Browse code

Updated to 4.13.0.2 to fix CVE-2017-7500

Change-Id: I47a5dd411c924791f1b7c6e0fbd59ca1e2b2bf8b
Reviewed-on: http://photon-jenkins.eng.vmware.com:8082/6093
Tested-by: gerrit-photon <photon-checkins@vmware.com>
Reviewed-by: Anish Swaminathan <anishs@vmware.com>

smaliakkal authored on 2018/11/03 08:36:53
Showing 1 changed files
... ...
@@ -3,21 +3,20 @@
3 3
 
4 4
 Summary:        Package manager
5 5
 Name:           rpm
6
-Version:        4.13.0.1
7
-Release:        7%{?dist}
6
+Version:        4.13.0.2
7
+Release:        1%{?dist}
8 8
 License:        GPLv2+
9 9
 URL:            http://rpm.org
10 10
 Group:          Applications/System
11 11
 Vendor:         VMware, Inc.
12 12
 Distribution:   Photon
13 13
 Source0:        https://github.com/rpm-software-management/rpm/archive/%{name}-%{version}-release.tar.gz
14
-%define sha1    rpm=2119489397d7e4da19320ef9330ab717ac05587d
14
+%define sha1    rpm=ea4fa30075519d37e04d6f54e89917042f5c55e0
15 15
 Source1:        macros
16 16
 Source2:        brp-strip-debug-symbols
17 17
 Source3:        brp-strip-unneeded
18 18
 Patch0:         find-debuginfo-do-not-generate-non-existing-build-id.patch
19 19
 Patch1:         find-debuginfo-do-not-generate-dir-entries.patch
20
-Patch2:         rpm-CVE-2017-7501.patch
21 20
 Requires:       bash
22 21
 Requires:       libdb
23 22
 Requires:       rpm-libs = %{version}-%{release}
... ...
@@ -89,7 +88,6 @@ Python3 rpm.
89 89
 %setup -n rpm-%{name}-%{version}-release
90 90
 %patch0 -p1
91 91
 %patch1 -p1
92
-%patch2 -p1
93 92
 
94 93
 %build
95 94
 sed -i '/define _GNU_SOURCE/a #include "../config.h"' tools/sepdebugcrcfix.c
... ...
@@ -260,6 +258,8 @@ rm -rf %{buildroot}
260 260
 %{python3_sitelib}/*
261 261
 
262 262
 %changelog
263
+*   Fri Nov 02 2018 Siju Maliakkal <smaliakkal@vmware.com> 4.13.0.2-1
264
+-   Updated to 4.13.0.2 to fix CVE-2017-7500
263 265
 *   Thu Dec 21 2017 Xiaolin Li <xiaolinl@vmware.com> 4.13.0.1-7
264 266
 -   Fix CVE-2017-7501
265 267
 *   Wed Oct 04 2017 Alexey Makhalov <amakhalov@vmware.com> 4.13.0.1-6