!22 [sync] PR-18: Fix CVE-2024-50610

From: @openeuler-sync-bot 
Reviewed-by: @starlet-dx 
Signed-off-by: @starlet-dx

backport-CVE-2024-50610.patch

@@ -0,0 +1,25 @@
+From 82bc5c00cfe4d1e2f4386e0760dd9ad26cfa4831 Mon Sep 17 00:00:00 2001
+From: Dirk Eddelbuettel <edd@debian.org>
+Date: Mon, 28 Oct 2024 18:33:15 -0500
+Subject: [PATCH] releasing package gsl version 2.8+dfsg-4
+
+---
+ siman/siman.c | 3 +++
+ 1 file changed, 3 insertions(+)
+
+diff --git a/siman/siman.c b/siman/siman.c
+index 65b9177..5e8d75d 100644
+--- a/siman/siman.c
++++ b/siman/siman.c
+@@ -197,6 +197,9 @@ gsl_siman_solve_many (const gsl_rng * r, void *x0_p, gsl_siman_Efunc_t Ef,
+   double u;                     /* throw the die to choose a new "x" */
+   int n_iter;
+ 
++  /* this function requires that n_tries be positive */
++  assert(params.n_tries > 0);
++
+   if (print_position) {
+     printf ("#-iter    temperature       position");
+     printf ("         delta_pos        energy\n");
+-- 
+2.33.0

gsl.spec

@@ -1,14 +1,17 @@
 Name: gsl
-Version: 2.4
+Version: 2.7
-Release: 9
+Release: 3
 Summary: The GNU Scientific Library for numerical analysis
 URL: http://www.gnu.org/software/gsl/
-License: GPLv3 and GFDL and BSD
+License: GPLv3 and GFDL-1.3-or-later and BSD
 Source: ftp://ftp.gnu.org/gnu/gsl/%{name}-%{version}.tar.gz
 
 Patch0: gsl-test.patch
+# backport patch from Debian
+Patch1: backport-CVE-2024-50610.patch
 
 BuildRequires: gcc pkgconfig
+BuildRequires: chrpath
 
 %description
 The GNU Scientific Library (GSL) is a collection of routines for
@@ -36,7 +39,7 @@ mv THANKS.aux THANKS
 
 %build
 # disable FMA
-%ifarch aarch64
+%ifarch aarch64 loongarch64
 export CFLAGS="$RPM_OPT_FLAGS -ffp-contract=off"
 %endif
 %configure
@@ -51,6 +54,9 @@ make check || ( cat */test-suite.log && exit 1 )
 %install_info_rm
 %delete_la_and_a
 
+chrpath -d %{buildroot}/%{_bindir}/gsl-randist
+chrpath -d %{buildroot}/%{_bindir}/gsl-histogram
+
 %post -p /sbin/ldconfig
 
 %postun -p /sbin/ldconfig
@@ -70,7 +76,7 @@ fi
 %files
 %license COPYING
 %doc AUTHORS ChangeLog NEWS README THANKS TODO
-%{_libdir}/libgsl.so.23*
+%{_libdir}/libgsl.so.25*
 %{_libdir}/libgslcblas.so.0*
 %{_bindir}/gsl-histogram
 %{_bindir}/gsl-randist
@@ -90,5 +96,17 @@ fi
 %{_mandir}/man3/*.3*
 
 %changelog
+* Fri Nov 1 2024 liningjie <liningjie@xfusion.com> - 2.7-3
+- Fix CVE-2024-50610
+
+* Tue Aug 20 2024 yaoxin <yao_xin001@hoperun.com> - 2.7-2
+- Remove rpath
+
+* Sat Feb 04 2023 wenchaofan <349464272@qq.com> - 2.7-1
+- Update to 2.7 version
+
+* Wed Dec 07 2022 xu_ping <xuping33@h-partners.com> - 2.4-10
+- Adaptation Loongarch
+
 * Fri Feb 14 2020 fengbing <fengbing7@huawei.com> - 2.4-9
 - Package init

gsl.yaml

@@ -0,0 +1,4 @@
+version_control: git
+src_repo: https://git.savannah.gnu.org/git/gsl.git
+tag_prefix: "release-"
+seperator: "-"