From 10ee55bbd678a03312cf444a668ce4c986e2afed Mon Sep 17 00:00:00 2001 From: Bojan Smojver Date: Wed, 6 May 2020 23:17:15 +1000 Subject: [PATCH 1/5] Bump up to 1.1.28. CVE-2020-5283. --- sources | 2 +- viewvc.spec | 6 +++++- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/sources b/sources index 5f9c1a3..b525457 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (viewvc-1.1.26.tar.gz) = af70d4344fe92f942debb407b6fad909e250ba2656499f5229e1c2f018dfbd783d0cebd28c49a429bd7b155bb6db02cead602384f91b99b7ced6aa365e32bb8e +SHA512 (viewvc-1.1.28.tar.gz) = 719baebd31fa321e7f069a60f6d77f09c0b1b4cfbb0c332ba091be0de97b4f9f439b65f15ef03bb11d515b37ef142937967974030acd9257a883208d191e3833 diff --git a/viewvc.spec b/viewvc.spec index 8d5ddaa..26991a5 100644 --- a/viewvc.spec +++ b/viewvc.spec @@ -1,7 +1,7 @@ %{!?python_sitelib: %define python_sitelib %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib()")} Name: viewvc -Version: 1.1.26 +Version: 1.1.28 Release: 1%{?dist} Summary: Browser interface for CVS and SVN version control repositories @@ -142,6 +142,10 @@ with decent performance when run under Apache. %attr(0700,apache,apache) %{_localstatedir}/spool/viewvc %changelog +* Wed May 6 2020 Bojan Smojver - 1.1.28-1 +- bump up to 1.1.28 +- CVE-2020-5283 + * Tue Jan 31 2017 Bojan Smojver - 1.1.26-1 - bump up to 1.1.26 From e52ebf51358671fa7aa8f30f16b42acb606dc0c9 Mon Sep 17 00:00:00 2001 From: Bojan Smojver Date: Wed, 4 Jan 2023 10:10:29 +1100 Subject: [PATCH 2/5] Bump up to 1.1.29, CVE-2023-22456. --- .gitignore | 1 + sources | 2 +- viewvc.spec | 6 +++++- 3 files changed, 7 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 386b9a5..ce5405c 100644 --- a/.gitignore +++ b/.gitignore @@ -18,3 +18,4 @@ viewvc-1.1.6.tar.gz /viewvc-1.1.23.tar.gz /viewvc-1.1.24.tar.gz /viewvc-1.1.26.tar.gz +/viewvc-1.1.29.tar.gz diff --git a/sources b/sources index b525457..b88ad3f 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (viewvc-1.1.28.tar.gz) = 719baebd31fa321e7f069a60f6d77f09c0b1b4cfbb0c332ba091be0de97b4f9f439b65f15ef03bb11d515b37ef142937967974030acd9257a883208d191e3833 +SHA512 (viewvc-1.1.29.tar.gz) = f4dacad46d3802dcdf8ff0cba9fc72516bb9ef590ad986a1854fb485faa055277287f9aa145c4dc077cc44763db4c61658f58da7423b2dd8926e9872a1c33ca6 diff --git a/viewvc.spec b/viewvc.spec index 26991a5..978581f 100644 --- a/viewvc.spec +++ b/viewvc.spec @@ -1,7 +1,7 @@ %{!?python_sitelib: %define python_sitelib %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib()")} Name: viewvc -Version: 1.1.28 +Version: 1.1.29 Release: 1%{?dist} Summary: Browser interface for CVS and SVN version control repositories @@ -142,6 +142,10 @@ with decent performance when run under Apache. %attr(0700,apache,apache) %{_localstatedir}/spool/viewvc %changelog +* Wed Jan 4 2023 Bojan Smojver - 1.1.29-1 +- bump up to 1.1.29 +- CVE-2023-22456 + * Wed May 6 2020 Bojan Smojver - 1.1.28-1 - bump up to 1.1.28 - CVE-2020-5283 From 151153f409836312c8de5dd8cba9fdadb843d7ea Mon Sep 17 00:00:00 2001 From: Bojan Smojver Date: Wed, 4 Jan 2023 10:15:22 +1100 Subject: [PATCH 3/5] Define __python to be python2 explicitly. --- viewvc.spec | 1 + 1 file changed, 1 insertion(+) diff --git a/viewvc.spec b/viewvc.spec index 978581f..281e61d 100644 --- a/viewvc.spec +++ b/viewvc.spec @@ -1,3 +1,4 @@ +%define __python /usr/bin/python2 %{!?python_sitelib: %define python_sitelib %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib()")} Name: viewvc From c493afd6e05d9ec8b9ed926b33b1cdbeb4a30015 Mon Sep 17 00:00:00 2001 From: Bojan Smojver Date: Thu, 5 Jan 2023 11:26:49 +1100 Subject: [PATCH 4/5] Update to 1.1.30, CVE-2023-22464. --- viewvc.spec | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/viewvc.spec b/viewvc.spec index 281e61d..da23069 100644 --- a/viewvc.spec +++ b/viewvc.spec @@ -1,8 +1,8 @@ -%define __python /usr/bin/python2 +%global __python /usr/bin/python2 %{!?python_sitelib: %define python_sitelib %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib()")} Name: viewvc -Version: 1.1.29 +Version: 1.1.30 Release: 1%{?dist} Summary: Browser interface for CVS and SVN version control repositories @@ -143,6 +143,10 @@ with decent performance when run under Apache. %attr(0700,apache,apache) %{_localstatedir}/spool/viewvc %changelog +* Thu Jan 5 2023 Bojan Smojver - 1.1.30-1 +- bump up to 1.1.30 +- CVE-2023-22464 + * Wed Jan 4 2023 Bojan Smojver - 1.1.29-1 - bump up to 1.1.29 - CVE-2023-22456 From 8e3e3f6b1e5d913283a7a639e5d332dffcda1a83 Mon Sep 17 00:00:00 2001 From: Bojan Smojver Date: Thu, 5 Jan 2023 11:30:24 +1100 Subject: [PATCH 5/5] Upload new source tarball. --- .gitignore | 1 + sources | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/.gitignore b/.gitignore index ce5405c..287af3d 100644 --- a/.gitignore +++ b/.gitignore @@ -19,3 +19,4 @@ viewvc-1.1.6.tar.gz /viewvc-1.1.24.tar.gz /viewvc-1.1.26.tar.gz /viewvc-1.1.29.tar.gz +/viewvc-1.1.30.tar.gz diff --git a/sources b/sources index b88ad3f..3e122b6 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (viewvc-1.1.29.tar.gz) = f4dacad46d3802dcdf8ff0cba9fc72516bb9ef590ad986a1854fb485faa055277287f9aa145c4dc077cc44763db4c61658f58da7423b2dd8926e9872a1c33ca6 +SHA512 (viewvc-1.1.30.tar.gz) = 389e09a0605f684879a20e00c9a90b91ec7c3720eefba611407d981fa342ca2f9787e7cda527fcc93581fbc0cdb712cd3e0ce768eb006575b88a09c87fda4a47