From 35a1d377918fe809026ecc27cd61aba5b1cbe9be Mon Sep 17 00:00:00 2001 From: eabdullin Date: Tue, 11 Nov 2025 22:19:23 +0000 Subject: [PATCH] import UBI libsoup3-3.6.5-3.el10_1.6 --- RHEL-123214.patch => RHEL-117629.patch | 0 libsoup3.spec | 24 ++++++------------------ 2 files changed, 6 insertions(+), 18 deletions(-) rename RHEL-123214.patch => RHEL-117629.patch (100%) diff --git a/RHEL-123214.patch b/RHEL-117629.patch similarity index 100% rename from RHEL-123214.patch rename to RHEL-117629.patch diff --git a/libsoup3.spec b/libsoup3.spec index d1b690d..42e9a1e 100644 --- a/libsoup3.spec +++ b/libsoup3.spec @@ -2,7 +2,7 @@ ## (rpmautospec version 0.6.5) ## RPMAUTOSPEC: autorelease, autochangelog %define autorelease(e:s:pb:n) %{?-p:0.}%{lua: - release_number = 9; + release_number = 6; base_release_number = tonumber(rpm.expand("%{?-b*}%{!?-b:1}")); print(release_number + base_release_number - 1); }%{?-e:.%{-e*}}%{?-s:.%{-s*}}%{!?-n:%{?dist}} @@ -39,9 +39,8 @@ Patch: CVE-2025-4948.patch Patch: CVE-2025-32049.patch # https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/452 Patch: CVE-2025-32907.patch -# RHEL-123214 + CVE-2025-11021 -# https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/473 -Patch: RHEL-123214.patch +# https://gitlab.gnome.org/GNOME/libsoup/-/issues/448 +Patch: RHEL-117629.patch BuildRequires: ca-certificates BuildRequires: gcc @@ -136,22 +135,11 @@ install -m 644 -D tests/libsoup.supp %{buildroot}%{_datadir}/libsoup-3.0/libsoup %changelog ## START: Generated by rpmautospec -* Fri Oct 24 2025 Maja Massarini - 3.6.5-9 -- Revert "Fix handling of invalid dates in cookie expires attribute - (CVE-2025-11021)" - -* Wed Oct 22 2025 RHEL Packaging Agent - 3.6.5-8 +* Wed Oct 22 2025 RHEL Packaging Agent - 3.6.5-6 - Fix integer overflow in date/time parsing -* Wed Oct 15 2025 RHEL Packaging Agent - 3.6.5-7 -- Fix handling of invalid dates in cookie expires attribute - (CVE-2025-11021) - -* Wed May 21 2025 Michael Catanzaro - 3.6.5-6 -- Add patch for CVE-2025-32907 - -* Wed May 21 2025 Michael Catanzaro - 3.6.5-5 -- Fix release field +* Tue May 27 2025 Michael Catanzaro - 3.6.5-5 +- Bump revision number * Wed May 21 2025 Michael Catanzaro - 3.6.5-4 - Fix several CVEs