From 0d9229a95ede05e8fbfa9b748a4843bc9a26d9f0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Daniel=20P=2E=20Berrang=C3=A9?= Date: Thu, 25 Jan 2024 10:06:24 +0000 Subject: [PATCH] Update spec to add two previous CVE patches MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Daniel P. Berrangé --- ...ci-Resolve-leak-in-virPCIVirtualFunctionList-cle.patch | 0 libvirt.spec | 8 +++++++- 2 files changed, 7 insertions(+), 1 deletion(-) rename 0003-virpci-Resolve-leak-in-virPCIVirtualFunctionList-cle.patch => 0004-virpci-Resolve-leak-in-virPCIVirtualFunctionList-cle.patch (100%) diff --git a/0003-virpci-Resolve-leak-in-virPCIVirtualFunctionList-cle.patch b/0004-virpci-Resolve-leak-in-virPCIVirtualFunctionList-cle.patch similarity index 100% rename from 0003-virpci-Resolve-leak-in-virPCIVirtualFunctionList-cle.patch rename to 0004-virpci-Resolve-leak-in-virPCIVirtualFunctionList-cle.patch diff --git a/libvirt.spec b/libvirt.spec index a63524b..0cda2c8 100644 --- a/libvirt.spec +++ b/libvirt.spec @@ -229,7 +229,7 @@ Summary: Library providing a simple virtualization API Name: libvirt Version: 9.0.0 -Release: 3%{?dist} +Release: 4%{?dist} License: LGPLv2+ URL: https://libvirt.org/ @@ -243,6 +243,9 @@ Patch0001: 0001-qemuProcessRefreshDisks-Don-t-skip-filling-of-disk-i.patch # Fix curl API deprecation error Patch0002: 0002-ch-use-CURLOPT_UPLOAD-instead-of-CURLOPT_PUT.patch +Patch0003: 0003-storage-Fix-returning-of-locked-objects-from-virStor.patch +Patch0004: 0004-virpci-Resolve-leak-in-virPCIVirtualFunctionList-cle.patch + Requires: libvirt-daemon = %{version}-%{release} Requires: libvirt-daemon-config-network = %{version}-%{release} Requires: libvirt-daemon-config-nwfilter = %{version}-%{release} @@ -2315,6 +2318,9 @@ exit 0 %changelog +* Thu Jan 25 2024 Daniel P. Berrangé - 9.0.0-4 +- Fix CVE-2023-3750 and CVE-2023-2700 + * Sun May 07 2023 Cole Robinson - 9.0.0-3 - Fix 'Tray of device is not open' error when changing CDROM (bz #2163117) - Fix curl API deprecation error