diff --git a/0da9e01980a93aa13c40de492dca3c47cde50bfc.patch b/0da9e01980a93aa13c40de492dca3c47cde50bfc.patch new file mode 100644 index 0000000000000000000000000000000000000000..2bb7b8ffd0abbcfd1f1ed4ec4022d9f3d506924f --- /dev/null +++ b/0da9e01980a93aa13c40de492dca3c47cde50bfc.patch @@ -0,0 +1,27 @@ +diff --git a/NEWS b/NEWS +index 13a3722..0834207 100644 +--- a/NEWS ++++ b/NEWS +@@ -8,6 +8,10 @@ New in version 0.4.16: + * Small performance improvements + * pxgsettings: use the correct syntax to connect to the changed signal (silences annoying output on console) + * Support python3 up to version 3.9 ++* Fix buffer overflow when PAC is enabled (CVE-2020-26154) ++* Rewrite url::recvline to be nonrecursive (CVE-2020-25219) ++* Remove nonfunctional and crashy pacrunner caching ++* Never use system libmodman (no other consumers, not maintained) + + New in Version 0.4.15: + ============================== +diff --git a/libproxy/CMakeLists.txt b/libproxy/CMakeLists.txt +index 9151030..187e423 100644 +--- a/libproxy/CMakeLists.txt ++++ b/libproxy/CMakeLists.txt +@@ -1,6 +1,6 @@ + ### Project info + project(libproxy) +-set_project_version(0 4 15) ++set_project_version(0 4 16) + + ### Add a global compilation stuff + if (WIN32) diff --git a/libproxy.spec b/libproxy.spec index 92fbb2732f27e6c00a312c14592d24d278f55e11..4f8a3dc6fd6343b411fc285a9c1ceed2a6630205 100644 --- a/libproxy.spec +++ b/libproxy.spec @@ -1,6 +1,6 @@ Name: libproxy Version: 0.4.15 -Release: 19 +Release: 20 Summary: Libproxy is a library that provides automatic proxy configuration management License: LGPLv2+ @@ -19,6 +19,7 @@ Patch5: libproxy-0.4.15-mozjs60.patch Patch6: libproxy-0.4.15-mozjs68.patch Patch7: libproxy-0.4.15-mozjs-use-after-free.patch Patch8: libproxy-0.4.15-fix-CVE-2020-25219.patch +Patch6000: 0da9e01980a93aa13c40de492dca3c47cde50bfc.patch BuildRequires: cmake >= 2.6.0 gcc-c++ @@ -116,6 +117,9 @@ make test %{_mandir}/man1/proxy.1* %changelog +* 20201204195849795811 patch-tracking 0.4.15-20 +- append patch file of upstream repository from <0da9e01980a93aa13c40de492dca3c47cde50bfc> to <0da9e01980a93aa13c40de492dca3c47cde50bfc> + * Wed Dec 02 2020 xihaochen - 0.4.15-19 - Type:requirements - Id:NA @@ -169,4 +173,4 @@ make test - DESC:remove the /usr/bin/kreadconfig5 in buildRequires. * Tue Sep 10 2019 liyongqiang - 0.4.15-10 -- Package init +- Package init \ No newline at end of file