diff --git a/backport-CVE-2021-46823.patch b/backport-CVE-2021-46823.patch deleted file mode 100644 index 6aa5ea28532c778a661eee832fba1f5449f69157..0000000000000000000000000000000000000000 --- a/backport-CVE-2021-46823.patch +++ /dev/null @@ -1,22 +0,0 @@ -From faa011b41f7141121546045925d809d54e70f5fd Mon Sep 17 00:00:00 2001 -From: Kevin Backhouse -Date: Fri, 15 Oct 2021 15:21:37 +0100 -Subject: [PATCH] Fix ReDoS in regex. - ---- - Lib/ldap/schema/tokenizer.py | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/Lib/ldap/schema/tokenizer.py b/Lib/ldap/schema/tokenizer.py -index 69823f2b..623b86d5 100644 ---- a/Lib/ldap/schema/tokenizer.py -+++ b/Lib/ldap/schema/tokenizer.py -@@ -13,7 +13,7 @@ - r"|" # or - r"([^'$()\s]+)" # string of length >= 1 without '$() or whitespace - r"|" # or -- r"('(?:[^'\\]|\\\\|\\.)*?'(?!\w))" -+ r"('(?:[^'\\]|\\.)*'(?!\w))" - # any string or empty string surrounded by unescaped - # single quotes except if right quote is succeeded by - # alphanumeric char diff --git a/python-ldap-3.3.1.tar.gz b/python-ldap-3.3.1.tar.gz deleted file mode 100644 index 8ab0ba71aaadda0d800b56c89ef2ed5eacd53f2c..0000000000000000000000000000000000000000 Binary files a/python-ldap-3.3.1.tar.gz and /dev/null differ diff --git a/python-ldap-3.4.0.tar.gz b/python-ldap-3.4.0.tar.gz new file mode 100644 index 0000000000000000000000000000000000000000..99643101b271d52a585dba1924526d154b3ded68 Binary files /dev/null and b/python-ldap-3.4.0.tar.gz differ diff --git a/python-ldap.spec b/python-ldap.spec index c19d95cef18d2d564b9b6960f2bdcb552010917c..1beab0396d6c9f730f869683d5f2eaf8cb3ac2d6 100644 --- a/python-ldap.spec +++ b/python-ldap.spec @@ -1,7 +1,7 @@ %define debug_package %{nil} Name: python-ldap -Version: 3.3.1 -Release: 3 +Version: 3.4.0 +Release: 1 Summary: An object-oriented API to access LDAP directory servers License: Python URL: http://python-ldap.org/ @@ -10,7 +10,6 @@ Source0: https://files.pythonhosted.org/packages/source/p/%{name}/%{name}-%{vers BuildRequires: gcc openldap-devel BuildRequires: python3-devel python3-setuptools -Patch0: backport-CVE-2021-46823.patch %description python-ldap provides an object-oriented API for working with LDAP within\ @@ -58,6 +57,9 @@ sed -i 's,-Werror,-Wignore,g' tox.ini %doc CHANGES README TODO Demo %changelog +* Thu Aug 4 2022 liksh - 3.4.0-1 +- upgrade for openstack yoga + * Tue Jul 26 2022 zhouwenpei - 3.3.1-3 - Type:CVE - Id:CVE-2021-46823