Browse Source

curl: add patch100 for fix CVE-2011-2192 (gssapi)

git-svn-id: http://trac.vinelinux.org/repos/projects/specs@4261 ec354946-7b23-47d6-9f5a-488ba84defc7
iwamoto 14 years ago
parent
commit
31d216bafb
1 changed files with 11 additions and 2 deletions
  1. 11 2
      c/curl/curl-vl.spec

+ 11 - 2
c/curl/curl-vl.spec

@@ -4,17 +4,22 @@ Summary: A utility for getting files from remote servers (FTP, HTTP, and others)
 Summary(ja): リモートサーバ(FTP,HTTPなど)からファイルを取得するためのユーティリティ
 Summary(ja): リモートサーバ(FTP,HTTPなど)からファイルを取得するためのユーティリティ
 Name: curl 
 Name: curl 
 Version: 7.20.1
 Version: 7.20.1
-Release: 3%{?_dist_release}
+Release: 4%{?_dist_release}
 License: MIT/X
 License: MIT/X
 Group: Applications/Internet
 Group: Applications/Internet
 Source: http://curl.haxx.se/download/%{name}-%{version}.tar.bz2
 Source: http://curl.haxx.se/download/%{name}-%{version}.tar.bz2
 URL: http://curl.haxx.se/
 URL: http://curl.haxx.se/
+# Security 
+Patch100: curl-7.19.6_CVE-2011-2192.patch
 
 
 BuildRoot: %{_tmppath}/%{name}-%{version}-root
 BuildRoot: %{_tmppath}/%{name}-%{version}-root
 BuildRequires: openssl-devel libidn-devel zlib-devel
 BuildRequires: openssl-devel libidn-devel zlib-devel
 BuildRequires: openldap-devel gnutls-devel
 BuildRequires: openldap-devel gnutls-devel
 Requires: openssl libidn zlib
 Requires: openssl libidn zlib
 
 
+Vendor: Project Vine
+Distribution: Vine Linux
+
 %description
 %description
 cURL is a tool for getting files from FTP, HTTP, Gopher, Telnet, and
 cURL is a tool for getting files from FTP, HTTP, Gopher, Telnet, and
 Dict servers, using any of the supported protocols. cURL is designed
 Dict servers, using any of the supported protocols. cURL is designed
@@ -60,9 +65,9 @@ package includes files needed for developing applications which can
 use cURL's capabilities internally.
 use cURL's capabilities internally.
 #'
 #'
 
 
-
 %prep
 %prep
 %setup -q 
 %setup -q 
+%patch100 -p1 -b .CVE-2011-2192
 
 
 %build
 %build
 %configure --with-ssl=%{_prefix} --with-gnutls --with-libidn --enable-ipv6 --disable-static
 %configure --with-ssl=%{_prefix} --with-gnutls --with-libidn --enable-ipv6 --disable-static
@@ -119,6 +124,10 @@ rm -rf $RPM_BUILD_ROOT
 %endif
 %endif
 
 
 %changelog
 %changelog
+* Sun Jul  3 2011 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 7.20.1-4
+- add patch100 for fix CVE-2011-2192 (gssapi)
+- add Vendor/Distri tags
+
 * Tue Jan 11 2011 Yoji TOYODA <bsyamato@sea.plala.or.jp> 7.20.1-3
 * Tue Jan 11 2011 Yoji TOYODA <bsyamato@sea.plala.or.jp> 7.20.1-3
 - rebuild with openssl-1.0.0c
 - rebuild with openssl-1.0.0c