rpms/gnutls/F-8 gnutls.spec,1.31,1.32

[Tomáš Mráz]

Author: tmraz

Update of /cvs/pkgs/rpms/gnutls/F-8
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv8401

Modified Files:
	gnutls.spec 
Log Message:
* Tue Nov 11 2008 Tomas Mraz <tmraz at redhat.com> 1.6.3-5
- fix chain verification issue CVE-2008-4989 (#470079)



Index: gnutls.spec
===================================================================
RCS file: /cvs/pkgs/rpms/gnutls/F-8/gnutls.spec,v
retrieving revision 1.31
retrieving revision 1.32
diff -u -r1.31 -r1.32
--- gnutls.spec	20 Jun 2008 14:06:27 -0000	1.31
+++ gnutls.spec	11 Nov 2008 14:33:31 -0000	1.32
@@ -1,7 +1,7 @@
 Summary: A TLS protocol implementation
 Name: gnutls
 Version: 1.6.3
-Release: 4%{?dist}
+Release: 5%{?dist}
 # The libgnutls library is LGPLv2+, utilities and remaining libraries are GPLv2+
 License: GPLv2+ and LGPLv2+
 Group: System Environment/Libraries
@@ -20,6 +20,7 @@
 Patch2: gnutls-1.6.3-incompat-pointers.patch
 Patch4: gnutls-1.4.1-sa-2008-1.patch
 Patch5: gnutls-1.6.3-compress.patch
+Patch6: gnutls-1.4.1-cve-2008-4989.patch
 
 BuildRoot:  %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 Requires: libgcrypt >= 1.2.2
@@ -65,6 +66,7 @@
 %patch2 -p1 -b .incompat
 %patch4 -p1 -b .sa-2008-1
 %patch5 -p1 -b .compress
+%patch6 -p1 -b .chain-verify
 
 for i in auth_srp_rsa.c auth_srp_sb64.c auth_srp_passwd.c auth_srp.c gnutls_srp.c ext_srp.c; do
     touch lib/$i
@@ -131,6 +133,9 @@
 %{_mandir}/man1/*
 
 %changelog
+* Tue Nov 11 2008 Tomas Mraz <tmraz at redhat.com> 1.6.3-5
+- fix chain verification issue CVE-2008-4989 (#470079)
+
 * Fri Jun 20 2008 Tomas Mraz <tmraz at redhat.com> 1.6.3-4
 - backported fix for compression support (#451952)