!90 [sync] PR-86: Update xmlhash to 1.3.8 for fix CVE-2022-21949

From: @openeuler-sync-bot 
Reviewed-by: @small_leek 
Signed-off-by: @small_leek
This commit is contained in:
openeuler-ci-bot 2022-05-17 06:18:29 +00:00 committed by Gitee
commit fe1b3b9e4b
No known key found for this signature in database
GPG Key ID: 173E9B9CA92EEF8F
3 changed files with 8 additions and 5 deletions

View File

@ -1,5 +1,5 @@
GEM
remote: https://rubygems.org/
remote: https://anonymous:devcloud@mirrors.huaweicloud.com/repository/rubygems/
specs:
actioncable (5.2.7)
actionpack (= 5.2.7)
@ -476,7 +476,7 @@ GEM
websocket-driver (0.7.5)
websocket-extensions (>= 0.1.0)
websocket-extensions (0.1.5)
xmlhash (1.3.7)
xmlhash (1.3.8)
pkg-config
xmlrpc (0.3.2)
webrick

View File

@ -1,5 +1,5 @@
GEM
remote: https://rubygems.org/
remote: https://anonymous:devcloud@mirrors.huaweicloud.com/repository/rubygems/
specs:
actioncable (5.2.7)
actionpack (= 5.2.7)
@ -476,7 +476,7 @@ GEM
websocket-driver (0.7.5)
websocket-extensions (>= 0.1.0)
websocket-extensions (0.1.5)
xmlhash (1.3.7)
xmlhash (1.3.8)
pkg-config
xmlrpc (0.3.2)
webrick

View File

@ -6,7 +6,7 @@
Name: obs-server
Version: 2.10.11
Release: 3
Release: 4
Summary: The Open Build Service -- Server Component
License: GPL-2.0-only OR GPL-3.0-only
URL: http://www.openbuildservice.org
@ -516,6 +516,9 @@ usermod -a -G docker obsservicerun
%{_sbindir}/rcobsstoragesetup
%changelog
* Mon May 16 2022 wangkai <wangkai385@h-partners.com> - 2.10.11-4
- Update xmlhash to 1.3.8 for fix CVE-2022-21949
* Mon Mar 28 2022 wulei <wulei80@huawei.com> - 2.10.11-3
- Fix installation failed