开源软件构建与测试

Changes of Revision 2

_service:tar_scm:tar.spec Changed

@@ -1,6 +1,6 @@
 Name:          tar
 Version:       1.34
-Release:       1
+Release:       4
 Epoch:         2
 Summary:       An organized and systematic method of controlling a large amount of data
 License:       GPLv3+
@@ -12,11 +12,14 @@
 BuildRequires: gcc
 Provides:      bundled(gnulib) /bin/tar /bin/gtar
 
+Patch6000:     backport-CVE-2022-48303.patch
+
 Patch0001:     tar-1.28-loneZeroWarning.patch
 Patch0002:     tar-1.28-vfatTruncate.patch
 Patch0003:     tar-1.29-wildcards.patch
 Patch0004:     tar-1.28-atime-rofs.patch
 Patch0005:     tar-1.28-document-exclude-mistakes.patch
+Patch0006:     tar-Add-sw64-architecture.patch
 
 %description
 GNU Tar provides the ability to create tar archives, as well as various other
@@ -75,16 +78,25 @@
 %{_infodir}/tar.info*
 
 %changelog
-* Sat Nov 13 2021 shixuantong <shixuantong> - 1.34-1
+* Wed Feb 08 2023 wangjiang <wangjiang37@h-partners.com> 2:1.34-4
+- fix CVE-2022-48303
+
+* Fri Nov 11 2022 wuzx<wuzx1226@qq.com> - 2:1.34-3
+- Add sw64 architecture
+
+* Thu Oct 27 2022 dongyuzhen <dongyuzhen@h-partners.com> - 2:1.34-2
+- Rebuild for next release
+
+* Sat Nov 13 2021 shixuantong <shixuantong> - 2:1.34-1
 - update version to 1.34
 
-* Thu Jun 10 2021 shixuantong <shixuantong> - 1.32-3
+* Thu Jun 10 2021 shixuantong <shixuantong> - 2:1.32-3
 - add gcc to BuildRequires
 
-* Wed Apr 14 2021 shixuantong <shixuantong> - 1.32-2 
+* Wed Apr 14 2021 shixuantong <shixuantong> - 2:1.32-2 
 - fix CVE-2021-20193
 
-* Mon Jul 27 2020 shixuantong <shixuantong> - 1.32-1
+* Mon Jul 27 2020 shixuantong <shixuantong> - 2:1.32-1
 - update to 1.32-1
 
 * Tue Feb 18 2020 openEuler Buildteam <buildteam@openeuler.org> - 2:1.30-11

_service:tar_scm:backport-CVE-2022-48303.patch Added

@@ -0,0 +1,31 @@
+From 1d530107a24d71e798727d7f0afa0833473d1074 Mon Sep 17 00:00:00 2001
+From: Matej Mužila <mmuzila@gmail.com>
+Date: Wed, 11 Jan 2023 08:55:58 +0100
+Subject: PATCH Fix savannah bug #62387
+
+* src/list.c (from_header): Check for the end of field after leading byte
+  (0x80 or 0xff) of base-256 encoded header value
+---
+ src/list.c | 6 ++++++
+ 1 file changed, 6 insertions(+)
+
+diff --git a/src/list.c b/src/list.c
+index 9fafc425..bf41b581 100644
+--- a/src/list.c
++++ b/src/list.c
+@@ -899,6 +899,12 @@ from_header (char const *where0, size_t digs, char const *type,
+ 			   << (CHAR_BIT * sizeof (uintmax_t)
+ 			       - LG_256 - (LG_256 - 2)));
+       value = (*where++ & ((1 << (LG_256 - 2)) - 1)) - signbit;
++      if (where == lim)
++        {
++          if (type && !silent)
++            ERROR ((0, 0, _("Archive base-256 value is invalid")));
++          return -1;
++        }
+       for (;;)
+ 	{
+ 	  value = (value << LG_256) + (unsigned char) *where++;
+-- 
+2.38.1
+

_service:tar_scm:tar-Add-sw64-architecture.patch Added

_service Changed