diff --git a/libsoup3.spec b/libsoup3.spec index 0e50cbad359753d6ddb7ec3df8e621c3e4d0eb52..31c9b64d75d3203960ac5033e83ed476d2f5143a 100644 --- a/libsoup3.spec +++ b/libsoup3.spec @@ -1,4 +1,4 @@ -%define anolis_release 4 +%define anolis_release 5 %global glib2_version 2.69.1 %{!?with_docs: %global with_docs 1} @@ -12,6 +12,7 @@ Summary: Soup, an HTTP library implementation License: LGPL-2.0-or-later URL: https://wiki.gnome.org/Projects/libsoup Source0: https://download.gnome.org/sources/libsoup/3.6/libsoup-%{version}.tar.xz +%global commit 8988379984e33dcc7d3aa58551db13e48755959f\nSource0: https://gitlab.gnome.org/GNOME/libsoup/-/archive/%{commit}/libsoup-%{commit}.tar.gz\n # From https://gitlab.com/redhat/centos-stream/rpms/libsoup3/-/tree/c10s?ref_type=heads Patch0: 1000-CVE-2025-4948.patch @@ -115,6 +116,11 @@ install -m 644 -D tests/libsoup.supp %{buildroot}%{_datadir}/libsoup-3.0/libsoup %doc README NEWS AUTHORS %changelog +* Mon Apr 05 2024 Upstream Sync - 3.6.5-5%{?dist} +- Sync upstream changes from commit 8988379984e33dcc7d3aa58551db13e48755959f +- Add value checks for parsed date/time fields to reject invalid values (bypassing g_date_valid_dmy, range checks for hour/min/sec/day/year/timezone) +- Addresses https://gitlab.gnome.org/GNOME/libsoup/-/issues/448 + * Tue Sep 23 2025 Hong Wei Qin - 3.6.5-4 - add patch to fix CVE-2025-4035