CVE-2019-18397.patch

@@ -0,0 +1,25 @@
+From 034c6e9a1d296286305f4cfd1e0072b879f52568 Mon Sep 17 00:00:00 2001
+From: Dov Grobgeld <dov.grobgeld@gmail.com>
+Date: Thu, 24 Oct 2019 09:37:29 +0300
+Subject: [PATCH] Truncate isolate_level to FRIBIDI_BIDI_MAX_EXPLICIT_LEVEL
+
+---
+ lib/fribidi-bidi.c | 4 +++-
+ 1 file changed, 3 insertions(+), 1 deletion(-)
+
+diff --git a/lib/fribidi-bidi.c b/lib/fribidi-bidi.c
+index 6c84392..d384878 100644
+--- a/lib/fribidi-bidi.c
++++ b/lib/fribidi-bidi.c
+@@ -747,7 +747,9 @@ fribidi_get_par_embedding_levels_ex (
+             }
+ 
+ 	  RL_LEVEL (pp) = level;
+-          RL_ISOLATE_LEVEL (pp) = isolate_level++;
++          RL_ISOLATE_LEVEL (pp) = isolate_level;
++          if (isolate_level < FRIBIDI_BIDI_MAX_EXPLICIT_LEVEL-1)
++              isolate_level++;
+           base_level_per_iso_level[isolate_level] = new_level;
+ 
+ 	  if (!FRIBIDI_IS_NEUTRAL (override))
+

fribidi.spec

@@ -1,12 +1,13 @@
 Name:           fribidi
-Version:        1.0.13
+Version:        1.0.5
-Release:        1
+Release:        4
 Summary:        Library implementing the Unicode Bidirectional Algorithm
 License:        LGPLv2+ and UCD
 URL:            https://github.com/fribidi/fribidi/
-Source:         https://github.com/%{name}/%{name}/releases/download/v%{version}/%{name}-%{version}.tar.xz
+Source:         https://github.com/%{name}/%{name}/releases/download/v%{version}/%{name}-%{version}.tar.bz2
 
-BuildRequires:  gcc meson
+BuildRequires:  gcc automake autoconf libtool
+Patch6000:      CVE-2019-18397.patch
 
 %description
 A library to handle bidirectional scripts (for example Hebrew, Arabic),
@@ -22,16 +23,17 @@ Include files and libraries needed for developing applications which use FriBidi
 
 %prep
 %autosetup -n %{name}-%{version} -p1
+autoreconf -i
 
 %build
-%meson -Ddocs=false
+%configure --disable-static --disable-docs
-%meson_build
+%make_build
 
 %check
-%meson_test
+make check
 
 %install
-%meson_install
+%make_install
 rm -f $RPM_BUILD_ROOT%{_libdir}/*.la
 
 %post -p /sbin/ldconfig
@@ -49,21 +51,9 @@ rm -f $RPM_BUILD_ROOT%{_libdir}/*.la
 %{_includedir}/fribidi
 %{_libdir}/libfribidi.so
 %{_libdir}/pkgconfig/*.pc
-#%%{_mandir}/man3/*.gz
+%{_mandir}/man3/*.gz
 
 %changelog
-* Wed Jul 19 2023 zhouwenpei <zhouwenpei1@h-partners.com> - 1.0.13-1
-- version update to 1.0.13
-
-* Sat Oct 29 2022 zhouwenpei <zhouwenpei1@h-partners.com> - 1.0.12-1
-- version update to 1.0.12
-
-* Wed Sep 14 2022 zhouwenpei <zhouwenpei1@h-partners.com> - 1.0.10-2
-- fix CVE-2022-25308,CVE-2022-25309,CVE-2022-25310
-
-* Mon Jul 20 2020 wangye <wangye70@huawei.com> - 1.0.10-1
-- version update to 1.0.10
-
 * Sun Jan 12 2020 zhangrui <zhangrui182@huawei.com> - 1.0.5-4
 - fix CVE-2019-18397
 

fribidi.yaml

@@ -1,4 +0,0 @@
-version_control: github
-src_repo: fribidi/fribidi
-tag_prefix: ^v
-seperator: .