Request 875610 (accepted)

This request supersedes: request 875214 (Show diff)

Overview

Request 875610 accepted

- Fix build: Do not build libsasl2-3 in the bdb package. This will
not be linked to berkely db. libsasl2-3 is now defined as
%BuildRequires and %Requires

The packages cyrus-sasl and cyrus-sasl-saslauthd are built
The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
The packages cyrus-sasl and cyrus-sasl-saslauthd are built
The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
due to insecure tmp file usage. (bsc#1180669)
Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
files.

The packages cyrus-sasl and cyrus-sasl-saslauthd are built
The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built

Created by varkoly over 3 years ago
In state accepted
Supersedes 875214

Submit cyrus-sasl

Comments for request 875610 0
Comments for request 875214 1

Ismail Dönmez (namtrac) - over 3 years ago

@varkoly Can you add a more verbose changelog entry? "Fix build" doesn't really tell anything.

Request History

varkoly created request over 3 years ago

- Fix build: Do not build libsasl2-3 in the bdb package. This will
not be linked to berkely db. libsasl2-3 is now defined as
%BuildRequires and %Requires

The packages cyrus-sasl and cyrus-sasl-saslauthd are built
The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built