packages/shapelib
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix CVE-2022-0699

Browse Source 
reset author
This commit is contained in:
phluo 2022-08-17 18:35:48 +08:00
parent b291275352
commit c8d0cd4690
2 changed files with 16 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
CVE-2022-0699.patch Normal file
View File

@ -0,0 +1,10 @@
--- a/contrib/shpsort.c 2022-08-17 14:48:59.276669116 +0800
+++ b/contrib/shpsort.c 2022-08-17 14:49:22.836834517 +0800
@@ -279,7 +279,6 @@
free(result[--i]);
}
free(result);
- free(copy);
return NULL;
}
result = tmp;

7
shapelib.spec
View File

@ -1,12 +1,14 @@
Name: shapelib Name: shapelib
Version: 1.5.0 Version: 1.5.0
Release: 1 Release: 2
Summary: A Shapefile C Library Summary: A Shapefile C Library
License: (LGPLv2+ or MIT) and GPLv2+ and Public Domain License: (LGPLv2+ or MIT) and GPLv2+ and Public Domain
URL: http://shapelib.maptools.org/ URL: http://shapelib.maptools.org/
Source0: http://download.osgeo.org/shapelib/%{name}-%{version}.tar.gz Source0: http://download.osgeo.org/shapelib/%{name}-%{version}.tar.gz
Source1: https://salsa.debian.org/debian-gis-team/shapelib/-/archive/master/shapelib-master.tar.gz Source1: https://salsa.debian.org/debian-gis-team/shapelib/-/archive/master/shapelib-master.tar.gz
Patch0: CVE-2022-0699.patch
BuildRequires: automake autoconf libtool gcc-c++ make BuildRequires: automake autoconf libtool gcc-c++ make
BuildRequires: rubygem-ronn-ng BuildRequires: rubygem-ronn-ng
@ -72,6 +74,9 @@ install -pm 0644 man/*.1 %{buildroot}%{_mandir}/man1/
%{_mandir}/man1/*.1* %{_mandir}/man1/*.1*
%changelog %changelog
* Wed Aug 17 2022 luopihui <luopihui@ncti-gba.cn> - 1.5.0-2
- Fix CVE-2022-0699
* Tue Feb 15 2022 xu_ping <xuping33@huawei.com> - 1.5.0-1 * Tue Feb 15 2022 xu_ping <xuping33@huawei.com> - 1.5.0-1
- Upgrage 1.5.0 - Upgrage 1.5.0