From f0dff1efcc4239d2ccb9c845eaa1cb968075c37e Mon Sep 17 00:00:00 2001 From: "Huawei Technologies Co., Ltd" Date: Tue, 19 Jan 2021 16:40:44 +0800 Subject: [PATCH 1/3] fix CVE-2020-14339 Adapation for openeuler libvirt Signed-off-by: Jiajie Li --- fix-CVE-2020-14339.patch | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100644 fix-CVE-2020-14339.patch diff --git a/fix-CVE-2020-14339.patch b/fix-CVE-2020-14339.patch new file mode 100644 index 0000000..e5813cb --- /dev/null +++ b/fix-CVE-2020-14339.patch @@ -0,0 +1,28 @@ +From 3ef7d80685a11600970f232715c49d216f9006be Mon Sep 17 00:00:00 2001 +From: Jiajie Li +Date: Tue, 19 Jan 2021 16:40:44 +0800 +Subject: [PATCH] fix CVE-2020-14339 + +Adapation for openeuler libvirt + +Signed-off-by: Jiajie Li +--- + po/POTFILES.in | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/po/POTFILES.in b/po/POTFILES.in +index 6f9620d73a..197ff2f3d3 100644 +--- a/po/POTFILES.in ++++ b/po/POTFILES.in +@@ -238,7 +238,7 @@ + @SRCDIR@/src/util/vircrypto.c + @SRCDIR@/src/util/virdaemon.c + @SRCDIR@/src/util/virdbus.c +-@SRCDIR@src/util/virdevmapper.c ++@SRCDIR@/src/util/virdevmapper.c + @SRCDIR@/src/util/virdnsmasq.c + @SRCDIR@/src/util/virerror.c + @SRCDIR@/src/util/virerror.h +-- +2.27.0 + -- Gitee From d044b318f76b0557baafb654c12c1f1f3f38d499 Mon Sep 17 00:00:00 2001 From: Euler Robot Date: Thu, 21 Jan 2021 11:28:07 +0800 Subject: [PATCH 2/3] spec: Update patch and changelog with !20 fix CVE-2020-14339 Signed-off-by: Jiajie Li --- libvirt.spec | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/libvirt.spec b/libvirt.spec index f4fd1ff..0d09e38 100644 --- a/libvirt.spec +++ b/libvirt.spec @@ -170,6 +170,7 @@ Patch0059: rpc-require-write-acl-for-guest-agent-in-virDomainIn.patch Patch0060: qemu-agent-set-ifname-to-NULL-after-freeing.patch Patch0061: util-Move-virIsDevMapperDevice-to-virdevmapper.c.patch Patch0062: virdevmapper-Don-t-use-libdevmapper-to-obtain-depend.patch +Patch0063: fix-CVE-2020-14339.patch Requires: libvirt-daemon = %{version}-%{release} Requires: libvirt-daemon-config-network = %{version}-%{release} @@ -1902,6 +1903,9 @@ exit 0 %changelog +* Thu Jan 21 2021 Huawei Technologies Co., Ltd +- fix CVE-2020-14339 + * Wed Jan 20 2021 Huawei Technologies Co., Ltd - util: Move virIsDevMapperDevice() to virdevmapper.c - virdevmapper: Don't use libdevmapper to obtain dependencies -- Gitee From 8d56f1246410bd5b533d3f3591c2cde3caf7e32b Mon Sep 17 00:00:00 2001 From: Euler Robot Date: Thu, 21 Jan 2021 11:28:09 +0800 Subject: [PATCH 3/3] spec: Update release version with !20 increase release verison by one Signed-off-by: Euler Robot --- libvirt.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libvirt.spec b/libvirt.spec index 0d09e38..b8e313c 100644 --- a/libvirt.spec +++ b/libvirt.spec @@ -99,7 +99,7 @@ Summary: Library providing a simple virtualization API Name: libvirt Version: 6.2.0 -Release: 15 +Release: 16 License: LGPLv2+ URL: https://libvirt.org/ -- Gitee