[libvirt] [PATCH] spec: Update polkit dependencies for CVE-2013-4311
Jiri Denemark
jdenemar at redhat.com
Tue Jul 15 14:39:12 UTC 2014
On Tue, Jul 15, 2014 at 07:56:28 -0600, Eric Blake wrote:
> On 07/15/2014 07:23 AM, Jiri Denemark wrote:
> > Use secured polkit on distros which provide it. However, RHEL-6 will
> > still allow for older polkit-0.93 rather than forcing polkit-0.96-5
> > which is not available in all RHEL-6 releases.
> >
> > Signed-off-by: Jiri Denemark <jdenemar at redhat.com>
> > ---
> > libvirt.spec.in | 8 ++++++--
> > 1 file changed, 6 insertions(+), 2 deletions(-)
> >
> > diff --git a/libvirt.spec.in b/libvirt.spec.in
> > index 8d1acfa..f32ab00 100644
> > --- a/libvirt.spec.in
> > +++ b/libvirt.spec.in
> > @@ -535,7 +535,9 @@ BuildRequires: module-init-tools
> > BuildRequires: cyrus-sasl-devel
> > %endif
> > %if %{with_polkit}
> > - %if 0%{?fedora} >= 12 || 0%{?rhel} >= 6
> > + %if 0%{?fedora} >= 21 || 0%{?rhel} >= 7
> > +BuildRequires: polkit-devel >= 0.112
>
> Fedora 20 has polkit-devel-0.112-2 - so we might as well use >= 20 in
> that conditional.
>
>
> > %if %{with_polkit}
> > - %if 0%{?fedora} >= 12 || 0%{?rhel} >=6
> > + %if 0%{?fedora} >= 21 || 0%{?rhel} >= 7
> > +Requires: polkit >= 0.112
>
> and again.
>
> ACK with that tweak.
Fixed and pushed, thanks.
Jirka
More information about the libvir-list
mailing list