Browse Source

bzip2-1.0.6-3

git-svn-id: http://trac.vinelinux.org/repos/projects/specs@10541 ec354946-7b23-47d6-9f5a-488ba84defc7
tomop 7 years ago
parent
commit
9f680cf23c
1 changed files with 11 additions and 2 deletions
  1. 11 2
      b/bzip2/bzip2-vl.spec

+ 11 - 2
b/bzip2/bzip2-vl.spec

@@ -5,7 +5,7 @@ Summary:     A file compression utility.
 Summary(ja): ファイル圧縮ユーティリティ
 Name: bzip2
 Version: 1.0.6
-Release: 2%{?_dist_release}
+Release: 3%{?_dist_release}
 License: BSD
 Group: Applications/Archiving
 URL: http://www.bzip.org/
@@ -20,6 +20,9 @@ Patch3: bzip2-1.0.4-bzip2recover.patch
 # URL: http://www.vanheusden.com/Linux/bzip2-1.0.2.diff.gz
 Patch10: bzip2-1.0.2.diff.bz2
 
+# security patch(es)
+Patch1000: CVE-2016-3189.patch
+
 BuildRoot: %{_tmppath}/%{name}-%{version}-root
 
 %if %buildpdf
@@ -91,6 +94,8 @@ which will use the library.
 
 %patch10 -p1
 
+%patch1000 -p1 -b .CVE-2016-3189
+
 cp CHANGES ChangeLog
 mv CHANGES NEWS
 mv LICENSE COPYING
@@ -133,7 +138,8 @@ rm -rf %{buildroot}
 
 %files
 %defattr(-,root,root)
-%doc AUTHORS COPYING README README.COMPILATION.PROBLEMS NEWS ChangeLog
+%license COPYING
+%doc AUTHORS README README.COMPILATION.PROBLEMS NEWS ChangeLog
 %{_bindir}/*
 %{_mandir}/*/*
 %{_libdir}/*so.*
@@ -155,6 +161,9 @@ rm -rf %{buildroot}
 %endif
 
 %changelog
+* Tue Jul  5 2016 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.0.6-3
+- added Patch1000 to fix CVE-2016-3189.
+
 * Wed Jan  1 2014 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 1.0.6-2
 - rebuilt with new vineseed toolchain