!3 fix CVE-2020-12762

Merge pull request !3 from long_wddddd/master
2020-05-22 15:31:20 +08:00 · 2020-05-22 15:31:20 +08:00 · 14ad4260b3
commit 14ad4260b3
parent 8e2fa8a679 1bf4d295a3
2 changed files with 220 additions and 1 deletions
--- a/CVE-2020-12762.patch
+++ b/CVE-2020-12762.patch
--- a/json-c.spec
+++ b/json-c.spec
@ -6,7 +6,7 @@

 Name:           json-c
 Version:        0.13.1
-Release:        6
+Release:        7
 Summary:        JSON implementation in C

 License:        MIT
@ -26,6 +26,7 @@ Patch6004:      0002-Issue-486-append-a-missing-.0-to-negative-double-val.patch

 Patch9000:      bugfix-json-c-support_aarch64.patch
 Patch6005:	json-c-bugfix-against-INT64_MAX.patch
+Patch6006:	CVE-2020-12762.patch
 BuildRequires:  libtool

 %description
@ -109,6 +110,9 @@ end
 %doc %{_pkgdocdir}

 %changelog
+* Fri May 22 2020 ruanweidong <ruanweidong1@huawei.com> - 0.13.1-7
+- fix CVE-2020-12762
+
 * Sat Mar 21 2020 songnannan <songnannan2@huawei.com> - 0.13.1-6
 - delete the check