From 96889ef71d873655037141792485f64724372c45 Mon Sep 17 00:00:00 2001
From: Remi Collet <remi@remirepo.net>
Date: Thu, 28 Sep 2023 15:19:44 +0200
Subject: add upstream patched with fix for CVE-2023-4863

---
 libwebp.spec | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

(limited to 'libwebp.spec')

diff --git a/libwebp.spec b/libwebp.spec
index d7ad82e..d5e20fc 100644
--- a/libwebp.spec
+++ b/libwebp.spec
@@ -21,14 +21,18 @@ Name:          %{libname}
 Name:          %{libname}%{soname}
 %endif
 Version:       1.0.3
-Release:       1%{?dist}
+Release:       2%{?dist}
 URL:           http://webmproject.org/
 Summary:       Library and tools for the WebP graphics format
 # Additional IPR is licensed as well. See PATENTS file for details
-License:       BSD
+License:       BSD-3-Clause
 Source0:       http://downloads.webmproject.org/releases/webp/%{libname}-%{version}.tar.gz
 Source1:       libwebp_jni_example.java
 
+# Upstream patches since release
+# https://github.com/webmproject/libwebp/commits/1.0.3
+Patch0:        libwebp-upstream.patch
+
 BuildRequires: libjpeg-devel
 BuildRequires: libpng-devel
 BuildRequires: giflib-devel
@@ -107,6 +111,7 @@ Java bindings for libwebp.
 
 %prep
 %setup -q -n %{libname}-%{version}
+%patch -P0 -p1 -b .up
 
 
 %build
@@ -194,6 +199,9 @@ cp swig/*.jar swig/*.so %{buildroot}/%{_libdir}/%{name}-java/
 
 
 %changelog
+* Thu Sep 28 2023 Remi Collet <remi@remirepo.net> - 1.0.3-2
+- add upstream patched with fix for CVE-2023-4863
+
 * Fri Jan  3 2020 Remi Collet <remi@remirepo.net> - 1.0.3-1
 - update to 1.0.3
 
-- 
cgit