diff --git a/Remove-unused-i-option-in-authvar.patch b/Remove-unused-i-option-in-authvar.patch new file mode 100644 index 0000000000000000000000000000000000000000..7b92d690f88b2f8e1e4a8a2260c06b0c5a7ae8e7 --- /dev/null +++ b/Remove-unused-i-option-in-authvar.patch @@ -0,0 +1,16 @@ +diff -Nur a/src/authvar.c b/src/authvar.c +--- a/src/authvar.c 2022-03-09 01:46:30.000000000 +0800 ++++ b/src/authvar.c 2023-05-31 16:47:15.329069974 +0800 +@@ -324,12 +324,6 @@ + .arg = &ctx.valuefile, + .descrip = "read value from ", + .argDescrip = "" }, +- {.longName = "import", +- .shortName = 'i', +- .argInfo = POPT_ARG_STRING, +- .arg = &ctx.importfile, +- .descrip = "import variable from ", +- .argDescrip = "" }, + {.longName = "export", + .shortName = 'e', + .argInfo = POPT_ARG_STRING, diff --git a/pesign.spec b/pesign.spec index 5941bcccdf95d1e1cc10dacb0da496754f4c4bb0..1f46bbd3bc57c5b94f96a6ce0e8392235b229d9c 100644 --- a/pesign.spec +++ b/pesign.spec @@ -2,7 +2,7 @@ Name: pesign Summary: Signing utility for UEFI binaries Version: 0.113 -Release: 5 +Release: 6 License: GPLv2 URL: https://github.com/vathpela/pesign Source0: https://github.com/rhboot/pesign/archive/113.tar.gz @@ -13,8 +13,10 @@ Requires(pre): shadow-utils BuildRequires: nspr nss nss-util popt-devel nss-tools nspr-devel >= 4.9.2-1 BuildRequires: nss-devel >= 3.13.6-1 efivar-devel >= 31-1 libuuid-devel tar xz BuildRequires: python3-rpm-macros python3 systemd python3-devel + Patch0001: Fix-the-build-with-nss-3.44.patch Patch0002: Fix-CVE-2022-3560.patch +Patch0003: Remove-unused-i-option-in-authvar.patch %description pesign is a command line tool for manipulating signatures and cryptographic digests of UEFI applications. @@ -80,6 +82,9 @@ exit 0 %{_mandir}/man*/* %changelog +* Tue May 07 2024 xu_ping <707078654@qq.com> - 0.113-6 +- Remove unused i option in authvar + * Wed Feb 15 2023 luopihui - 0.113-5 - Fix CVE-2022-3560