1 files changed, 7 insertions, 1 deletions
diff --git a/glpi.spec b/glpi.spec
index 70bd590..49f16e8 100644
--- a/glpi.spec
+++ b/glpi.spec
@@ -48,7 +48,7 @@
 
 Name:           %{gh_project}
 Version:        9.2.4
-Release:        1%{?dist}
+Release:        2%{?dist}
 Summary:        Free IT asset management software
 Summary(fr):    Gestion Libre de Parc Informatique
 
@@ -68,6 +68,8 @@ Source6:        %{name}-minify.php
 # Override PHP configuration for php-fpm
 Source7:        %{name}-user.ini
 
+Patch0:         https://github.com/glpi-project/glpi/commit/3391f10eacec880aebcd4297bd2658ae13473947.patch
+
 BuildArch:      noarch
 BuildRequires:  gettext
 BuildRequires:  php-cli
@@ -283,6 +285,7 @@ techniciens grâce à une maintenance plus cohérente.
 
 %prep
 %setup -q -n %{name}-%{gh_commit}
+%patch0 -p1
 
 grep %{version} inc/define.php
 
@@ -573,6 +576,9 @@ fi
 
 
 %changelog
+* Tue Jul  3 2018 Remi Collet <remi@remirepo.net> - 9.2.4-2
+- add upstream patch to fix SQL injection CVE-2018-13049
+
 * Thu Jun 21 2018 Remi Collet <remi@remirepo.net> - 9.2.4-1
 - update to 9.2.4