From 38ee4e9ebe0ace44998ba0b358c9f42fd7c4b309 Mon Sep 17 00:00:00 2001 From: cunshunxia Date: Wed, 25 Mar 2026 10:57:52 +0800 Subject: [PATCH] revert 'upgrade sinatra to 4.1.1 to fix CVE-2024-21510.' sinatra needs logger >= 1.6.0 which is 1.5.3 in Ruby. Signed-off-by: cunshunxia --- pcs.spec | 8 ++++++-- sources | 2 +- 2 files changed, 7 insertions(+), 3 deletions(-) diff --git a/pcs.spec b/pcs.spec index b8bb851..db4515f 100644 --- a/pcs.spec +++ b/pcs.spec @@ -17,7 +17,7 @@ %global version_rubygem_rack_protection 3.0.5 %global version_rubygem_rack_test 2.0.2 %global version_rubygem_ruby2_keywords 0.0.5 -%global version_rubygem_sinatra 4.1.1 +%global version_rubygem_sinatra 3.0.5 %global version_rubygem_thin 1.8.1 %global version_rubygem_tilt 2.0.11 %global version_rubygem_webrick 1.8.2 @@ -34,7 +34,7 @@ Summary: Pacemaker Configuration System Name: pcs Version: 0.11.5 -Release: 21%{?dist} +Release: 22%{?dist} License: GPL-2.0-only AND Apache-2.0 AND MIT AND BSD-3-Clause AND (GPL-2.0-only OR Ruby) AND BSD-2-Clause AND (BSD-2-Clause OR Ruby) URL: https://github.com/ClusterLabs/pcs @@ -301,6 +301,10 @@ pcsd/test/test_all_suite.rb \ %{_mandir}/man8/pcs_snmp_agent.* %changelog +* Wed Mar 25 2026 cunshunxia - 0.11.5-22 +- revert 'upgrade sinatra to 4.1.1 to fix CVE-2024-21510.' +- sinatra needs logger >= 1.6.0 which is 1.5.3 in Ruby. + * Tue Oct 21 2025 cunshunxia - 0.11.5-21 - upgrade rubygem-rack to 3.1.18. - fix CVE-2025-61919. diff --git a/sources b/sources index 46167e1..63f6ec0 100644 --- a/sources +++ b/sources @@ -10,7 +10,7 @@ SHA512 (childprocess-4.1.0.gem) = e635c3acfa5ad85891c3879f240c7e96d47d7d5ec3f472 SHA512 (rack-3.1.18.gem) = ab5763794e690c1d7d19229a4bd4afb495fdb6e7190eb31e3596d435a4ae7bca0652ffc0c6a0e4b86edda109216a3b867354bdbf8dc941a0cc4fd0c671d3f92b SHA512 (rack-protection-3.0.5.gem) = 4ed0ee9e8fe08532ff7f2905251af110f3fff0e419da5be50ae3e5a90906e43c39cf8edc219fcfe3e27a72591500c040afcc9552da875773375b170fb91aa9ff SHA512 (rack-test-2.0.2.gem) = 1d395d9504f8d84bcf0e251a9c5873eace29f274b177c7a6bfbdce58f6085ab5170f66d16086e3e159aaa47480d5f993c77b64d613cefda342932c39ad37331d -SHA512 (sinatra-4.1.1.gem) = bf6c75a2f5e38cfb8442f481c491efb132dbf37a114e8ee35a4d24dd6f3b882f967a3c542cbafdcaf96242b39f5d78b77271adc562a2ee002b8790a73c99a7e9 +SHA512 (sinatra-3.0.5.gem) = 047969c56a2a601408a0b27cea9d3e1b7941fdda87ae05ad271be0be07b05f6597433f5fce36325720913bfeb12a3bd1568831a8898d8bff87e5e36d0b8766a6 SHA512 (tilt-2.0.11.gem) = 757a292b05b3ddb2cb8de7680f09433cec85b433e03cd9f738534b99c836fb2129870003a9376c24b6a2f6acb732b51b27968cc0e197a832130d4a35b8dc8239 SHA512 (eventmachine-1.2.7.gem) = fdbcf9fc933e2414e70f8f48153e9ba6ed7a0029cdf49cdcb4ab72ab26683e727a36c099f017f20681f9c361179461743e501278ca9bd5612e693e26867cc516 SHA512 (daemons-1.4.1.gem) = c057a7cbafc16f9daa073ce9fd5680f5f978826554073f4e77f2b284aee73567253d471224109d060193572f313e5eaa1509a2113a1564c1508969f658c045c5 -- Gitee