diff --git a/SPECS/glib2.spec b/SPECS/glib2.spec index 5e22638..89a23c8 100644 --- a/SPECS/glib2.spec +++ b/SPECS/glib2.spec @@ -5,7 +5,7 @@ Name: glib2 Version: 2.56.4 -Release: 9%{?dist} +Release: 10%{?dist} Summary: A library of handy utility functions License: LGPLv2+ @@ -70,6 +70,28 @@ Patch60: keyfile-backend.patch # https://gitlab.gnome.org/GNOME/glib/-/issues/1658 Patch61: CVE-2019-13012.patch +# https://gitlab.gnome.org/GNOME/glib/-/merge_requests/1927 +Patch70: 0001-gstrfuncs-Add-internal-g_memdup2-function.patch +Patch71: 0002-gio-Use-g_memdup2-instead-of-g_memdup-in-obvious-pla.patch +Patch72: 0003-gobject-Use-g_memdup2-instead-of-g_memdup-in-obvious.patch +Patch73: 0004-glib-Use-g_memdup2-instead-of-g_memdup-in-obvious-pl.patch +Patch74: 0005-gwinhttpfile-Avoid-arithmetic-overflow-when-calculat.patch +Patch75: 0006-gdatainputstream-Handle-stop_chars_len-internally-as.patch +Patch76: 0007-gwin32-Use-gsize-internally-in-g_wcsdup.patch +Patch77: 0008-gkeyfilesettingsbackend-Handle-long-keys-when-conver.patch +Patch78: 0009-gsocket-Use-gsize-to-track-native-sockaddr-s-size.patch +Patch79: 0010-gtlspassword-Forbid-very-long-TLS-passwords.patch +Patch80: 0011-giochannel-Forbid-very-long-line-terminator-strings.patch +Patch81: 0012-Use-more-g_memdup2.patch + +# https://gitlab.gnome.org/GNOME/glib/-/merge_requests/1942 +Patch90: 0001-gbytearray-Do-not-accept-too-large-byte-arrays.patch + +# https://gitlab.gnome.org/GNOME/glib/-/merge_requests/1981 +Patch100: 0001-glocalfileoutputstream-Factor-out-a-flag-check.patch +Patch101: 0002-glocalfileoutputstream-Fix-CREATE_REPLACE_DESTINATIO.patch +Patch102: 0003-glocalfileoutputstream-Add-a-missing-O_CLOEXEC-flag-.patch + %description GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOME. It provides data structure handling for C, @@ -267,6 +289,14 @@ glib-compile-schemas %{_datadir}/glib-2.0/schemas &> /dev/null || : %{_datadir}/installed-tests %changelog +* Wed Mar 31 2021 Michael Catanzaro - 2.56.4-10 +- Fix CVE-2021-27218 + Resolves: #1939072 +- Fix CVE-2021-27219 + Resolves: #1939108 +- Fix CVE-2021-28153 + Resolves: #1939118 + * Tue Nov 10 2020 Michael Catanzaro - 2.56.4-9 - Update GHmac patch to implement g_hmac_copy() Resolves: #1786538