From 5aa3512dca7e889e4e423bbb4a0905e887b32c80 Mon Sep 17 00:00:00 2001 From: Ryan O'Hara Date: Mon, 26 Nov 2018 11:48:53 -0600 Subject: [PATCH 1/3] Update to 2.0.10 --- .gitignore | 1 + keepalived.spec | 9 ++++++++- sources | 2 +- 3 files changed, 10 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index a766dc5..4080a2c 100644 --- a/.gitignore +++ b/.gitignore @@ -26,3 +26,4 @@ /keepalived-1.4.5.tar.gz /keepalived-2.0.5.tar.gz /keepalived-2.0.6.tar.gz +/keepalived-2.0.10.tar.gz diff --git a/keepalived.spec b/keepalived.spec index 0a42cb9..1de2cd2 100644 --- a/keepalived.spec +++ b/keepalived.spec @@ -8,7 +8,7 @@ Name: keepalived Summary: High Availability monitor built upon LVS, VRRP and service pollers -Version: 2.0.6 +Version: 2.0.10 Release: 1%{?dist} License: GPLv2+ URL: http://www.keepalived.org/ @@ -96,6 +96,13 @@ mkdir -p %{buildroot}%{_libexecdir}/keepalived %{_mandir}/man8/keepalived.8* %changelog +* Mon Nov 26 2018 Ryan O'Hara - 2.0.10-1 +- Update to 2.0.10 +- Fix improper pathname validation (#1651864, CVE-2018-19044) +- Fix insecure permissions when creating temporary files (#1651868, CVE-2018-19045) +- Fix insecure use of temporary files (#1651870, CVE-2018-19046) +- Fix buffer overflow when parsing HTTP status codes (#1651873, CVE-2018-19047) + * Wed Jul 25 2018 Ryan O'Hara - 2.0.6-1 - Update to 2.0.6 (#1576138) diff --git a/sources b/sources index e043d10..5aaafd7 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (keepalived-2.0.6.tar.gz) = 9e340825b443c02ba1afe27d9ad97afc34722d80a27fc9a5f934157ec04ff15cef0a82b68c8917712415dc7ef079e27af88ac29a372ef42c87fcc9f9b8ab751e +SHA512 (keepalived-2.0.10.tar.gz) = e76562e5d9d9dc945f0c9702f5f3c6be6acd8c66a59aea1f8287810a2eeb4c65b6cb7e1cd84c1e478978f7db94dba7f8a918ca4847f90a6554b20d757addd2db From 08ced74ad6ffb1db0a609974b0df8b88f0060317 Mon Sep 17 00:00:00 2001 From: Ryan O'Hara Date: Wed, 9 Jan 2019 09:59:45 -0600 Subject: [PATCH 2/3] Update to 2.0.11 --- .gitignore | 1 + keepalived.spec | 5 ++++- sources | 2 +- 3 files changed, 6 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 4080a2c..43b57d5 100644 --- a/.gitignore +++ b/.gitignore @@ -27,3 +27,4 @@ /keepalived-2.0.5.tar.gz /keepalived-2.0.6.tar.gz /keepalived-2.0.10.tar.gz +/keepalived-2.0.11.tar.gz diff --git a/keepalived.spec b/keepalived.spec index 1de2cd2..c78297e 100644 --- a/keepalived.spec +++ b/keepalived.spec @@ -8,7 +8,7 @@ Name: keepalived Summary: High Availability monitor built upon LVS, VRRP and service pollers -Version: 2.0.10 +Version: 2.0.11 Release: 1%{?dist} License: GPLv2+ URL: http://www.keepalived.org/ @@ -96,6 +96,9 @@ mkdir -p %{buildroot}%{_libexecdir}/keepalived %{_mandir}/man8/keepalived.8* %changelog +* Wed Jan 09 2019 Ryan O'Hara - 2.0.11-1 +- Update to 2.0.11 + * Mon Nov 26 2018 Ryan O'Hara - 2.0.10-1 - Update to 2.0.10 - Fix improper pathname validation (#1651864, CVE-2018-19044) diff --git a/sources b/sources index 5aaafd7..81d80fc 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (keepalived-2.0.10.tar.gz) = e76562e5d9d9dc945f0c9702f5f3c6be6acd8c66a59aea1f8287810a2eeb4c65b6cb7e1cd84c1e478978f7db94dba7f8a918ca4847f90a6554b20d757addd2db +SHA512 (keepalived-2.0.11.tar.gz) = ead982aeacdf329109089dfc58a42915ff44b0c4897006000c74642fa3747b2cac1a472faa438ce517f47b80d193d466875ab7130d2206400c8b2ad52f17c6d4 From 2840d3b34ac1911733079b53bda2d4b355c40037 Mon Sep 17 00:00:00 2001 From: Ryan O'Hara Date: Mon, 4 Feb 2019 10:41:31 -0600 Subject: [PATCH 3/3] Update to 2.0.12 (#1576138) --- .gitignore | 1 + keepalived.spec | 5 ++++- sources | 2 +- 3 files changed, 6 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 43b57d5..f1e4307 100644 --- a/.gitignore +++ b/.gitignore @@ -28,3 +28,4 @@ /keepalived-2.0.6.tar.gz /keepalived-2.0.10.tar.gz /keepalived-2.0.11.tar.gz +/keepalived-2.0.12.tar.gz diff --git a/keepalived.spec b/keepalived.spec index c78297e..93ebe21 100644 --- a/keepalived.spec +++ b/keepalived.spec @@ -8,7 +8,7 @@ Name: keepalived Summary: High Availability monitor built upon LVS, VRRP and service pollers -Version: 2.0.11 +Version: 2.0.12 Release: 1%{?dist} License: GPLv2+ URL: http://www.keepalived.org/ @@ -96,6 +96,9 @@ mkdir -p %{buildroot}%{_libexecdir}/keepalived %{_mandir}/man8/keepalived.8* %changelog +* Mon Feb 04 2019 Ryan O'Hara - 2.0.12-1 +- Update to 2.0.12 (#1576138) + * Wed Jan 09 2019 Ryan O'Hara - 2.0.11-1 - Update to 2.0.11 diff --git a/sources b/sources index 81d80fc..0c91aa2 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (keepalived-2.0.11.tar.gz) = ead982aeacdf329109089dfc58a42915ff44b0c4897006000c74642fa3747b2cac1a472faa438ce517f47b80d193d466875ab7130d2206400c8b2ad52f17c6d4 +SHA512 (keepalived-2.0.12.tar.gz) = 345f7574cfe978194504691c0a7bcad76b1438bf8833911271647d445f0d1352972257554524e94be44e9d971299678d2f9a026e29088e844bbb3d2b25637076