From fabf05ef58b1dfb245048155e7ff17a4d5bbcf45 Mon Sep 17 00:00:00 2001 From: MSVSphere Packaging Team Date: Thu, 14 Nov 2024 03:02:57 +0300 Subject: [PATCH] import tigervnc-1.13.1-14.el8_10 --- SPECS/tigervnc.spec | 26 +++++++++++++++----------- 1 file changed, 15 insertions(+), 11 deletions(-) diff --git a/SPECS/tigervnc.spec b/SPECS/tigervnc.spec index 9e79430..9175503 100644 --- a/SPECS/tigervnc.spec +++ b/SPECS/tigervnc.spec @@ -5,7 +5,7 @@ Name: tigervnc Version: 1.13.1 -Release: 13%{?dist} +Release: 14%{?dist} Summary: A TigerVNC remote display system %global _hardened_build 1 @@ -186,22 +186,22 @@ pushd unix/xserver for all in `find . -type f -perm -001`; do chmod -x "$all" done -%patch100 -p1 -b .xserver120-rebased -%patch101 -p1 -b .rpath +%patch -P100 -p1 -b .xserver120-rebased +%patch -P101 -p1 -b .rpath popd -%patch1 -p1 -b .use-gnome-as-default-session -%patch2 -p1 -b .vncsession-restore-script-systemd-service -%patch3 -p1 -b .dont-install-appstream-metadata-file.patch +%patch -P1 -p1 -b .use-gnome-as-default-session +%patch -P2 -p1 -b .vncsession-restore-script-systemd-service +%patch -P3 -p1 -b .dont-install-appstream-metadata-file.patch # Upstream patches -%patch50 -p1 -b .support-username-alias-in-plainusers -%patch51 -p1 -b .use-dup-to-get-available-fd-for-inetd -%patch52 -p1 -b .add-option-to-force-view-only-remote-connections -%patch53 -p1 -b .tigervnc-vncsession-use-bin-sh-when-shell-not-set +%patch -P50 -p1 -b .support-username-alias-in-plainusers +%patch -P51 -p1 -b .use-dup-to-get-available-fd-for-inetd +%patch -P52 -p1 -b .add-option-to-force-view-only-remote-connections +%patch -P53 -p1 -b .tigervnc-vncsession-use-bin-sh-when-shell-not-set # Upstreamable patches -%patch80 -p1 -b .dont-get-pointer-position-for-floating-device +%patch -P80 -p1 -b .dont-get-pointer-position-for-floating-device %build %ifarch sparcv9 sparc64 s390 s390x @@ -356,6 +356,10 @@ fi %ghost %verify(not md5 size mode mtime) %{_sharedstatedir}/selinux/%{selinuxtype}/active/modules/200/%{modulename} %changelog +* Thu Oct 31 2024 Jan Grulich +- Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability + Resolves: RHEL-61999 + * Mon Aug 05 2024 Jan Grulich - 1.13.1-13 - vncsession: use /bin/sh if the user shell is not set Resolves: RHEL-52827