Sync from SUSE:SLFO:Main netpbm revision 7ddafec2486479389b28511b75c29981

2024-08-06 11:57:18 +02:00
2 changed files with 10 additions and 2 deletions
--- a/netpbm.changes
+++ b/netpbm.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Fri Jul 12 10:35:11 UTC 2024 - pgajdos@suse.com
+
+- fix CVE-2024-38526 [bsc#1227693] Polyfill Supplay Chain Attack
+
 -------------------------------------------------------------------
 Fri Feb  2 14:11:02 UTC 2024 - pgajdos@suse.com

--- a/netpbm.spec
+++ b/netpbm.spec
@@ -117,9 +117,12 @@ export LDFLAGS="$LDFLAGS -fsanitize=undefined"
 %endif
 make %{?_smp_mflags} CFLAGS="$CFLAGS"
 rm doc/INSTALL
-#
-# convert html to man pages
+# DOC
 cd netpbm.sourceforge.net/doc
+# CVE-2024-38526
+# notified upstream on 2024-07-12
+sed -i 's/polyfill.io/cdnjs.cloudflare.com/' pamhomography.html
+# convert html to man pages
 ../../buildtools/makeman *.html
 for i in 1 3 5 ; do
  mkdir -p ../../man/man${i}