diff --git a/4.9.1.tar.gz b/4.9.1.tar.gz deleted file mode 100644 index bafeed2562e7287db362098b3964ae7e2d047b3e..0000000000000000000000000000000000000000 Binary files a/4.9.1.tar.gz and /dev/null differ diff --git a/4.9.4.tar.gz b/4.9.4.tar.gz new file mode 100644 index 0000000000000000000000000000000000000000..c401c7a844e92aebb053638721a25f4a75861f96 Binary files /dev/null and b/4.9.4.tar.gz differ diff --git a/CVE-2022-2255.patch b/CVE-2022-2255.patch deleted file mode 100644 index 713316f19f9c8fd8d91d57ab0e456520a2434104..0000000000000000000000000000000000000000 --- a/CVE-2022-2255.patch +++ /dev/null @@ -1,11 +0,0 @@ -diff -Nur mod_wsgi-4.9.1.old/src/server/mod_wsgi.c mod_wsgi-4.9.1/src/server/mod_wsgi.c ---- mod_wsgi-4.9.1.old/src/server/mod_wsgi.c 2022-08-08 10:12:40.044127804 +0800 -+++ mod_wsgi-4.9.1/src/server/mod_wsgi.c 2022-08-08 10:14:21.532845853 +0800 -@@ -14044,6 +14044,7 @@ - name = ((const char**)trusted_proxy_headers->elts)[i]; - - if (!strcmp(name, "HTTP_X_FORWARDED_FOR") || -+ !strcmp(name, "HTTP_X_CLIENT_IP") || - !strcmp(name, "HTTP_X_REAL_IP")) { - - match_client_header = 1; diff --git a/mod_wsgi.spec b/mod_wsgi.spec index dcf9152b672a1480401a8704c5c2a2b5f271a3f7..ec5b27bd20e008024394fd0fd61fa070c8794fc6 100644 --- a/mod_wsgi.spec +++ b/mod_wsgi.spec @@ -5,15 +5,14 @@ %{!?_httpd_moddir: %{expand: %%global _httpd_moddir %%{_libdir}/httpd/modules}} %global sphinxbin %{_bindir}/sphinx-build-3 Name: mod_wsgi -Version: 4.9.1 -Release: 3 +Version: 4.9.4 +Release: 1 Summary: A WSGI interface for Python web applications in Apache License: Apache-2.0 URL: https://modwsgi.readthedocs.io/ Source0: https://github.com/GrahamDumpleton/mod_wsgi/archive/refs/tags/%{version}.tar.gz Source1: wsgi-python3.conf Patch1: mod_wsgi-4.5.20-exports.patch -Patch2: CVE-2022-2255.patch BuildRequires: httpd-devel gcc perl chrpath %{?filter_provides_in: %filter_provides_in %{_httpd_moddir}/.*\.so$} %{?filter_setup} @@ -77,6 +76,9 @@ chrpath -d %{buildroot}%{python3_sitearch}/mod_wsgi/server/mod_wsgi-py310.cpytho %{_bindir}/mod_wsgi-express-3 %changelog +* Thu May 11 2023 Ge Wang - 4.9.4-1 +- Update to version 4.9.4 + * Fri Mar 3 2023 liyanan - 4.9.1-3 - Remove rpath