From 6e2bb69357dadb92963d8c2863a95b9d2b4abc8d Mon Sep 17 00:00:00 2001 From: "Huawei Technologies Co., Ltd" Date: Tue, 19 Jan 2021 16:40:44 +0800 Subject: [PATCH 1/3] fix CVE-2020-14339 Adapation for openeuler libvirt Signed-off-by: Jiajie Li --- fix-CVE-2020-14339.patch | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100644 fix-CVE-2020-14339.patch diff --git a/fix-CVE-2020-14339.patch b/fix-CVE-2020-14339.patch new file mode 100644 index 0000000..abba489 --- /dev/null +++ b/fix-CVE-2020-14339.patch @@ -0,0 +1,28 @@ +From 328ee616ef35eacdf1b6cb7d25b8a57fd5506aef Mon Sep 17 00:00:00 2001 +From: Jiajie Li +Date: Tue, 19 Jan 2021 16:40:44 +0800 +Subject: [PATCH] fix CVE-2020-14339 + +Adapation for openeuler libvirt + +Signed-off-by: Jiajie Li +--- + po/POTFILES.in | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/po/POTFILES.in b/po/POTFILES.in +index 6f9620d73a..197ff2f3d3 100644 +--- a/po/POTFILES.in ++++ b/po/POTFILES.in +@@ -238,7 +238,7 @@ + @SRCDIR@/src/util/vircrypto.c + @SRCDIR@/src/util/virdaemon.c + @SRCDIR@/src/util/virdbus.c +-@SRCDIR@src/util/virdevmapper.c ++@SRCDIR@/src/util/virdevmapper.c + @SRCDIR@/src/util/virdnsmasq.c + @SRCDIR@/src/util/virerror.c + @SRCDIR@/src/util/virerror.h +-- +2.27.0 + -- Gitee From dfe74c348d8afb88a23ecb5fd1fbb1cae493cf8a Mon Sep 17 00:00:00 2001 From: Euler Robot Date: Thu, 21 Jan 2021 11:28:09 +0800 Subject: [PATCH 2/3] spec: Update patch and changelog with !22 fix CVE-2020-14339 Signed-off-by: Jiajie Li --- libvirt.spec | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/libvirt.spec b/libvirt.spec index b264e1b..6d89381 100644 --- a/libvirt.spec +++ b/libvirt.spec @@ -170,6 +170,7 @@ Patch0059: rpc-require-write-acl-for-guest-agent-in-virDomainIn.patch Patch0060: qemu-agent-set-ifname-to-NULL-after-freeing.patch Patch0061: util-Move-virIsDevMapperDevice-to-virdevmapper.c.patch Patch0062: virdevmapper-Don-t-use-libdevmapper-to-obtain-depend.patch +Patch0063: fix-CVE-2020-14339.patch Requires: libvirt-daemon = %{version}-%{release} Requires: libvirt-daemon-config-network = %{version}-%{release} @@ -1902,6 +1903,9 @@ exit 0 %changelog +* Thu Jan 21 2021 Huawei Technologies Co., Ltd +- fix CVE-2020-14339 + * Wed Jan 20 2021 Huawei Technologies Co., Ltd - util: Move virIsDevMapperDevice() to virdevmapper.c - virdevmapper: Don't use libdevmapper to obtain dependencies -- Gitee From 1754b5a683102ad9d47cc31ca01aafee9393f860 Mon Sep 17 00:00:00 2001 From: Euler Robot Date: Thu, 21 Jan 2021 11:28:20 +0800 Subject: [PATCH 3/3] spec: Update release version with !22 increase release verison by one Signed-off-by: Euler Robot --- libvirt.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libvirt.spec b/libvirt.spec index 6d89381..d702fa9 100644 --- a/libvirt.spec +++ b/libvirt.spec @@ -99,7 +99,7 @@ Summary: Library providing a simple virtualization API Name: libvirt Version: 6.2.0 -Release: 15 +Release: 16 License: LGPLv2+ URL: https://libvirt.org/ -- Gitee