From 5d986813446ae9fd11b7f6c4e827601345221d3fe4b839615b1ec2b709d5a585 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Adrian=20Schr=C3=B6ter?= <adrian@suse.de>
Date: Tue, 6 Aug 2024 11:57:18 +0200
Subject: [PATCH] Sync from SUSE:SLFO:Main netpbm revision
 7ddafec2486479389b28511b75c29981

---
 netpbm.changes | 5 +++++
 netpbm.spec    | 7 +++++--
 2 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/netpbm.changes b/netpbm.changes
index ce8f5e7..fdb9250 100644
--- a/netpbm.changes
+++ b/netpbm.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Fri Jul 12 10:35:11 UTC 2024 - pgajdos@suse.com
+
+- fix CVE-2024-38526 [bsc#1227693] Polyfill Supplay Chain Attack
+
 -------------------------------------------------------------------
 Fri Feb  2 14:11:02 UTC 2024 - pgajdos@suse.com
 
diff --git a/netpbm.spec b/netpbm.spec
index 1450a9c..613b550 100644
--- a/netpbm.spec
+++ b/netpbm.spec
@@ -117,9 +117,12 @@ export LDFLAGS="$LDFLAGS -fsanitize=undefined"
 %endif
 make %{?_smp_mflags} CFLAGS="$CFLAGS"
 rm doc/INSTALL
-#
-# convert html to man pages
+# DOC
 cd netpbm.sourceforge.net/doc
+# CVE-2024-38526
+# notified upstream on 2024-07-12
+sed -i 's/polyfill.io/cdnjs.cloudflare.com/' pamhomography.html
+# convert html to man pages
  ../../buildtools/makeman *.html
 for i in 1 3 5 ; do
   mkdir -p ../../man/man${i}