[python-oauth2/f20] actually apply patch to fix CVE-2013-4347 (thanks to Jason Green, Matt Wilson)

Tom Callaway spot at fedoraproject.org
Wed Oct 8 14:44:24 UTC 2014


commit d800638dc3978989295ce6e25eae9baac3c8f678
Author: Tom Callaway <spot at fedoraproject.org>
Date:   Wed Oct 8 10:44:15 2014 -0400

    actually apply patch to fix CVE-2013-4347 (thanks to Jason Green, Matt Wilson)

 python-oauth2.spec |    6 +++++-
 1 files changed, 5 insertions(+), 1 deletions(-)
---
diff --git a/python-oauth2.spec b/python-oauth2.spec
index 62fee15..399a80b 100644
--- a/python-oauth2.spec
+++ b/python-oauth2.spec
@@ -1,7 +1,7 @@
 Name:			python-oauth2
 Summary:		Python support for improved oauth
 Version:		1.5.211
-Release:		7%{?dist}
+Release:		8%{?dist}
 License:		MIT
 Group:			System Environment/Libraries
 Source0:		http://pypi.python.org/packages/source/o/oauth2/oauth2-%{version}.tar.gz
@@ -41,6 +41,7 @@ number of notable differences exist between this code and its forefathers:
 %setup -q -n oauth2-%{version}
 %patch0 -p1 -b .multiple-GET-fix
 %patch1 -p1 -b .CVE-2013-4346
+%patch2 -p1 -b .CVE-2013-4347
 
 %build
 %{__python} setup.py build
@@ -62,6 +63,9 @@ rm -rf %{buildroot}%{python_sitelib}/tests/
 %{python_sitelib}/oauth2-%{version}-*.egg-info/
 
 %changelog
+* Wed Oct  8 2014 Tom Callaway <spot at fedoraproject.org> - 1.5.211-8
+- actually apply patch to fix CVE-2013-4347 (thanks to Jason Green, Matt Wilson)
+
 * Fri Sep 12 2014 Tom Callaway <spot at fedoraproject.org> - 1.5.211-7
 - Fix CVE-2013-4346 and CVE-2013-4347 (thanks to Philippe Makowski)
 


More information about the scm-commits mailing list