diff --git a/backport-CVE-2023-43641.patch b/backport-CVE-2023-43641.patch deleted file mode 100644 index 2104238..0000000 --- a/backport-CVE-2023-43641.patch +++ /dev/null @@ -1,27 +0,0 @@ -From fdf72c8bded8d24cfa0608b8e97f2eed210a920e Mon Sep 17 00:00:00 2001 -From: Kevin Backhouse -Date: Wed, 27 Sep 2023 20:22:43 +0100 -Subject: [PATCH] Check that the array index isn't negative. This fixes - CVE-2023-43641. - -Signed-off-by: Kevin Backhouse ---- - cd.c | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/cd.c b/cd.c -index cf77a18..4bbea19 100644 ---- a/cd.c -+++ b/cd.c -@@ -339,7 +339,7 @@ track_get_rem(const Track* track) - - void track_set_index(Track *track, int i, long ind) - { -- if (i > MAXINDEX) { -+ if (i < 0 || i > MAXINDEX) { - fprintf(stderr, "too many indexes\n"); - return; - } --- -2.41.0.windows.3 - diff --git a/libcue-2.2.1.tar.gz b/libcue-2.2.1.tar.gz deleted file mode 100644 index 8df911b..0000000 Binary files a/libcue-2.2.1.tar.gz and /dev/null differ diff --git a/libcue.spec b/libcue.spec index 03cc067..f773fd9 100644 --- a/libcue.spec +++ b/libcue.spec @@ -1,13 +1,12 @@ Name: libcue -Version: 2.2.1 -Release: 2 +Version: 2.3.0 +Release: 1 Summary: Cue sheet parser library License: GPLv2 and BSD URL: https://github.com/lipnitsk/%{name} -Source0: https://github.com/lipnitsk/%{name}/archive/v%{version}/%{name}-%{version}.tar.gz +Source0: %{url}/archive/refs/tags/v%{version}.tar.gz -Patch0: backport-CVE-2023-43641.patch BuildRequires: bison BuildRequires: cmake @@ -63,6 +62,9 @@ make test %{_libdir}/pkgconfig/%{name}.pc %changelog +* Thu Dec 28 2023 Paul Thomas - 2.3.0-1 +- update to version 2.3.0 + * Tue Oct 10 2023 liningjie - 2.2.1-2 - Fix CVE-2023-43641 diff --git a/v2.3.0.tar.gz b/v2.3.0.tar.gz new file mode 100644 index 0000000..5653471 Binary files /dev/null and b/v2.3.0.tar.gz differ