Compare commits

...

10 Commits

Author SHA1 Message Date
openeuler-ci-bot
7dbd199c07
!11 fix CVE-2022-0699
From: @phluo 
Reviewed-by: @SuperSix173 
Signed-off-by: @SuperSix173
2022-08-17 10:47:40 +00:00
phluo
c8d0cd4690 Fix CVE-2022-0699
reset author
2022-08-17 18:35:48 +08:00
openeuler-ci-bot
b291275352
!8 【轻量级 PR】:fix bogus date in %changelog
From: @zhangkea 
Reviewed-by: @liqingqing_1229 
Signed-off-by: @liqingqing_1229
2022-06-20 00:56:51 +00:00
zhangkea
cc93083ce7 fix bogus date in %changelog 2022-06-17 16:16:11 +08:00
openeuler-ci-bot
ae91efd821
!5 [sync] PR-4: Upgrage shapelib 1.5.0
From: @openeuler-sync-bot 
Reviewed-by: @liqingqing_1229 
Signed-off-by: @liqingqing_1229
2022-04-18 01:59:08 +00:00
cherry530
47a38cb8c3 Upgrade 1.5.0
Signed-off-by: cherry530 <xuping33@huawei.com>
(cherry picked from commit 17cfc0a818e60699bf01fac93c01a90016931b47)
2022-02-17 09:14:37 +08:00
openeuler-ci-bot
8c0cc4617b !2 Switch ronn-ng to disable ronn
From: @hht8
Reviewed-by: @SuperSix173
Signed-off-by: @SuperSix173
2021-02-08 17:03:41 +08:00
hht8
02da18dfa8 Switch ronn-ng to disable ronn 2021-02-08 16:18:27 +08:00
openeuler-ci-bot
068baed8cb !1 package init
Merge pull request !1 from gu-gu-gu/gu
2020-02-28 11:37:05 +08:00
gu-gu-gu
bd01e7dfd1 package init 2020-02-14 11:29:21 +08:00
4 changed files with 97 additions and 0 deletions

10
CVE-2022-0699.patch Normal file
View File

@ -0,0 +1,10 @@
--- a/contrib/shpsort.c 2022-08-17 14:48:59.276669116 +0800
+++ b/contrib/shpsort.c 2022-08-17 14:49:22.836834517 +0800
@@ -279,7 +279,6 @@
free(result[--i]);
}
free(result);
- free(copy);
return NULL;
}
result = tmp;

BIN
shapelib-1.5.0.tar.gz Normal file

Binary file not shown.

BIN
shapelib-master.tar.gz Normal file

Binary file not shown.

87
shapelib.spec Normal file
View File

@ -0,0 +1,87 @@
Name: shapelib
Version: 1.5.0
Release: 2
Summary: A Shapefile C Library
License: (LGPLv2+ or MIT) and GPLv2+ and Public Domain
URL: http://shapelib.maptools.org/
Source0: http://download.osgeo.org/shapelib/%{name}-%{version}.tar.gz
Source1: https://salsa.debian.org/debian-gis-team/shapelib/-/archive/master/shapelib-master.tar.gz
Patch0: CVE-2022-0699.patch
BuildRequires: automake autoconf libtool gcc-c++ make
BuildRequires: rubygem-ronn-ng
Provides: %{name}-tools = %{version}-%{release}
Obsoletes: %{name}-tools < %{version}-%{release}
%description
The Shapefile C Library provides the ability to write simple C
programs for reading, writing and updating (to a limited extent) ESRI
Shapefiles, and the associated attribute file (.dbf). This package
also contains various utility programs for using shapelib.
%package devel
Summary: Development files for shapelib
Requires: %{name} = %{version}-%{release}
%description devel
The shapelib-devel package contains development files for applications
that use shapelib.
%package help
Summary: Documents for shapelib
%description help
The shape-lib-help package contains related documents.
%prep
%autosetup -n %{name}-%{version} -a1 -p1
%build
autoreconf -ifv
tar --strip-components=2 -xvf %{SOURCE1} shapelib-master/debian/man
%configure --disable-static
%make_build
%install
%make_install
%delete_la
ronn -r --date="$(LC_ALL=C date -u "+%Y-%m-%d")" --manual=%{name} man/*.md
install -d %{buildroot}%{_mandir}/man1/
install -pm 0644 man/*.1 %{buildroot}%{_mandir}/man1/
%post -p /sbin/ldconfig
%postun -p /sbin/ldconfig
%files
%license COPYING
%{_bindir}/*
%{_libdir}/libshp.so.2*
%files devel
%{_includedir}/shapefil.h
%{_libdir}/libshp.so
%{_libdir}/pkgconfig/%{name}.pc
%files help
%doc README README.tree ChangeLog web/*.html
%doc contrib/doc/
%{_mandir}/man1/*.1*
%changelog
* Wed Aug 17 2022 luopihui <luopihui@ncti-gba.cn> - 1.5.0-2
- Fix CVE-2022-0699
* Tue Feb 15 2022 xu_ping <xuping33@huawei.com> - 1.5.0-1
- Upgrage 1.5.0
* Fri Feb 07 2020 huanghaitao <huanghaitao8@huawei.com> - 1.4.1-9
- Swith rubygem-ronn-ng to drop rubygem-ronn
* Fri Feb 14 2020 gulining<gulining1@huawei.com> - 1.4.1-8
- Package init