Update spec to add two previous CVE patches

Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2024-01-25 10:06:24 +00:00
parent 1a8a55bf15
commit 0d9229a95e
2 changed files with 7 additions and 1 deletions
@@ -229,7 +229,7 @@
 Summary: Library providing a simple virtualization API
 Name: libvirt
 Version: 9.0.0
-Release: 3%{?dist}
+Release: 4%{?dist}
 License: LGPLv2+
 URL: https://libvirt.org/

@@ -243,6 +243,9 @@ Patch0001: 0001-qemuProcessRefreshDisks-Don-t-skip-filling-of-disk-i.patch
 # Fix curl API deprecation error
 Patch0002: 0002-ch-use-CURLOPT_UPLOAD-instead-of-CURLOPT_PUT.patch

+Patch0003: 0003-storage-Fix-returning-of-locked-objects-from-virStor.patch
+Patch0004: 0004-virpci-Resolve-leak-in-virPCIVirtualFunctionList-cle.patch
+
 Requires: libvirt-daemon = %{version}-%{release}
 Requires: libvirt-daemon-config-network = %{version}-%{release}
 Requires: libvirt-daemon-config-nwfilter = %{version}-%{release}
@@ -2315,6 +2318,9 @@ exit 0


 %changelog
+* Thu Jan 25 2024 Daniel P. Berrangé <berrange@redhat.com> - 9.0.0-4
+- Fix CVE-2023-3750 and CVE-2023-2700
+
 * Sun May 07 2023 Cole Robinson <crobinso@redhat.com> - 9.0.0-3
 - Fix 'Tray of device is not open' error when changing CDROM (bz #2163117)
 - Fix curl API deprecation error