1.fc6
+- Update to 2.15.90
+
+* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 2.15.0-3.1
+- rebuild
+
+* Sun Jun 18 2006 Florian La Roche <laroche@redhat.com>
+- change to separate Requires(post/postun) lines
+
+* Mon Jun 12 2006 Bill Nottingham <notting@redhat.com> 2.15.0-2
+- remove libtool, automake14 buildreqs
+
+* Wed May 10 2006 Matthias Clasen <mclasen@redhat.com> 2.15.0-1
+- Update to 2.15.0
+- Don't ship static libs
+
+* Fri May 5 2006 Matthias Clasen <mclasen@redhat.com> 2.14.3-3
+- Rebuild against new GTK+
+- Require GTK+ 2.9.0
+
+* Tue Apr 4 2006 Matthias Clasen <mclasen@redhat.com> 2.14.3-2
+- Update to 2.14.3
+
+* Sun Mar 12 2006 Ray Strode <rstrode@redhat.com> 2.14.2-1
+- Update to 2.14.2
+
+* Sat Mar 11 2006 Bill Nottingham <notting@redhat.com> 2.14.1-2
+- fix bad libart dep
+
+* Tue Feb 28 2006 Matthias Clasen <mclasen@redhat.com> 2.14.1-1
+- Update to 2.14.1
+
+* Sat Feb 25 2006 Matthias Clasen <mclasen@redhat.com> 2.14.0-1
+- Update to 2.14.0
+
+* Mon Feb 13 2006 Matthias Clasen <mclasen@redhat.com> 2.13.93-1
+- Update to 2.13.93
+
+* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 2.13.92-1.1
+- bump again for double-long bug on ppc(64)
+
+* Mon Feb 6 2006 Matthias Clasen <mclasen@redhat.com> 2.13.92-1
+- Update to 2.13.92
+
+* Fri Jan 13 2006 Matthias Clasen <mclasen@redhat.com> 2.13.5-1
+- Update to 2.13.5
+
+* Tue Jan 3 2006 Jesse Keating <jkeating@redhat.com> 2.13.3-4
+- Rebuilt on new gcc
+
+* Fri Dec 9 2005 Alexander Larsson <alexl@redhat.com> 2.13.3-3
+- Update dependencies (now cairo only, not libart)
+
+* Fri Dec 2 2005 Matthias Clasen <mclasen@redhat.com> - 2.13.3-2
+- Compile with svgz support
+
+* Wed Nov 30 2005 Matthias Clasen <mclasen@redhat.com> - 2.13.3-1
+- Update to 2.13.3
+
+* Wed Oct 12 2005 Matthias Clasen <mclasen@redhat.com> - 2.12.7-1
+- Newer upstream version
+
+* Thu Oct 6 2005 Matthias Clasen <mclasen@redhat.com> - 2.12.5-1
+- New upstream version
+
+* Thu Oct 6 2005 Matthias Clasen <mclasen@redhat.com> - 2.12.4-1
+- New upstream version
+
+* Thu Sep 29 2005 Matthias Clasen <mclasen@redhat.com> - 2.12.3-1
+- New upstream version
+
+* Wed Aug 31 2005 Matthias Clasen <mclasen@redhat.com> - 2.11.1-1
+- New upstream version
+
+* Wed Mar 2 2005 Matthias Clasen <mclasen@redhat.com> - 2.9.5-2
+- Rebuild with gcc4
+
+* Wed Jan 26 2005 Matthias Clasen <mclasen@redhat.com> - 2.9.5-1
+- update to 2.9.5
+
+* Thu Sep 23 2004 Matthias Clasen <mclasen@redhat.com> - 2.8.1-2
+- Must use the same rpm macro for the host triplet as the
+ gtk2 package, otherwise things can fall apart. (#137676)
+
+* Thu Sep 23 2004 Alexander Larsson <alexl@redhat.com> - 2.8.1-1
+- update to 2.8.1
+
+* Fri Jul 30 2004 Matthias Clasen <mclasen@redhat.com> - 2.7.2-1
+- Update to 2.7.2
+- Fix up changelog section
+
+* Mon Jun 28 2004 Dan Williams <dcbw@redhat.com> - 2.6.4-7
+- Fix usage of "%%{_bindir}/update-gdk-pixbuf-loaders %%{_host}"
+ to point to right place and architecture
+
+* Thu Jun 24 2004 Matthias Clasen <mclasen@redhat.com> 2.6.4-6
+- Properly handle updating of arch-dependent config
+ files. (#124483)
+
+* Wed Jun 23 2004 Matthias Clasen <mclasen@redhat.com> 2.6.4-5
+- PreReq gtk2 instead of just requiring it (#90697)
+
+* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
+- rebuilt
+
+* Fri May 21 2004 Matthias Clasen <mclasen@redhat.com> 2.6.4-3
+- rebuild
+
+* Mon Apr 5 2004 Warren Togami <wtogami@redhat.com> 2.6.4-2
+- BuildRequires libtool, libgnomeui-devel, there may be more
+- -devel req libcroco-devel
+
+* Thu Apr 1 2004 Alex Larsson <alexl@redhat.com> 2.6.4-1
+- update to 2.6.4
+
+* Wed Mar 17 2004 Alex Larsson <alexl@redhat.com> 2.6.1-2
+- rebuild to get new gtk bin age
+
+* Mon Mar 15 2004 Alex Larsson <alexl@redhat.com> 2.6.1-1
+- update to 2.6.1
+
+* Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com>
+- rebuilt
+
+* Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
+- rebuilt
+
+* Tue Jan 27 2004 Jonathan Blandford <jrb@redhat.com> 2.4.0-3
+- update version
+- Buildrequire libcroco
+
+* Fri Oct 24 2003 Alexander Larsson <alexl@redhat.com> 2.4.0-3
+- Fix libcroco in link line. Fixes #107875.
+- Properly require libgsf and libcroco
+
+* Tue Oct 21 2003 Florian La Roche <Florian.LaRoche@redhat.de> 2.4.0-2
+- BuildReq libcroco-devel, seems this _can_ get picked up
+
+* Mon Sep 8 2003 Jonathan Blandford <jrb@redhat.com> 2.4.0-1
+- bump to 2.4.0
+
+* Thu Sep 4 2003 Alexander Larsson <alexl@redhat.com> 2.3.1-3
+- Don't use the epoch, thats implicitly zero and not defined
+
+* Thu Sep 4 2003 Alexander Larsson <alexl@redhat.com> 2.3.1-2
+- full version in -devel requires (#102063)
+
+* Wed Aug 13 2003 Jonathan Blandford <jrb@redhat.com> 2.3.1-1
+- new version for GNOME 2.4
+
+* Fri Aug 8 2003 Alexander Larsson <alexl@redhat.com> 2.2.3-5
+- BuildRequire libgsf-devel
+
+* Wed Aug 6 2003 Elliot Lee <sopwith@redhat.com> 2.2.3-4
+- Fix libtool
+
+* Wed Jun 04 2003 Elliot Lee <sopwith@redhat.com>
+- rebuilt
+
+* Tue Apr 8 2003 Matt Wilson <msw@redhat.com> 2.2.3-2
+- use system libtool (#88339)
+
+* Wed Feb 5 2003 Alexander Larsson <alexl@redhat.com> 2.2.3-1
+- 2.2.3
+- Moved engine and loaders from devel package
+
+* Mon Feb 3 2003 Alexander Larsson <alexl@redhat.com> 2.2.2.1-2
+- Move docs to rpm docdir
+
+* Mon Feb 3 2003 Alexander Larsson <alexl@redhat.com> 2.2.2.1-1
+- Update to 2.2.2.1, crash fixes
+
+* Fri Jan 31 2003 Alexander Larsson <alexl@redhat.com> 2.2.1-1
+- Update to 2.2.1, fixes crash
+- Removed temporary manpage hack
+
+* Wed Jan 22 2003 Tim Powers <timp@redhat.com>
+- rebuilt
+
+* Tue Jan 21 2003 Alexander Larsson <alexl@redhat.com> 2.2.0-3
+- Manpage were installed in the wrong place
+
+* Tue Jan 21 2003 Alexander Larsson <alexl@redhat.com> 2.2.0-2
+- Add manpage
+
+* Tue Jan 21 2003 Alexander Larsson <alexl@redhat.com> 2.2.0-1
+- Update to 2.2.0
+
+* Fri Jan 17 2003 Alexander Larsson <alexl@redhat.com> 2.1.3-3
+- Require gtk2 2.2.0 for the pixbuf loader (#80857)
+
+* Thu Jan 16 2003 Alexander Larsson <alexl@redhat.com> 2.1.3-2
+- own includedir/librsvg-2
+
+* Thu Jan 9 2003 Alexander Larsson <alexl@redhat.com> 2.1.3-1
+- update to 2.1.3
+
+* Tue Dec 17 2002 Owen Taylor <otaylor@redhat.com>
+- Don't package gdk-pixbuf.loaders, it gets generated
+ in the %%post
+
+* Mon Dec 9 2002 Alexander Larsson <alexl@redhat.com> 2.1.2-1
+- Update to 2.1.2
+
+* Sat Jul 27 2002 Havoc Pennington <hp@redhat.com>
+- 2.0.1
+
+* Fri Jun 21 2002 Tim Powers <timp@redhat.com>
+- automated rebuild
+
+* Sun May 26 2002 Tim Powers <timp@redhat.com>
+- automated rebuild
+
+* Tue May 21 2002 Havoc Pennington <hp@redhat.com>
+- rebuild in different environment
+
+* Thu May 02 2002 Havoc Pennington <hp@redhat.com>
+- rebuild in different environment
+
+* Thu Apr 18 2002 Havoc Pennington <hp@redhat.com>
+- 1.1.6
+
+* Mon Feb 11 2002 Alex Larsson <alexl@redhat.com> 1.1.3-1
+- Update to 1.1.3
+
+* Wed Jan 09 2002 Tim Powers <timp@redhat.com>
+- automated rebuild
+
+* Wed Jan 2 2002 Havoc Pennington <hp@redhat.com>
+- new CVS snap 1.1.0.91
+- remove automake/autoconf calls
+
+* Mon Nov 26 2001 Havoc Pennington <hp@redhat.com>
+- convert to librsvg2 RPM
+
+* Tue Oct 23 2001 Havoc Pennington <hp@redhat.com>
+- 1.0.2
+
+* Fri Jul 27 2001 Alexander Larsson <alexl@redhat.com>
+- Add a patch that moves the includes to librsvg-1/librsvg
+- in preparation for a later librsvg 2 library.
+
+* Tue Jul 24 2001 Havoc Pennington <hp@redhat.com>
+- build requires gnome-libs-devel, #49509
+
+* Thu Jul 19 2001 Havoc Pennington <hp@redhat.com>
+- own /usr/include/librsvg
+
+* Wed Jul 18 2001 Akira TAGOH <tagoh@redhat.com> 1.0.0-4
+- fixed the linefeed problem in multibyte environment. (Bug#49310)
+
+* Mon Jul 09 2001 Havoc Pennington <hp@redhat.com>
+- put .la file back in package
+
+* Fri Jul 6 2001 Trond Eivind Glomsrød <teg@redhat.com>
+- Put changelog at the end
+- Move .so files to devel subpackage
+- Don't mess with ld.so.conf
+- Don't use %%{prefix}, this isn't a relocatable package
+- Don't define a bad docdir
+- Add BuildRequires
+- Use %%{_tmppath}
+- Don't define name, version etc. on top of the file (why
+ do so many do that?)
+- s/Copyright/License/
+
+* Wed May 9 2001 Jonathan Blandford <jrb@redhat.com>
+- Put into Red Hat Build system
+
+* Tue Oct 10 2000 Robin Slomkowski <rslomkow@eazel.com>
+- removed obsoletes from sub packages and added mozilla and
+ trilobite subpackages
+
+* Wed Apr 26 2000 Ramiro Estrugo <ramiro@eazel.com>
+- created this thing
+
diff --git a/sources b/sources
new file mode 100644
index 0000000..ca101dc
--- /dev/null
+++ b/sources
@@ -0,0 +1 @@
+e6ac4051ef7653cd8b1e27a4da051600 librsvg-2.50.7.tar.xz