From bc593af1310990d58ed0ec3327e2eef1d2088057 Mon Sep 17 00:00:00 2001 From: Remi Collet Date: Tue, 3 Jul 2018 07:57:46 +0200 Subject: add upstream patch to fix SQL injection CVE-2018-13049 --- glpi.spec | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) (limited to 'glpi.spec') diff --git a/glpi.spec b/glpi.spec index 70bd590..49f16e8 100644 --- a/glpi.spec +++ b/glpi.spec @@ -48,7 +48,7 @@ Name: %{gh_project} Version: 9.2.4 -Release: 1%{?dist} +Release: 2%{?dist} Summary: Free IT asset management software Summary(fr): Gestion Libre de Parc Informatique @@ -68,6 +68,8 @@ Source6: %{name}-minify.php # Override PHP configuration for php-fpm Source7: %{name}-user.ini +Patch0: https://github.com/glpi-project/glpi/commit/3391f10eacec880aebcd4297bd2658ae13473947.patch + BuildArch: noarch BuildRequires: gettext BuildRequires: php-cli @@ -283,6 +285,7 @@ techniciens grâce à une maintenance plus cohérente. %prep %setup -q -n %{name}-%{gh_commit} +%patch0 -p1 grep %{version} inc/define.php @@ -573,6 +576,9 @@ fi %changelog +* Tue Jul 3 2018 Remi Collet - 9.2.4-2 +- add upstream patch to fix SQL injection CVE-2018-13049 + * Thu Jun 21 2018 Remi Collet - 9.2.4-1 - update to 9.2.4 -- cgit