From 154836641d9c35f7976f79da7a8e8de032c53006 Mon Sep 17 00:00:00 2001
From: Jan Kaluza <jkaluza@redhat.com>
Date: Fri, 22 Aug 2014 07:54:17 +0200
Subject: [PATCH] fix #1132787 - CVE-2014-3587

---
 file.spec | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/file.spec b/file.spec
index b03f26f..8d72650 100644
--- a/file.spec
+++ b/file.spec
@@ -4,7 +4,7 @@
 Summary: A utility for determining file types
 Name: file
 Version: 5.19
-Release: 1%{?dist}
+Release: 2%{?dist}
 License: BSD
 Group: Applications/File
 Source0: ftp://ftp.astron.com/pub/file/file-%{version}.tar.gz
@@ -18,6 +18,7 @@ Patch5: file-5.04-man-return-code.patch
 Patch6: file-5.04-generic-msdos.patch
 Patch7: file-5.14-x86boot.patch
 Patch8: file-5.14-perl.patch
+Patch9: file-5.19-CVE-2014-3587.patch
 URL: http://www.darwinsys.com/file/
 Requires: file-libs = %{version}-%{release}
 BuildRequires: zlib-devel
@@ -86,6 +87,7 @@ file(1) command.
 %patch6 -p1
 %patch7 -p1
 %patch8 -p1
+%patch9 -p1
 
 # Patches can generate *.orig files, which can't stay in the magic dir,
 # otherwise there will be problems with compiling magic file!
@@ -186,6 +188,9 @@ cd %{py3dir}
 %endif
 
 %changelog
+* Fri Aug 22 2014 Jan Kaluza <jkaluza@redhat.com> - 5.19-2
+- fix #1132787 - CVE-2014-3587
+
 * Wed Jun 25 2014 Jan Kaluza <jkaluza@redhat.com> - 5.19-1
 - fix #1011789 - update to version 5.19