From e37c94cf2dfce995080c735e9a31bc0b2158cf2c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Lubo=C5=A1=20Uhliarik?= Date: Mon, 2 Sep 2024 15:01:52 +0200 Subject: [PATCH] new version 1.7.5 Resolves: RHEL-56637 - apr: Lax permissions in Apache Portable Runtime shared memory (CVE-2023-49582) --- .gitignore | 1 + apr.spec | 13 +++++++------ sources | 2 +- 3 files changed, 9 insertions(+), 7 deletions(-) diff --git a/.gitignore b/.gitignore index ec6cad4..f7d3944 100644 --- a/.gitignore +++ b/.gitignore @@ -18,3 +18,4 @@ apr-1.3.9.tar.bz2 /apr-1.7.1.tar.bz2 /apr-1.7.2.tar.bz2 /apr-1.7.3.tar.bz2 +/apr-1.7.5.tar.bz2 diff --git a/apr.spec b/apr.spec index 07d9761..06c4c7f 100644 --- a/apr.spec +++ b/apr.spec @@ -11,8 +11,8 @@ Summary: Apache Portable Runtime library Name: apr -Version: 1.7.3 -Release: 10%{?dist} +Version: 1.7.5 +Release: 1%{?dist} # Apache-2.0: everything # ISC: network_io/apr-1.4.6/network_io/unix/inet_?to?.c # BSD-4-Clause-UC: strings/apr_snprintf.c, strings/apr_fnmatch.c, @@ -57,10 +57,6 @@ C data structures and routines. # regenerate configure script etc. ./buildconf -# Forcibly prevent detection of shm_open (which then picks up but -# does not use -lrt). -export ac_cv_search_shm_open=no - %configure \ --includedir=%{_includedir}/apr-%{aprver} \ --with-installbuilddir=%{_libdir}/apr-%{aprver}/build \ @@ -139,6 +135,11 @@ popd %{_datadir}/aclocal/*.m4 %changelog +* Mon Sep 02 2024 Luboš Uhliarik - 1.7.5-1 +- new version 1.7.5 +- Resolves: RHEL-56637 - apr: Lax permissions in Apache Portable Runtime shared + memory (CVE-2023-49582) + * Mon Jun 24 2024 Troy Dawson - 1.7.3-10 - Bump release for June 2024 mass rebuild diff --git a/sources b/sources index c341b14..271da41 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (apr-1.7.3.tar.bz2) = d8f62868d8e3ec92cede1f0d93b5d48e49441f575c98e165ff84343746a6abd265290ab16a57f741896ae7a6b3e534a334325a99a61c96c2485e085f7761c124 +SHA512 (apr-1.7.5.tar.bz2) = d8a7553642da0c81261ac3992536efd9d43ecb9154934ef1a10ae808d6a3ce8198b40433091d3a6d04f61e67c59426fb5276193a37e810ae4bc74a8a10fb651b