Browse Source

libpng12: add security patches

git-svn-id: http://trac.vinelinux.org/repos/projects/specs@8602 ec354946-7b23-47d6-9f5a-488ba84defc7
daisuke 9 years ago
parent
commit
26a78e521e
1 changed files with 16 additions and 1 deletions
  1. 16 1
      lib/libp/libpng12/libpng12-vl.spec

+ 16 - 1
lib/libp/libpng12/libpng12-vl.spec

@@ -6,11 +6,17 @@ Summary: A library of functions for manipulating PNG image format files.
 Summary(ja): PNG画像形式ファイル操作用の関数ライブラリ
 Name: libpng12
 Version: 1.2.51
-Release: 1%{_dist_release}
+Release: 2%{_dist_release}
 License: distributable
 Group: System Environment/Libraries
 Source: ftp://ftp.simplesystems.org/pub/libpng/png/src/%{origname}-%{version}.tar.xz
 
+# security patches
+Patch130: libpng-1.2.50-CVE-2013-7353.patch
+Patch140: libpng-1.2.50-CVE-2013-7354.patch     
+Patch141: libpng-1.2.51_pngset_limit.h.patch
+
+
 Buildroot: %{_tmppath}/%{name}-%{version}-root
 BuildRequires: zlib-devel
 Requires: zlib
@@ -76,6 +82,12 @@ files.
 %prep
 %setup -q -n %{origname}-%{version}
 
+# security patches
+%patch130 -p0 -b .CVE-2013-7353
+%patch140 -p0 -b .CVE-2013-7354
+%patch141 -p0 -b .limit.h
+
+
 %build
 #./autogen.sh
 %configure
@@ -119,6 +131,9 @@ files.
 %endif
 
 %changelog
+* Mon Jun 23 2014 Daisuke SUZUKI <daisuke@vinelinux.org> 1.2.51-2
+- add security patches
+
 * Sat Jun 21 2014 Daisuke SUZUKI <daisuke@vinelinux.org> 1.2.51-1
 - rename to libpng12
   - build as compat package.