rpms/expat
6
0
Fork 0
Code Issues Pull Requests Releases Activity

Fix CVE-2024-8176

Browse Source 
Resolves: RHEL-57489
This commit is contained in:
Tomas Korbar 2025-03-31 15:44:25 +02:00
parent 4b4a20d485
commit 3dc8bb2fd0
2 changed files with 1543 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1535
expat-2.5.0-CVE-2024-8176.patch Normal file
View File

File diff suppressed because it is too large Load Diff

9
expat.spec
View File

@ -3,7 +3,7 @@
Summary: An XML parser library
Name: expat
Version: %(echo %{unversion} | sed 's/_/./g')
Release: 4%{?dist}
Release: 5%{?dist}
Source: https://github.com/libexpat/libexpat/archive/R_%{unversion}.tar.gz#/expat-%{version}.tar.gz
URL: https://libexpat.github.io/
License: MIT
@ -21,6 +21,8 @@ Patch3: expat-2.5.0-CVE-2024-45491.patch
Patch4: expat-2.5.0-CVE-2024-45492.patch
# https://issues.redhat.com/browse/RHEL-65066
Patch5: expat-2.5.0-CVE-2024-50602.patch
# https://issues.redhat.com/browse/RHEL-57489
Patch6: expat-2.5.0-CVE-2024-8176.patch
%description
This is expat, the C library for parsing XML, written by James Clark. Expat
@ -55,6 +57,7 @@ pushd ..
%patch3 -p1 -b .CVE-2024-45491
%patch4 -p1 -b .CVE-2024-45492
%patch5 -p1 -b .CVE-2024-50602
%patch6 -p1 -b .CVE-2024-8176
popd
sed -i 's/install-data-hook/do-nothing-please/' lib/Makefile.am
@ -103,6 +106,10 @@ make check
%{_libdir}/lib*.a
%changelog
* Mon Mar 31 2025 Tomas Korbar <tkorbar@redhat.com> - 2.5.0-5
- Fix CVE-2024-8176
- Resolves: RHEL-57489
* Thu Nov 07 2024 Tomas Korbar <tkorbar@redhat.com> - 2.5.0-4
- Fix CVE-2024-50602
- Resolves: RHEL-65066