[python-oauth2/f20] actually apply patch to fix CVE-2013-4347 (thanks to Jason Green, Matt Wilson)
Tom Callaway
spot at fedoraproject.org
Wed Oct 8 14:44:24 UTC 2014
commit d800638dc3978989295ce6e25eae9baac3c8f678
Author: Tom Callaway <spot at fedoraproject.org>
Date: Wed Oct 8 10:44:15 2014 -0400
actually apply patch to fix CVE-2013-4347 (thanks to Jason Green, Matt Wilson)
python-oauth2.spec | 6 +++++-
1 files changed, 5 insertions(+), 1 deletions(-)
---
diff --git a/python-oauth2.spec b/python-oauth2.spec
index 62fee15..399a80b 100644
--- a/python-oauth2.spec
+++ b/python-oauth2.spec
@@ -1,7 +1,7 @@
Name: python-oauth2
Summary: Python support for improved oauth
Version: 1.5.211
-Release: 7%{?dist}
+Release: 8%{?dist}
License: MIT
Group: System Environment/Libraries
Source0: http://pypi.python.org/packages/source/o/oauth2/oauth2-%{version}.tar.gz
@@ -41,6 +41,7 @@ number of notable differences exist between this code and its forefathers:
%setup -q -n oauth2-%{version}
%patch0 -p1 -b .multiple-GET-fix
%patch1 -p1 -b .CVE-2013-4346
+%patch2 -p1 -b .CVE-2013-4347
%build
%{__python} setup.py build
@@ -62,6 +63,9 @@ rm -rf %{buildroot}%{python_sitelib}/tests/
%{python_sitelib}/oauth2-%{version}-*.egg-info/
%changelog
+* Wed Oct 8 2014 Tom Callaway <spot at fedoraproject.org> - 1.5.211-8
+- actually apply patch to fix CVE-2013-4347 (thanks to Jason Green, Matt Wilson)
+
* Fri Sep 12 2014 Tom Callaway <spot at fedoraproject.org> - 1.5.211-7
- Fix CVE-2013-4346 and CVE-2013-4347 (thanks to Philippe Makowski)
More information about the scm-commits
mailing list