Browse Source

curl: add patch100 for fix CVE-2011-2192 (gssapi)

git-svn-id: http://trac.vinelinux.org/repos/projects/specs@4261 ec354946-7b23-47d6-9f5a-488ba84defc7
iwamoto 13 years ago
parent
commit
31d216bafb
1 changed files with 11 additions and 2 deletions
  1. 11 2
      c/curl/curl-vl.spec

+ 11 - 2
c/curl/curl-vl.spec

@@ -4,17 +4,22 @@ Summary: A utility for getting files from remote servers (FTP, HTTP, and others)
 Summary(ja): リモートサーバ(FTP,HTTPなど)からファイルを取得するためのユーティリティ
 Name: curl 
 Version: 7.20.1
-Release: 3%{?_dist_release}
+Release: 4%{?_dist_release}
 License: MIT/X
 Group: Applications/Internet
 Source: http://curl.haxx.se/download/%{name}-%{version}.tar.bz2
 URL: http://curl.haxx.se/
+# Security 
+Patch100: curl-7.19.6_CVE-2011-2192.patch
 
 BuildRoot: %{_tmppath}/%{name}-%{version}-root
 BuildRequires: openssl-devel libidn-devel zlib-devel
 BuildRequires: openldap-devel gnutls-devel
 Requires: openssl libidn zlib
 
+Vendor: Project Vine
+Distribution: Vine Linux
+
 %description
 cURL is a tool for getting files from FTP, HTTP, Gopher, Telnet, and
 Dict servers, using any of the supported protocols. cURL is designed
@@ -60,9 +65,9 @@ package includes files needed for developing applications which can
 use cURL's capabilities internally.
 #'
 
-
 %prep
 %setup -q 
+%patch100 -p1 -b .CVE-2011-2192
 
 %build
 %configure --with-ssl=%{_prefix} --with-gnutls --with-libidn --enable-ipv6 --disable-static
@@ -119,6 +124,10 @@ rm -rf $RPM_BUILD_ROOT
 %endif
 
 %changelog
+* Sun Jul  3 2011 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 7.20.1-4
+- add patch100 for fix CVE-2011-2192 (gssapi)
+- add Vendor/Distri tags
+
 * Tue Jan 11 2011 Yoji TOYODA <bsyamato@sea.plala.or.jp> 7.20.1-3
 - rebuild with openssl-1.0.0c