From 9d94fa8a6d59f08bef99b96cf4485140902f0fdd Mon Sep 17 00:00:00 2001 From: h3x2b Date: Apr 13 2017 14:36:34 +0000 Subject: Adding patch from pull #637 to fix security issues. https://patch-diff.githubusercontent.com/raw/VirusTotal/yara/pull/627.patch Fixes: CVE-2016-10210 CVE-2016-10211 CVE-2017-5923 CVE-2017-5924 --- diff --git a/yara.spec b/yara.spec index d356688..7042a88 100644 --- a/yara.spec +++ b/yara.spec @@ -12,7 +12,7 @@ Name: yara Version: 3.5.0 -Release: 6%{?dist} +Release: 7%{?dist} Summary: Pattern matching Swiss knife for malware researchers Group: Development/Libraries @@ -33,6 +33,10 @@ Patch0: %{name}-androguard.patch # to avoid static installation of font files on fedora >= 24 Patch1: %{name}-docs-theme.patch +# Patch https://patch-diff.githubusercontent.com/raw/VirusTotal/yara/pull/627.patch +# Fixes: CVE-2016-10210 CVE-2016-10211 CVE-2017-5923 CVE-2017-5924 +Patch2: %{name}-pull627.patch + BuildRequires: gcc BuildRequires: autoconf @@ -148,6 +152,11 @@ rm -f %{buildroot}%{_datadir}/doc/%{name}/html/.buildinfo %doc docs/_build/html %changelog +* Thu Apr 13 2017 Michal Ambroz - 3.5.0-7 +- Adding patch from pull request 627 until 3.5.1 is released +- https://patch-diff.githubusercontent.com/raw/VirusTotal/yara/pull/627.patch +- Fixes CVE-2016-10210 CVE-2016-10211 CVE-2017-5923 CVE-2017-5924 + * Sat Feb 11 2017 Fedora Release Engineering - 3.5.0-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild