From 9e7f0cb4529c489071cb713ec5a54d0c872f3e41 Mon Sep 17 00:00:00 2001 From: Peter Robinson Date: Fri, 27 May 2016 10:05:46 +0100 Subject: [PATCH] CVE-2016-5104 --- ...ure-sockets-only-listen-lo.patch => CVE-2016-5104.patch | 3 --- libimobiledevice.spec | 7 +++++-- 2 files changed, 5 insertions(+), 5 deletions(-) rename 0001-common-security-fix-Make-sure-sockets-only-listen-lo.patch => CVE-2016-5104.patch (98%) diff --git a/0001-common-security-fix-Make-sure-sockets-only-listen-lo.patch b/CVE-2016-5104.patch similarity index 98% rename from 0001-common-security-fix-Make-sure-sockets-only-listen-lo.patch rename to CVE-2016-5104.patch index 73cd3dc..7a00cfe 100644 --- a/0001-common-security-fix-Make-sure-sockets-only-listen-lo.patch +++ b/CVE-2016-5104.patch @@ -29,6 +29,3 @@ index b276864..e2968a6 100644 addr.sin_port = htons(port); addr_len = sizeof(addr); --- -2.5.0 - diff --git a/libimobiledevice.spec b/libimobiledevice.spec index c7e5041..f18ec07 100644 --- a/libimobiledevice.spec +++ b/libimobiledevice.spec @@ -7,7 +7,7 @@ Name: libimobiledevice Version: 1.2.0 -Release: 6%{?dist} +Release: 7%{?dist} Summary: Library for connecting to mobile devices Group: System Environment/Libraries @@ -17,7 +17,7 @@ Source0: http://www.libimobiledevice.org/downloads/%{name}-%{version}.tar. # Fix the build with gnutls 3.4 Patch0: 0001-Updated-cert-callback-to-gnutls3-API.patch Patch1: 0001-Fix-installation_proxy-when-using-GnuTLS-instead-of-.patch -Patch2: 0001-common-security-fix-Make-sure-sockets-only-listen-lo.patch +Patch2: CVE-2016-5104.patch BuildRequires: glib2-devel BuildRequires: gnutls-devel @@ -115,6 +115,9 @@ find %{buildroot} -type f -name "*.la" -delete %endif %changelog +* Fri May 27 2016 Peter Robinson 1.2.0-7 +- Fix CVE-2016-5104 + * Mon Mar 14 2016 Bastien Nocera 1.2.0-6 - Add fix for potential security issue