0231aba5cd
This solves: systemd: line splitting via fgets() allows for state injection during daemon-reexec (CVE-2018-15686) along with some other less critical issues. See the security announcement link: https://lists.centos.org/pipermail/centos-cr-announce/2019-August/006149.html for more details. Here we rebase the patches, and fix the atrocious crime of "name of patch file doesn't match what git format-patch generates". We also squash down the meta patches which add the patches to the spec file as part of good housekeeping. Change-Id: I01a3fa329bbad541a063cb604d1756892139967f Closes-Bug: 1849200 Depends-On: https://review.opendev.org/#/c/695560 Signed-off-by: Jim Somerville <Jim.Somerville@windriver.com>
33 lines
1.3 KiB
Diff
33 lines
1.3 KiB
Diff
From 3c0e59a677c921f60f27002a27eb5f4776475e44 Mon Sep 17 00:00:00 2001
|
|
Message-Id: <3c0e59a677c921f60f27002a27eb5f4776475e44.1574265913.git.Jim.Somerville@windriver.com>
|
|
In-Reply-To: <eeb3e979288cb8c14d8546d12a27da4c88fbb0e4.1574265913.git.Jim.Somerville@windriver.com>
|
|
References: <eeb3e979288cb8c14d8546d12a27da4c88fbb0e4.1574265913.git.Jim.Somerville@windriver.com>
|
|
From: Jim Somerville <Jim.Somerville@windriver.com>
|
|
Date: Wed, 20 Nov 2019 10:59:45 -0500
|
|
Subject: [PATCH 3/3] Add STX patches
|
|
|
|
Signed-off-by: Jim Somerville <Jim.Somerville@windriver.com>
|
|
---
|
|
SPECS/systemd.spec | 5 +++++
|
|
1 file changed, 5 insertions(+)
|
|
|
|
diff --git a/SPECS/systemd.spec b/SPECS/systemd.spec
|
|
index 4c83150..e1e98bb 100644
|
|
--- a/SPECS/systemd.spec
|
|
+++ b/SPECS/systemd.spec
|
|
@@ -786,6 +786,11 @@ Patch0744: 0744-selinux-don-t-log-SELINUX_INFO-and-SELINUX_WARNING-m.patch
|
|
Patch0745: 0745-fix-mis-merge.patch
|
|
Patch0746: 0746-fs-util-chase_symlinks-prevent-double-free.patch
|
|
|
|
+# STX Patches
|
|
+Patch0801: 801-inject-millisec-in-syslog-date.patch
|
|
+Patch0802: 802-fix-build-error-for-unused-variable.patch
|
|
+Patch0803: 803-Fix-compile-failure-due-to-deprecated-value.patch
|
|
+
|
|
Patch9999: 9999-Update-kernel-install-script-by-backporting-fedora-p.patch
|
|
|
|
%global num_patches %{lua: c=0; for i,p in ipairs(patches) do c=c+1; end; print(c);}
|
|
--
|
|
1.8.3.1
|
|
|