!36 [sync] PR-34: Fix build failure due to libxml fixed CVE

From: @openeuler-sync-bot 
Reviewed-by: @jxy_git 
Signed-off-by: @jxy_git
This commit is contained in:
openeuler-ci-bot 2023-01-04 03:05:46 +00:00 committed by Gitee
commit 13a7a7474a
No known key found for this signature in database
GPG Key ID: 173E9B9CA92EEF8F

View File

@ -7,13 +7,14 @@
Summary: An HTML, XML, SAX, and Reader parser Summary: An HTML, XML, SAX, and Reader parser
Name: rubygem-%{gem_name} Name: rubygem-%{gem_name}
Version: %{mainver} Version: %{mainver}
Release: 1 Release: 2
License: MIT and ASL 2.0 License: MIT and Apache-2.0
URL: https://nokogiri.org URL: https://nokogiri.org
Source0: https://rubygems.org/gems/%{gem_name}-%{mainver}%{?prever}.gem Source0: https://rubygems.org/gems/%{gem_name}-%{mainver}%{?prever}.gem
Source1: rubygem-%{gem_name}-%{version}%{?prever}-full.tar.gz Source1: rubygem-%{gem_name}-%{version}%{?prever}-full.tar.gz
BuildRequires: ruby(release) ruby(rubygems) rubygem(minitest) rubygems-devel BuildRequires: ruby(release) ruby(rubygems) rubygem(minitest) rubygems-devel
BuildRequires: rubygem(did_you_mean)
Obsoletes: ruby-%{gem_name} <= 1.5.2-2 Obsoletes: ruby-%{gem_name} <= 1.5.2-2
BuildRequires: gcc libxml2-devel libxslt-devel ruby-devel glibc-all-langpacks rubygem(racc) BuildRequires: gcc libxml2-devel libxslt-devel ruby-devel glibc-all-langpacks rubygem(racc)
Requires: rubygem(racc) Requires: rubygem(racc)
@ -68,6 +69,8 @@ sed -i \
gumbo-parser/src/Makefile \ gumbo-parser/src/Makefile \
-e 's|^\(CFLAGS.*=.*\)$|\1 -fPIC|' -e 's|^\(CFLAGS.*=.*\)$|\1 -fPIC|'
env LANG=C.UTF-8 gem build %{gem_name}-%{version}.gemspec env LANG=C.UTF-8 gem build %{gem_name}-%{version}.gemspec
#CVE-2022-40303 https://gitlab.gnome.org/GNOME/libxml2/-/commit/c846986
sed -i 's/assert_predicate(handler.errors, :empty?)/assert_match(\/CData section too big\/, handler.errors.first)/g' nokogiri-1.13.7/test/xml/sax/test_parser.rb
%build %build
export NOKOGIRI_USE_SYSTEM_LIBRARIES=yes export NOKOGIRI_USE_SYSTEM_LIBRARIES=yes
@ -160,6 +163,9 @@ popd
%{gem_dir}/doc/%{gem_name}-%{mainver}%{?prever}/ %{gem_dir}/doc/%{gem_name}-%{mainver}%{?prever}/
%changelog %changelog
* Fri Nov 11 2022 Ge Wang <wangge20@h-partners.com> - 1.13.7-2
- fix build failure due to libxml fixed CVE
* Thu Jul 14 2022 Ge Wang <wangge20@h-partners.com> - 1.13.7-1 * Thu Jul 14 2022 Ge Wang <wangge20@h-partners.com> - 1.13.7-1
- update to 1.13.7 - update to 1.13.7