From 36c08e98b6458f332ecd3fa59fe5cbf57b8641ec Mon Sep 17 00:00:00 2001 From: "Benjamin A. Beasley" Date: Wed, 7 Dec 2022 13:49:42 -0500 Subject: [PATCH] Update to 3.19.6; fix CVE-2022-3171 --- .gitignore | 1 + protobuf.spec | 5 ++++- sources | 2 +- 3 files changed, 6 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 2803416..992918b 100644 --- a/.gitignore +++ b/.gitignore @@ -25,3 +25,4 @@ protobuf-2.3.0.tar.bz2 /googletest-0e402173c97aea7a00749e825b194bfede4f2e45.tar.gz /googletest-5ec7f0c4a113e2f18ac2c6cc7df51ad6afc24081.tar.gz /protobuf-3.19.5-all.tar.gz +/protobuf-3.19.6-all.tar.gz diff --git a/protobuf.spec b/protobuf.spec index 96dc47d..4b586e5 100644 --- a/protobuf.spec +++ b/protobuf.spec @@ -14,7 +14,7 @@ Summary: Protocol Buffers - Google's data interchange format Name: protobuf -Version: 3.19.5 +Version: 3.19.6 %global so_version 30 Release: 1%{?dist} @@ -494,6 +494,9 @@ install -p -m 0644 %{SOURCE2} %{buildroot}%{_emacs_sitestartdir} %changelog +* Wed Dec 07 2022 Benjamin A. Beasley - 3.19.6-1 +- Update to 3.19.6; fix CVE-2022-3171 + * Wed Dec 07 2022 Benjamin A. Beasley - 3.19.5-1 - Update to 3.19.5; fix CVE-2022-1941 diff --git a/sources b/sources index a7e31a2..9ed919b 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (protobuf-3.19.5-all.tar.gz) = 8bc83942bd58f897cafd79d24ddd97c6c37cf5fcf177738905d4e2da2106171af66fa138f50e3d770d290f90acb0452c2175e378facd97f3e5926a293d94264f +SHA512 (protobuf-3.19.6-all.tar.gz) = 8f92242f2be8e1bbfba41341c87709ad91ad83b8b3e3df88bb430411541d3399295f49291fd52b50e3487b0fce33181cb4d175685fd25aac72adfaee26a612d4 SHA512 (googletest-5ec7f0c4a113e2f18ac2c6cc7df51ad6afc24081.tar.gz) = 623b077b3334958fafcbc34aa85891883277994af33be530efd903f47738a3e3562001cbf3b6da1a5e7d03803c5bd51bcc1fab81490db85d5a4f2b15e7de1495