Fix CVE-2014-4607 by upgrading to minilzo 2.08

Patch from upstream svn.

Signed-off-by: Andy Grover <agrover@redhat.com>

distcc.spec

@@ -6,7 +6,7 @@
 
 Name:       distcc
 Version:    3.2rc1
-Release:    3%{?dist}
+Release:    4%{?dist}
 Summary:    Distributed C/C++ compilation
 Group:      Development/Tools
 License:    GPLv2+
@@ -15,6 +15,7 @@ Source0:    http://distcc.googlecode.com/files/distcc-%{version}.tar.bz2
 Source1:    hosts.sample
 Source2:    distccd.service
 #Patch0:     distcc-2.18.3-avahi.patch
+Patch0:     distcc-minilzo-2.08.patch
 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 
 BuildRequires: popt-devel
@@ -51,6 +52,7 @@ This package contains the compilation server needed to use %{name}.
 %prep
 %setup -q
 #%%patch0 -p1 -b .avahi
+%%patch0 -p1
 
 
 %build
@@ -156,6 +158,9 @@ rm -rf $RPM_BUILD_ROOT
 %{python_sitearch}/include_server*
 
 %changelog
+* Wed Aug 20 2014 Andy Grover <agrover@redhat.com> - 3.2rc1-4
+- Add patch distcc-minilzo-2.08.patch, to fix CVE-2014-4607 (BZ 1131791)
+
 * Thu May 16 2013 Jon Ciesla <limburgher@gmail.com> - 3.2rc1-3
 - chmod -x .service, BZ 963912