diff --git a/optipng.spec b/optipng.spec index 4247b90..ba4f27a 100644 --- a/optipng.spec +++ b/optipng.spec @@ -1,12 +1,14 @@ Name: optipng Version: 0.7.6 -Release: 5%{?dist} +Release: 6%{?dist} Summary: PNG optimizer and converter License: zlib URL: http://optipng.sourceforge.net/ Source0: http://downloads.sourceforge.net/optipng/%{name}-%{version}.tar.gz +# https://sourceforge.net/p/optipng/bugs/65/ Patch0: 0001-Prevent-integer-overflow-bug-65-CVE-2017-1000229.patch +# https://sourceforge.net/p/optipng/bugs/69/ Patch1: optipng-076-sfbug-69.patch BuildRequires: zlib-devel libpng-devel @@ -23,6 +25,8 @@ and corrections. for f in AUTHORS.txt doc/history.txt ; do iconv -f iso-8859-1 -t utf-8 $f > $f.utf8 ; mv $f.utf8 $f done +%patch0 -p1 +%patch1 -p1 # Ensure system libs and headers are used; as of 0.6.3 pngxtern will use # the bundled headers if present even with -with-system-*, causing failures. @@ -54,6 +58,9 @@ make test CFLAGS="$RPM_OPT_FLAGS" LDFLAGS="$RPM_LD_FLAGS" %changelog +* Mon Dec 04 2017 Till Maas - 0.7.6-6 +- Actually apply patches + * Mon Dec 04 2017 Till Maas - 0.7.6-5 - Add patches for CVE-2017-1000229 and CVE-2017-16938 - Cleanup spec