diff --git a/SPECS/libX11.spec b/SPECS/libX11.spec index 2bf1f9c..6e27686 100644 --- a/SPECS/libX11.spec +++ b/SPECS/libX11.spec @@ -5,7 +5,7 @@ Summary: Core X11 protocol client library Name: libX11 Version: 1.6.8 -Release: 3%{?gitdate:.%{gitdate}git%{gitversion}}%{?dist} +Release: 4%{?gitdate:.%{gitdate}git%{gitversion}}%{?dist} License: MIT Group: System Environment/Libraries URL: http://www.x.org @@ -22,6 +22,9 @@ Patch2: dont-forward-keycode-0.patch Patch3: 0001-Fix-XTS-regression-in-XCopyColormapAndFree.patch Patch4: 0001-Fix-poll_for_response-race-condition.patch +# CVE-2020-14363 +Patch5: 0001-Fix-an-integer-overflow-in-init_om.patch + BuildRequires: xorg-x11-util-macros >= 1.11 BuildRequires: pkgconfig(xproto) >= 7.0.15 BuildRequires: xorg-x11-xtrans-devel >= 1.0.3-4 @@ -64,6 +67,7 @@ libX11/libxcb interoperability library %patch2 -p1 -b .dont-forward-keycode-0 %patch3 -p1 -b .copycolormapandfree %patch4 -p1 -b .race +%patch5 -p1 -b .fix-an-integer-overflow-in-init_om %build autoreconf -v --install --force @@ -128,6 +132,9 @@ make %{?_smp_mflags} check %{_mandir}/man5/*.5* %changelog +* Tue Nov 3 2020 Michel Dänzer - 1.6.8-4 +- Fix CVE-2020-14363 (#1873923) + * Mon Feb 24 2020 Adam Jackson - 1.6.8-3 - Fix race condition in poll_for_reponse