updated 6 packages

c-ares-1.16.1-1

curl-7.70.0-1

libjpeg-turbo-2.0.4-2

libtiff-4.1.0-1

nghttp2-1.41.0-1

sqlite3-3.32.2-1

git-svn-id: http://trac.vinelinux.org/repos/projects/specs@12415 ec354946-7b23-47d6-9f5a-488ba84defc7

c/c-ares/c-ares-vl.spec

@@ -2,10 +2,13 @@
 
 Summary: A library that performs asynchronous DNS operations
 Name: c-ares
-Version: 1.15.0
+Version: 1.16.1
 Release: 1%{?_dist_release}
-License: MIT
 Group: System Environment/Libraries
+Vendor: Project Vine
+Distribution: Vine Linux
+
+License: MIT
 URL: http://c-ares.haxx.se/
 Source0: http://c-ares.haxx.se/download/%{name}-%{version}.tar.gz
 # The license can be obtained at http://c-ares.haxx.se/license.html
@@ -19,10 +22,6 @@ BuildRequires: autoconf
 BuildRequires: automake
 BuildRequires: libtool
 
-Vendor: Project Vine
-Distribution: Vine Linux
-Packager: tomop
-
 %description
 c-ares is a C library that performs DNS requests and name resolves 
 asynchronously. c-ares is a fork of the library named 'ares', written 
@@ -87,7 +86,8 @@ rm -rf $RPM_BUILD_ROOT
 
 %files
 %defattr(-, root, root)
-%doc AUTHORS README.md README.cares CHANGES NEWS LICENSE* RELEASE-NOTES SECURITY.md
+%license LICENSE*
+%doc AUTHORS README.md README.cares CHANGES NEWS RELEASE-NOTES
 %{_libdir}/*.so.*
 
 %files devel
@@ -110,11 +110,13 @@ rm -rf $RPM_BUILD_ROOT
 %files -n compat32-%{name}-devel
 %defattr(-, root, root, 0755)
 %{_libdir}/*.so
-%{_libdir}/pkgconfig/libcares.pc
 
 %endif
 
 %changelog
+* Tue Jun 09 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> - 1.16.1-1
+- updated to 1.16.1.
+
 * Sat Nov 03 2018 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> - 1.15.0-1
 - updated to 1.15.0.
 

c/curl/curl-vl.spec

@@ -7,11 +7,14 @@
 Summary: A utility for getting files from remote servers (FTP, HTTP, and others).
 Summary(ja): リモートサーバ(FTP,HTTPなど)からファイルを取得するためのユーティリティ
 Name: curl 
-Version: 7.68.0
+Version: 7.70.0
 Release: 1%{?_dist_release}
+Group: Applications/Internet
+Vendor: Project Vine
+Distribution: Vine Linux
+Packager: daisuke
 
 License: MIT
-Group: Applications/Internet
 URL: http://curl.haxx.se/
 Source: http://curl.haxx.se/download/%{name}-%{version}.tar.xz
 
@@ -50,10 +53,6 @@ BuildRequires: libnghttp2-devel
 
 Requires: ca-certificates
 
-Vendor: Project Vine
-Distribution: Vine Linux
-Packager: daisuke
-
 %description
 cURL is a tool for getting files from FTP, HTTP, Gopher, Telnet, and
 Dict servers, using any of the supported protocols. cURL is designed
@@ -203,10 +202,12 @@ rm -rf $RPM_BUILD_ROOT
 %files -n compat32-%{name}-devel
 %defattr(-,root,root)
 %{_libdir}/*.so
-%{_libdir}/pkgconfig/*.pc
 %endif
 
 %changelog
+* Tue Jun 09 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 7.70.0-1
+- new upstream release.
+
 * Sun Feb 16 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 7.68.0-1
 - new upstream release.
 

lib/libj/libjpeg-turbo/libjpeg-turbo-vl.spec

@@ -5,7 +5,7 @@ Summary(ja):	MMX/SSE2/SIMD でアクセラレーションされた libjpeg ラ
 
 Name:		libjpeg-turbo
 Version:	2.0.4
-Release:	1%{?_dist_release}
+Release:	2%{?_dist_release}
 
 Group:		System Environment/Libraries
 License:	IJG
@@ -16,8 +16,8 @@ Distribution:	Vine Linux
 Source0:	http://downloads.sourceforge.net/%{name}/%{name}-%{version}.tar.gz
 Patch0:		libjpeg-turbo-cmake.patch
 Patch1:		libjpeg-turbo-CET.patch
-
-BuildRoot:      %{_tmppath}/%{name}-%{version}-%{release}-root
+Patch1000:	CVE-2020-13790.patch
+BuildRoot:	%{_tmppath}/%{name}-%{version}-%{release}-root
 
 BuildRequires:	cmake
 %ifarch %{ix86} x86_64
@@ -88,6 +88,7 @@ will manipulate JPEG files using the libjpeg-turbo library
 %setup -q
 %patch0 -p1
 %patch1 -p1
+%patch1000 -p1
 
 
 %build
@@ -211,6 +212,9 @@ rm -rf %{buildroot}
 %endif
 
 %changelog
+* Mon Jun 08 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 2.0.4-2
+- added Patch1000 to fix CVE-2020-13790.
+
 * Mon Feb 10 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 2.0.4-1
 - new upstream release.
 

lib/libt/libtiff/libtiff-vl.spec

@@ -3,13 +3,20 @@
 Summary: A library of functions for manipulating TIFF format image files.
 Summary(ja): TIFF フォーマットの画像ファイルを扱うライブラリ
 Name: libtiff
-Version: 4.0.10
-Release: 2%{_dist_release}
-License: distributable
+Version: 4.1.0
+Release: 1%{_dist_release}
 Group: System Environment/Libraries
-Source0: http://download.osgeo.org/libtiff/tiff-%{version}.tar.gz
+Vendor: Project Vine
+Distribution: Vine Linux
+Packager: daisuke, iwamoto
 
+License: distributable
 URL: http://www.simplesystems.org/libtiff/
+Source0: http://download.osgeo.org/libtiff/tiff-%{version}.tar.gz
+
+Patch0: libtiff-am-version.patch
+Patch1: libtiff-make-check.patch
+
 BuildRoot: %{_tmppath}/%{name}-%{version}-root
 BuildRequires: zlib-devel libjpeg-devel
 %define LIBVER %(echo %{version} | cut -f-2 -d.)
@@ -20,18 +27,6 @@ Provides: libtiff.so.4
 %endif
 Obsoletes: libtiff4
 
-Vendor: Project Vine
-Distribution: Vine Linux
-Packager: daisuke, iwamoto
-
-Patch0: libtiff-am-version.patch
-Patch1: libtiff-make-check.patch
-
-Patch1001: libtiff-CVE-2019-6128.patch
-Patch1002: libtiff-CVE-2018-12900_CVE-2019-7663.patch
-Patch1003: libtiff-CVE-2018-19210.patch
-Patch1004: CVE-2019-14973.patch
-
 %description
 The libtiff package contains a library of functions for manipulating 
 TIFF (Tagged Image File Format) image format files.  TIFF is a widely
@@ -114,11 +109,6 @@ install the libtiff package.
 %patch0 -p1
 %patch1 -p1
 
-%patch1001 -p1
-%patch1002 -p1
-%patch1003 -p1
-%patch1004 -p1
-
 # Use build system's libtool.m4, not the one in the package.
 rm -f libtool.m4
 
@@ -188,6 +178,10 @@ rm -rf $RPM_BUILD_ROOT
 
 
 %changelog
+* Mon Jun 08 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 4.1.0-1
+- new upstream release.
+- dropped Patch1001-1004: fixed in upstream.
+
 * Tue Oct 22 2019 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 4.0.10-2
 - rebuilt with libjpeg.so.8.
 

n/nghttp2/nghttp2-vl.spec

@@ -8,8 +8,8 @@
 Summary: Experimental HTTP/2 client, server and proxy
 Summary(ja): HTTP/2クライアント・サーバ・プロキシの実験的実装
 Name: nghttp2
-Version: 1.40.0
-Release: 2%{?_dist_release}
+Version: 1.41.0
+Release: 1%{?_dist_release}
 Group: Applications/Internet
 Vendor: Project Vine
 Distribution: Vine Linux
@@ -211,6 +211,9 @@ make %{?_smp_mflags} check
 %endif
 
 %changelog
+* Tue Jun 09 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.41.0-1
+- new upstream release.
+
 * Sat Apr 25 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 1.40.0-2
 - rebuilt with boost-1.72.0.
 

s/sqlite3/sqlite3-vl.spec

@@ -6,9 +6,9 @@
 %define with_check %{?_with_check:1}%{!?_with_check:0}
 
 %define year 2020
-%define realver 3310100
-%define docver 3310100
-%define rpmver 3.31.1
+%define realver 3320200
+%define docver 3320200
+%define rpmver 3.32.2
 
 
 Summary: SQLite is a C library that implements an embeddable SQL database engine
@@ -22,7 +22,6 @@ Distribution: Vine Linux
 
 URL: https://www.sqlite.org
 License: Public Domain
-
 Source0: https://www.sqlite.org/%{year}/%{archivename}-src-%{realver}.zip
 Source1: https://www.sqlite.org/%{year}/%{archivename}-doc-%{docver}.zip
 
@@ -39,6 +38,8 @@ Patch7: sqlite-3.16-datetest-2.2c.patch
 # Modify sync2.test to pass with DIRSYNC turned off
 Patch8: sqlite-3.18.0-sync2-dirsync.patch
 
+Patch1000: CVE-2020-13871.patch
+
 BuildRoot: %{_tmppath}/%{name}-%{version}-root
 BuildRequires: tcl-devel, libedit-devel, ncurses-devel, zlib-devel
 
@@ -147,6 +148,9 @@ sqlite3-develはSQLiteデータベースライブラリを用いるプログラ
 必要なヘッダファイル及びライブラリを含むパッケージです。
 
 
+%debug_package
+
+
 %prep
 %setup -q -a1 -n%{archivename}-src-%{realver}
 %patch1 -p1
@@ -157,6 +161,8 @@ sqlite3-develはSQLiteデータベースライブラリを用いるプログラ
 %endif
 %patch8 -p1
 
+%patch1000 -p0
+
 # Remove backup-file
 rm -f %{name}-doc-%{docver}/sqlite.css~ || :
 
@@ -242,6 +248,13 @@ install -D -m0644 tool/lempar.c $RPM_BUILD_ROOT/%{_datadir}/lemon/lempar.c
 
 
 %changelog
+* Wed Jun 10 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 3.32.2-1
+- new upstream release.
+- imported Patch1000 from upstream to fix CVE-2020-13871.
+
+* Tue May 26 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 3.32.1-1
+- new upstream release.
+
 * Tue Feb 11 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 3.31.1-1
 - new upstream release.