From a52e8e3eff16eee65c3141de2d3e2c0a836957b3 Mon Sep 17 00:00:00 2001 From: programmer12 <964969108@qq.com> Date: Thu, 1 Jul 2021 09:53:02 +0800 Subject: [PATCH] fix CVE-2021-32493 CVE-2021-3500 --- djvulibre.spec | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/djvulibre.spec b/djvulibre.spec index ef4cbb2..2deff10 100644 --- a/djvulibre.spec +++ b/djvulibre.spec @@ -1,7 +1,7 @@ Name: djvulibre Summary: An open source (GPL'ed) implementation of DjVu Version: 3.5.27 -Release: 16 +Release: 17 License: GPLv2+ URL: http://djvu.sourceforge.net/ Source0: http://downloads.sourceforge.net/djvu/djvulibre-%{version}.tar.gz @@ -15,6 +15,8 @@ Patch6: update-any2djvu-server-hostname.patch Patch7: CVE-2021-32490.patch Patch8: CVE-2021-32491.patch Patch9: CVE-2021-32492.patch +Patch10: CVE-2021-32493.patch +Patch11: CVE-2021-3500.patch Requires(post): xdg-utils Requires(preun): xdg-utils BuildRequires: libjpeg-turbo-devel libtiff-devel xdg-utils chrpath hicolor-icon-theme gcc-c++ @@ -97,8 +99,11 @@ rm -f %{_datadir}/icons/hicolor/32x32/apps/djvulibre-djview3.png || : %{_mandir}/man1/* %changelog +* Wed Jun 30 2021 liwu - 3.5.27-17 +* Fix CVE-2021-32493 CVE-2021-3500 + * Wed Jun 30 2021 liwu - 3.5.27-16 -* fix CVE-2021-32490, CVE-2021-32491, CVE-2021-32492 +* Fix CVE-2021-32490, CVE-2021-32491, CVE-2021-32492 * Thu Jan 28 2021 lingsheng - 3.5.27-15 - update any2djvu server hostname