From 4a4e46d51039afc5ba2752104ba3ba44e12ad2e6c4179ea870ad1e4f9fed0ac1 Mon Sep 17 00:00:00 2001 From: Petr Gajdos Date: Tue, 22 Feb 2022 08:25:02 +0000 Subject: [PATCH] - security update - deleted patches - apr-CVE-2021-3594.patch (renamed) - added patches + apr-CVE-2021-35940.patch (correct name) fix CVE-2021-35940 [bsc#1190072], Regression of fix in apr 1.7 + apr-CVE-2021-35940.patch OBS-URL: https://build.opensuse.org/package/show/Apache/apr?expand=0&rev=38 --- apr-CVE-2021-3594.patch => apr-CVE-2021-35940.patch | 0 apr.changes | 12 ++++++++++-- apr.spec | 4 ++-- 3 files changed, 12 insertions(+), 4 deletions(-) rename apr-CVE-2021-3594.patch => apr-CVE-2021-35940.patch (100%) diff --git a/apr-CVE-2021-3594.patch b/apr-CVE-2021-35940.patch similarity index 100% rename from apr-CVE-2021-3594.patch rename to apr-CVE-2021-35940.patch diff --git a/apr.changes b/apr.changes index 5a0742f..914abc7 100644 --- a/apr.changes +++ b/apr.changes @@ -1,3 +1,11 @@ +------------------------------------------------------------------- +Tue Feb 22 08:22:54 UTC 2022 - pgajdos@suse.com + +- deleted patches + - apr-CVE-2021-3594.patch (renamed) +- added patches + + apr-CVE-2021-35940.patch (correct name) + ------------------------------------------------------------------- Tue Oct 19 14:34:24 UTC 2021 - pgajdos@suse.com @@ -8,8 +16,8 @@ Thu Sep 2 07:15:59 UTC 2021 - pgajdos@suse.com - security update - added patches - fix CVE-2021-3594 [bsc#1187367], invalid pointer initialization may lead to information disclosure (udp) - + apr-CVE-2021-3594.patch + fix CVE-2021-35940 [bsc#1190072], Regression of fix in apr 1.7 + + apr-CVE-2021-35940.patch ------------------------------------------------------------------- Sat Aug 3 14:11:24 UTC 2019 - Manu Maier diff --git a/apr.spec b/apr.spec index baf14a2..eb5d903 100644 --- a/apr.spec +++ b/apr.spec @@ -1,7 +1,7 @@ # # spec file for package apr # -# Copyright (c) 2021 SUSE LLC +# Copyright (c) 2022 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -35,7 +35,7 @@ Patch9: apr-proc-mutex-map-anon.patch # prevent random failures of the testsuite (sendfile test) Patch10: apr-test-sendfile-timeout.patch # CVE-2021-3594 [bsc#1187367], invalid pointer initialization may lead to information disclosure (udp) -Patch11: apr-CVE-2021-3594.patch +Patch11: apr-CVE-2021-35940.patch BuildRequires: doxygen BuildRequires: fdupes BuildRequires: libtool