Browse Source

avahi-0.8-3

Tomohiro "Tomo-p" KATO 2 years ago
parent
commit
0b654bb8b1
1 changed files with 6 additions and 1 deletions
  1. 6 1
      a/avahi/avahi-vl.spec

+ 6 - 1
a/avahi/avahi-vl.spec

@@ -9,7 +9,7 @@ Summary:        Local network service discovery
 Summary(ja):	ローカルネットワークサービス検出システム
 Name:           avahi
 Version:        0.8
-Release:        2%{?_dist_release}%{?with_systemd:.systemd}
+Release:        3%{?_dist_release}%{?with_systemd:.systemd}
 Group:          system
 Vendor:         Project Vine
 Distribution:   Vine Linux
@@ -28,7 +28,9 @@ Patch11:        0011-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
 
 Patch1000:      avahi-0.6.31-vine.patch
 
+# this patch also fixes CVE-2021-36217.
 Patch2000:      CVE-2021-3502.patch
+Patch2001:      CVE-2021-3468.patch
 
 BuildRoot:      %{_tmppath}/%{name}-%{version}-root
 BuildRequires:  dbus-devel, dbus-glib-devel
@@ -564,6 +566,9 @@ fi
 
 
 %changelog
+* Tue Jul 13 2021 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 0.8-3
+- imported Patch2001 from upstream PR to fix CVE-2021-3468.
+
 * Fri Jun 04 2021 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 0.8-2
 - imported Patch2000 from upstream PR to fix CVE-2021-3502.
 - dropped ldconfig scriptlets.