[rt3/el5] Remove salted password patch

Xavier Bachelot xavierb at fedoraproject.org
Sun Jul 17 20:56:39 UTC 2011


commit c3c3805377e7c3bfe43c3eab2879aaa66e5e24f4
Author: Xavier Bachelot <xavier at bachelot.org>
Date:   Sun Jul 17 22:54:05 2011 +0200

    Remove salted password patch

 rt3.spec |    8 +++++---
 1 files changed, 5 insertions(+), 3 deletions(-)
---
diff --git a/rt3.spec b/rt3.spec
index e479e9d..0e7b56c 100644
--- a/rt3.spec
+++ b/rt3.spec
@@ -13,7 +13,7 @@
 
 Name:		rt3
 Version:	3.6.11
-Release:	1%{?dist}
+Release:	2%{?dist}
 Summary:	Request tracker 3
 
 Group:		Applications/Internet
@@ -27,7 +27,6 @@ Source5:	rt3.logrotate.in
 Patch0:		rt-3.6.1-config.diff
 Patch1:		rt-3.4.1-I18N.diff
 Patch2:		rt-3.6.0-Makefile.diff
-Patch3:		rt3-3.6.11-salted_passwords.patch
 
 BuildArch:	noarch
 BuildRoot:	%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
@@ -103,7 +102,6 @@ find etc -type f -exec chmod a-x {} \;
 %patch0 -p1
 %patch1 -p1
 %patch2 -p1
-%patch3 -p1
 
 # Patch backups added by rpm disturb
 find -name '*.orig' -exec rm -f {} \;
@@ -283,6 +281,10 @@ fi
 %{_mandir}/man1/rt-mailgate*
 
 %changelog
+* Sun Jul 17 2011 Xavier Bachelot <xavier at bachelot.org> - 3.6.11-2
+- Remove the salted password patch (CVE-2011-0009), it breaks authentication
+  in some cases. Use the RT-Extension-SaltedPasswords extension instead.
+
 * Sun Apr 17 2011 Xavier Bachelot <xavier at bachelot.org> - 3.6.11-1
 - Update to 3.6.11 (CVE-2011-1685).
 


More information about the scm-commits mailing list