Update to 8.0 for fix CVE-2024-5742

This commit is contained in:
starlet-dx 2024-06-18 10:01:51 +08:00
parent 64d86c1344
commit 182337e60d
3 changed files with 22 additions and 6 deletions

Binary file not shown.

BIN
nano-8.0.tar.xz Normal file

Binary file not shown.

View File

@ -1,10 +1,10 @@
Name: nano
Version: 7.2
Release: 2
Version: 8.0
Release: 1
Summary: Nano is a tiny GNU editor
License: GPLv3+
URL: https://www.nano-editor.org
Source0: https://www.nano-editor.org/dist/v7/%{name}-%{version}.tar.xz
Source0: https://www.nano-editor.org/dist/v8/%{name}-%{version}.tar.xz
BuildRequires: file-devel gettext-devel gcc ncurses-devel sed texinfo groff
Conflicts: filesystem < 3
@ -17,7 +17,6 @@ Nano is a tiny GNU editor
%prep
%autosetup -p1
%build
install -d build
cd build
@ -25,8 +24,7 @@ cd build
%configure
%make_build
sed -e 's/# set nowrap/set nowrap/' \
-e 's/^#.*set speller.*$/set speller "hunspell"/' \
sed -e 's/^#.*set speller.*$/set speller "hunspell"/' \
-e 's|^# \(include "/usr/share/nano/\*.nanorc"\)|\1|' \
doc/sample.nanorc >> ./nanorc
@ -39,6 +37,9 @@ rm -rf %{buildroot}%{_docdir}/nano/{nano,nano.1,nanorc.5,rnano.1}.html
install -d %{buildroot}%{_sysconfdir}
install -m 0644 ./nanorc %{buildroot}%{_sysconfdir}/nanorc
mv %{buildroot}%{_datadir}/nano/extra/* %{buildroot}%{_datadir}/nano
rm -rf %{buildroot}%{_datadir}/nano/extra
%find_lang %{name}
%files -f build/%{name}.lang
@ -60,6 +61,21 @@ install -m 0644 ./nanorc %{buildroot}%{_sysconfdir}/nanorc
%{_defaultdocdir}/nano/faq.html
%changelog
* Mon Jun 17 2024 yaoxin <yao_xin001@hoperun.com> - 8.0-1
- Update to 8.0
* CVE-2024-5742: Avoid privilege escalations via symlink attacks
on emergency save file (boo#1226099)
* By default ^F is bound to starting a forward search, and ^B to
starting a backward search, while M-F and M-B repeat the search
in the corresponding direction. (See the documentation if you
want the old bindings back.)
* Command-line option --modernbindings (-/) makes ^Q quit, ^X cut,
^C copy, ^V paste, ^Z undo, ^Y redo, ^O open a file, ^W write a file,
^R replace, ^G find again, ^D find again backwards, ^A set the mark,
^T jump to a line, ^P show the position, and ^E execute.
* For easier access, M-" is bound to placing/removing an anchor,
and M-' to jumping to the next anchor.
* Mon May 15 2023 misaka00251 <liuxin@iscas.ac.cn> - 7.2-2
- Fix bug when build using rpmbuild