commit c3c3805377e7c3bfe43c3eab2879aaa66e5e24f4
Author: Xavier Bachelot <xavier(a)bachelot.org>
Date: Sun Jul 17 22:54:05 2011 +0200
Remove salted password patch
rt3.spec | 8 +++++---
1 files changed, 5 insertions(+), 3 deletions(-)
---
diff --git a/rt3.spec b/rt3.spec
index e479e9d..0e7b56c 100644
--- a/rt3.spec
+++ b/rt3.spec
@@ -13,7 +13,7 @@
Name: rt3
Version: 3.6.11
-Release: 1%{?dist}
+Release: 2%{?dist}
Summary: Request tracker 3
Group: Applications/Internet
@@ -27,7 +27,6 @@ Source5: rt3.logrotate.in
Patch0: rt-3.6.1-config.diff
Patch1: rt-3.4.1-I18N.diff
Patch2: rt-3.6.0-Makefile.diff
-Patch3: rt3-3.6.11-salted_passwords.patch
BuildArch: noarch
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
@@ -103,7 +102,6 @@ find etc -type f -exec chmod a-x {} \;
%patch0 -p1
%patch1 -p1
%patch2 -p1
-%patch3 -p1
# Patch backups added by rpm disturb
find -name '*.orig' -exec rm -f {} \;
@@ -283,6 +281,10 @@ fi
%{_mandir}/man1/rt-mailgate*
%changelog
+* Sun Jul 17 2011 Xavier Bachelot <xavier(a)bachelot.org> - 3.6.11-2
+- Remove the salted password patch (CVE-2011-0009), it breaks authentication
+ in some cases. Use the RT-Extension-SaltedPasswords extension instead.
+
* Sun Apr 17 2011 Xavier Bachelot <xavier(a)bachelot.org> - 3.6.11-1
- Update to 3.6.11 (CVE-2011-1685).