fix cve-2022-3171

Signed-off-by: chengzrz <czrzrichard@gmail.com>
This commit is contained in:
chengzrz 2022-10-17 19:04:43 +08:00
parent 7477ebfa71
commit fe90bc1447
2 changed files with 4932 additions and 1 deletions

4924
0006-fix-CVE-2022-3171.patch Normal file

File diff suppressed because it is too large Load Diff

View File

@ -8,7 +8,7 @@
Summary: Protocol Buffers - Google's data interchange format
Name: protobuf
Version: 3.14.0
Release: 5
Release: 6
License: BSD
URL: https://github.com/protocolbuffers/protobuf
Source: https://github.com/protocolbuffers/protobuf/releases/download/v%{version}%{?rcver}/%{name}-all-%{version}%{?rcver}.tar.gz
@ -19,6 +19,7 @@ Patch9001: 0002-add-secure-compile-fs-check-in-Makefile.patch
Patch9002: 0003-fix-CVE-2021-22570.patch
Patch9003: 0004-Improve-performance-of-parsing-unknown-fields-in-Jav.patch
Patch9004: 0005-fix-CVE-2022-1941.patch
Patch9005: 0006-fix-CVE-2022-3171.patch
BuildRequires: make autoconf automake emacs gcc-c++ libtool pkgconfig zlib-devel
@ -324,6 +325,12 @@ install -p -m 0644 %{SOURCE1} %{buildroot}%{_emacs_sitestartdir}
%endif
%changelog
* Tue Oct 18 2022 chengzeruizhi <chengzeruizhi@huawei.com> - 3.14.0-6
- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix CVE-2022-3171
* Tue Oct 11 2022 chengzeruizhi <chengzeruizhi@huawei.com> - 3.14.0-5
- Type:bugfix
- ID:NA