diff --git a/djvulibre.spec b/djvulibre.spec index 712196e..c2336c6 100644 --- a/djvulibre.spec +++ b/djvulibre.spec @@ -1,7 +1,7 @@ Name: djvulibre Summary: An open source (GPL'ed) implementation of DjVu Version: 3.5.27 -Release: 14 +Release: 15 License: GPLv2+ URL: http://djvu.sourceforge.net/ Source0: http://downloads.sourceforge.net/djvu/djvulibre-%{version}.tar.gz @@ -11,6 +11,7 @@ Patch2: CVE-2019-15143.patch Patch3: CVE-2019-15144.patch Patch4: CVE-2019-15145.patch Patch5: CVE-2019-18804.patch +Patch6: update-any2djvu-server-hostname.patch Requires(post): xdg-utils Requires(preun): xdg-utils BuildRequires: libjpeg-turbo-devel libtiff-devel xdg-utils chrpath hicolor-icon-theme gcc-c++ @@ -93,6 +94,9 @@ rm -f %{_datadir}/icons/hicolor/32x32/apps/djvulibre-djview3.png || : %{_mandir}/man1/* %changelog +* Thu Jan 28 2021 lingsheng - 3.5.27-15 +- update any2djvu server hostname + * Mon Jan 4 2021 zhanghua - 3.5.27-14 - fix CVE-2019-15142, CVE-2019-15143, CVE-2019-15144, CVE-2019-15145, CVE-2019-18804 diff --git a/update-any2djvu-server-hostname.patch b/update-any2djvu-server-hostname.patch new file mode 100644 index 0000000..d0c5da2 --- /dev/null +++ b/update-any2djvu-server-hostname.patch @@ -0,0 +1,49 @@ +From 24380c9940078e2eab4e73c859885a015bfcd93a Mon Sep 17 00:00:00 2001 +From: "Barak A. Pearlmutter" +Date: Thu, 3 Nov 2016 10:52:47 +0000 +Subject: [PATCH] update any2djvu server hostname + +Thanks to Dylan Thurston for the report, +see https://bugs.debian.org/843009 + +Also update example URL. +--- + tools/any2djvu | 4 ++-- + tools/any2djvu.1 | 2 +- + 2 files changed, 3 insertions(+), 3 deletions(-) + +diff --git a/tools/any2djvu b/tools/any2djvu +index 1ad64c8..581766a 100755 +--- a/tools/any2djvu ++++ b/tools/any2djvu +@@ -28,7 +28,7 @@ function disclaimer() + # TO DO: + # - error handling + +-rurl="http://any2djvu.djvuzone.org" ++rurl="http://any2djvu.djvu.org" + rcgi="any2djvu.php" + res=400 + ocr=1 +@@ -83,7 +83,7 @@ function usage() + echo "Examples:" + echo " cd ~bap/public_html/foo" + echo " # uploads from web-accessible directory" +- echo " any2djvu http://www.bcl.hamilton.ie/~barak/papers mesh-preprint.ps.gz" ++ echo " any2djvu http://barak.pearlmutter.net/papers mesh-preprint.ps.gz" + echo " any2djvu http://www.inference.phy.cam.ac.uk/mackay *.ps.gz bar.pdf" + echo " # uploads from current directory" + echo " any2djvu b*.pdf" +diff --git a/tools/any2djvu.1 b/tools/any2djvu.1 +index 5ab8422..ccfe03f 100644 +--- a/tools/any2djvu.1 ++++ b/tools/any2djvu.1 +@@ -14,7 +14,7 @@ Invoke with \-h switch for usage information. + Non-empty value of DJVU_ONLINE_ACK acknowledges transmission of the + documents to the server (so that no warning dialog is displayed). + .SH EXAMPLES +-any2djvu http://www.bcl.hamilton.ie/~barak/papers mesh-preprint.ps.gz ++any2djvu http://barak.pearlmutter.net/papers mesh-preprint.ps.gz + .PP + any2djvu localfile.pdf + .SH AUTHORS