[arch-commits] Commit in bzip2/trunk (PKGBUILD)

[Ronald van Haren]

    Date: Thursday, February 8, 2018 @ 10:29:48
  Author: ronald
Revision: 316224

upgpkg: bzip2 1.0.6-7

fix build issue FS#57421: Download patch attachment from Redhat Bugzilla fails

Modified:
  bzip2/trunk/PKGBUILD

----------+
 PKGBUILD |    8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2018-02-08 10:20:38 UTC (rev 316223)
+++ PKGBUILD	2018-02-08 10:29:48 UTC (rev 316224)
@@ -4,7 +4,7 @@
 
 pkgname=bzip2
 pkgver=1.0.6
-pkgrel=6
+pkgrel=7
 pkgdesc="A high-quality data compression program"
 arch=('x86_64')
 license=('custom')
@@ -13,11 +13,10 @@
 depends=('glibc' 'sh')
 source=(http://www.bzip.org/$pkgver/bzip2-$pkgver.tar.gz
         bzip2-1.0.4-bzip2recover.patch
-        fix-heap-use-after-free-bzip2recover.patch::https://bugzilla.redhat.com/attachment.cgi?id=1169843)
+        fix-heap-use-after-free-bzip2recover.patch::https://gitweb.gentoo.org/repo/gentoo.git/plain/app-arch/bzip2/files/bzip2-1.0.6-CVE-2016-3189.patch)
 sha1sums=('3f89f861209ce81a6bab1fd1998c0ef311712002'
           '85ce76fdb67f52f152bba368c1de81132dcdbdb5'
-          '9c078e00cc9103952d6117e23199c232e9ff56bc')
-
+          '95f6187491bcd980f869c6857a72edb3e43e1064')
 build() {
   cd "$srcdir/$pkgname-$pkgver"
 
@@ -29,6 +28,7 @@
   sed -i "s|-O2|${CFLAGS}|g" Makefile-libbz2_so
 
   patch -Np1 < ../bzip2-1.0.4-bzip2recover.patch
+  # CVE-2016-3189
   patch -Np1 -i "${srcdir}/fix-heap-use-after-free-bzip2recover.patch"
 
   make -f Makefile-libbz2_so