Browse code

update ncurses and fix CVEs

Change-Id: I5064dfb417a4b36ed2c07a7fbb6238ceb14f4683
Reviewed-on: http://photon-jenkins.eng.vmware.com:8082/4020
Tested-by: gerrit-photon <photon-checkins@vmware.com>
Reviewed-by: Sharath George

Bo Gan authored on 2017/10/11 09:07:03
Showing 1 changed files
... ...
@@ -1,15 +1,15 @@
1 1
 Summary:	Libraries for terminal handling of character screens
2 2
 Name:		ncurses
3 3
 Version:	6.0
4
-Release:	11%{?dist}
4
+Release:	12%{?dist}
5 5
 License:	MIT
6
-URL:		http://www.gnu.org/software/ncurses
6
+URL:		http://invisible-island.net/ncurses/
7 7
 Group:		Applications/System
8 8
 Vendor:		VMware, Inc.
9 9
 Distribution: 	Photon
10
-Source0:	ftp://ftp.gnu.org/gnu/ncurses/%{name}-%{version}.tar.gz
11
-%define sha1 ncurses=acd606135a5124905da770803c05f1f20dd3b21c
12
-Patch0:		CVE-2017-10684-CVE-2017-10685.patch
10
+%global ncursessubversion 20171007
11
+Source0:	ftp://ftp.invisible-island.net/ncurses/current/%{name}-%{version}-20171007.tgz
12
+%define sha1 ncurses=527be8da26f04f50c1d659e972fa7d0b762c3a80
13 13
 Requires:	ncurses-libs = %{version}-%{release}
14 14
 %description
15 15
 The Ncurses package contains libraries for terminal-independent
... ...
@@ -46,8 +46,8 @@ Requires:	%{name} = %{version}-%{release}
46 46
 It contains all terminfo files
47 47
 
48 48
 %prep
49
-%setup -q
50
-%patch0 -p1
49
+%setup -q -n %{name}-%{version}-%{ncursessubversion}
50
+
51 51
 %build
52 52
 mkdir v6
53 53
 pushd v6
... ...
@@ -183,6 +183,9 @@ make
183 183
 %exclude %{_datadir}/terminfo/l/linux
184 184
 
185 185
 %changelog
186
+*   Tue Oct 10 2017 Bo Gan <ganb@vmware.com> 6.0-12
187
+-   version bump to 20171007
188
+-   Fix for CVE-2017-11112, CVE-2017-11113 and CVE-2017-13728
186 189
 *   Fri Sep 15 2017 Xiaolin Li <xiaolinl@vmware.com> 6.0-11
187 190
 -   ncurses-devel provides pkgconfig(ncurses)
188 191
 *   Thu Aug 10 2017 Bo Gan <ganb@vmware.com> 6.0-10