rpms/oniguruma
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Fix CVE-2019-19204

Browse Source 
Resolves: RHEL-9509
This commit is contained in:
Vitezslav Crhonek 2023-12-21 10:51:20 +01:00
parent 59bb9d31b1
commit 347502f5db
2 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
oniguruma-6.8.2-CVE-2019-19204-fix.patch Normal file
View File

@ -0,0 +1,12 @@
diff -up onig-6.8.2/src/regparse.c.orig onig-6.8.2/src/regparse.c
--- onig-6.8.2/src/regparse.c.orig 2023-10-13 10:22:48.882495157 +0200
+++ onig-6.8.2/src/regparse.c 2023-10-13 10:23:11.096529668 +0200
@@ -4132,7 +4132,7 @@ fetch_range_quantifier(UChar** src, UCha
if (PEND) goto invalid;
PFETCH(c);
if (IS_SYNTAX_OP(env->syntax, ONIG_SYN_OP_ESC_BRACE_INTERVAL)) {
- if (c != MC_ESC(env->syntax)) goto invalid;
+ if (c != MC_ESC(env->syntax) || PEND) goto invalid;
PFETCH(c);
}
if (c != '}') goto invalid;

4
oniguruma.spec
View File

@ -14,6 +14,7 @@ Patch101: oniguruma-6.8.2-CVE-2019-13224-fix.patch
Patch102: oniguruma-6.8.2-CVE-2019-16163-fix.patch
Patch103: oniguruma-6.8.2-CVE-2019-19012-fix.patch
Patch104: oniguruma-6.8.2-CVE-2019-19203-fix.patch
Patch105: oniguruma-6.8.2-CVE-2019-19204-fix.patch
%description
Oniguruma is a regular expressions library.
@ -54,6 +55,7 @@ done
%patch102 -p1 -b .CVE-2019-16163
%patch103 -p1 -b .CVE-2019-19012
%patch104 -p1 -b .CVE-2019-19203
%patch105 -p1 -b .CVE-2019-19204
%build
%configure \
@ -119,6 +121,8 @@ find $RPM_BUILD_ROOT -name '*.la' \
Resolves: RHEL-9511
- Fix CVE-2019-19203
Resolves: RHEL-9510
- Fix CVE-2019-19204
Resolves: RHEL-9509
* Fri Jun 26 2020 Jiri Kucera <jkucera@redhat.com> - 6.8.2-2
- Fix CVE-2019-13225