From 1bfc023dbe3ea1043b159c323cd0e157a86214be Mon Sep 17 00:00:00 2001 From: huyubiao Date: Wed, 17 Apr 2024 16:02:18 +0800 Subject: [PATCH] fix CVE-2023-50387 and CVE-2023-50868 --- ...-validations-i.patch => backport-CVE-2023-50387.patch | 0 ...rations-to-100.patch => backport-CVE-2023-50868.patch | 0 systemd.spec | 9 ++++++--- 3 files changed, 6 insertions(+), 3 deletions(-) rename backport-resolved-limit-the-number-of-signature-validations-i.patch => backport-CVE-2023-50387.patch (100%) rename backport-resolved-reduce-the-maximum-nsec3-iterations-to-100.patch => backport-CVE-2023-50868.patch (100%) diff --git a/backport-resolved-limit-the-number-of-signature-validations-i.patch b/backport-CVE-2023-50387.patch similarity index 100% rename from backport-resolved-limit-the-number-of-signature-validations-i.patch rename to backport-CVE-2023-50387.patch diff --git a/backport-resolved-reduce-the-maximum-nsec3-iterations-to-100.patch b/backport-CVE-2023-50868.patch similarity index 100% rename from backport-resolved-reduce-the-maximum-nsec3-iterations-to-100.patch rename to backport-CVE-2023-50868.patch diff --git a/systemd.spec b/systemd.spec index aec9246..932c488 100644 --- a/systemd.spec +++ b/systemd.spec @@ -16,7 +16,7 @@ Name: systemd Url: https://systemd.io/ Version: 243 -Release: 77 +Release: 78 License: MIT and LGPLv2+ and GPLv2+ Summary: System and Service Manager @@ -303,8 +303,8 @@ Patch0255: backport-busctl-avoid-asserting-on-NULL-message.patch Patch0256: backport-sd-journal-check-sd-event-state-before-setting-up-po.patch Patch0257: backport-utmp-remove-dev-from-line.patch Patch0258: backport-core-exec-do-not-crash-with-UtmpMode-user-without-Us.patch -Patch0259: backport-resolved-limit-the-number-of-signature-validations-i.patch -Patch0260: backport-resolved-reduce-the-maximum-nsec3-iterations-to-100.patch +Patch0259: backport-CVE-2023-50387.patch +Patch0260: backport-CVE-2023-50868.patch #openEuler Patch9002: 1509-fix-journal-file-descriptors-leak-problems.patch @@ -1712,6 +1712,9 @@ fi %exclude /usr/share/man/man3/* %changelog +* Wed Apr 17 2024 huyubiao - 243-78 +- fix CVE-2023-50387 and CVE-2023-50868 + * Tue Apr 16 2024 huyubiao - 243-77 - Update outdated URL