1 files changed, 6 insertions, 1 deletions
diff --git a/glpi.spec b/glpi.spec
index 6cbbc99..95a1d4c 100644
--- a/glpi.spec
+++ b/glpi.spec
@@ -42,7 +42,7 @@
 Name:           %{gh_project}
 Version:        9.1.7.1
 %global schema  9.1.3
-Release:        2%{?dist}
+Release:        3%{?dist}
 Summary:        Free IT asset management software
 Summary(fr):    Gestion Libre de Parc Informatique
 
@@ -60,6 +60,7 @@ Source4:        %{name}-nginx.conf
 Source5:        %{name}-fedora-autoloader.php
 
 Patch0:         https://github.com/glpi-project/glpi/commit/3421ff97909c794839a731e68eb8910a8dea7cc2.patch
+Patch1:         https://github.com/glpi-project/glpi/commit/3391f10eacec880aebcd4297bd2658ae13473947.patch
 
 BuildArch:      noarch
 BuildRequires:  gettext
@@ -201,6 +202,7 @@ techniciens grâce à une maintenance plus cohérente.
 %prep
 %setup -q -n %{name}-%{gh_commit}
 %patch0 -p1
+%patch1 -p1
 
 grep %{version} config/define.php
 
@@ -457,6 +459,9 @@ fi
 
 
 %changelog
+* Tue Jul  3 2018 Remi Collet <remi@remirepo.net> - 9.1.7.1-3
+- add upstream patch to fix SQL injection CVE-2018-13049
+
 * Sat Mar 17 2018 Remi Collet <remi@remirepo.net> - 9.1.7.1-2
 - escape get keys to prevent possible xss CVE-2018-7563