From 9dd858e83db0891dd8e1f1b90b77aeb8cff46201 Mon Sep 17 00:00:00 2001 From: Jakub Martisko Date: Fri, 20 Jun 2025 14:35:19 +0200 Subject: [PATCH] Fix one of the patches from the previous commit - renamed variable caused failures in the QA runs - Since teh variable is was used in an assert, the normal builds did not fail Related: cve-2019-17543 --- cve-2019-17543-part2.patch | 2 +- lz4.spec | 7 ++++++- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/cve-2019-17543-part2.patch b/cve-2019-17543-part2.patch index 873ba10..c8e9c3a 100644 --- a/cve-2019-17543-part2.patch +++ b/cve-2019-17543-part2.patch @@ -73,7 +73,7 @@ index 1e80c9812..461644da0 100644 *token += (BYTE)(matchCode); } + /* Ensure we have enough space for the last literals. */ -+ assert(!(outputDirective == fillOutput && op + 1 + LASTLITERALS > olimit)); ++ assert(!(outputLimited == fillOutput && op + 1 + LASTLITERALS > olimit)); anchor = ip; diff --git a/lz4.spec b/lz4.spec index 7c2ae8d..5a85546 100644 --- a/lz4.spec +++ b/lz4.spec @@ -1,6 +1,6 @@ Name: lz4 Version: 1.8.3 -Release: 4%{?dist} +Release: 5%{?dist} Summary: Extremely fast compression algorithm License: GPLv2+ and BSD @@ -84,6 +84,11 @@ chmod +x ./configure %{_libdir}/liblz4.a %changelog +* Fri Jun 20 2025 Jakub Martisko - 1.8.3-5 +- Fix a renamed variable in one of the patches +- Since the variable was used in an assert, the regular build did not fail, but the QA builds did. +- Related: RHEL-87362 + * Thu Jun 19 2025 Jakub Martisko - 1.8.3-4 - Fix CVE-2019-17543 - Resolves: RHEL-87362