diff --git a/0001-resource-leaks.patch b/0001-resource-leaks.patch index 7fb4db5..9f7d416 100644 --- a/0001-resource-leaks.patch +++ b/0001-resource-leaks.patch @@ -43,6 +43,19 @@ diff -up xmlsec1-1.2.29/src/gcrypt/asymkeys.c.orig xmlsec1-1.2.29/src/gcrypt/asy /* done */ return(res); } +@@ -292,11 +295,11 @@ xmlSecGCryptAsymKeyDataGenerate(xmlSecKe + } + + ret = xmlSecGCryptAsymKeyDataAdoptKey(data, key_pair); ++ key_pair = NULL; /* now owned by data */ + if(ret < 0) { + xmlSecInternalError("xmlSecGCryptAsymKeyDataAdopt", NULL); + goto done; + } +- key_pair = NULL; /* now owned by data */ + + /* success */ + res = 0; diff -up xmlsec1-1.2.29/src/parser.c.orig xmlsec1-1.2.29/src/parser.c --- xmlsec1-1.2.29/src/parser.c.orig 2024-05-10 13:46:59.217160842 +0200 +++ xmlsec1-1.2.29/src/parser.c 2024-05-10 17:28:22.848994008 +0200 diff --git a/xmlsec1.spec b/xmlsec1.spec index e2092fc..8814452 100644 --- a/xmlsec1.spec +++ b/xmlsec1.spec @@ -1,7 +1,7 @@ Summary: Library providing support for "XML Signature" and "XML Encryption" standards Name: xmlsec1 Version: 1.2.29 -Release: 11%{?dist}%{?extra_release} +Release: 12%{?dist}%{?extra_release} License: MIT Source0: https://www.aleksey.com/xmlsec/download/xmlsec1-%{version}.tar.gz URL: http://www.aleksey.com/xmlsec/ @@ -178,6 +178,10 @@ mv %{buildroot}%{_docdir}/xmlsec1/* __tmp_doc %{_libdir}/pkgconfig/xmlsec1-nss.pc %changelog +* Fri May 17 2024 Tomas Halman - 1.2.29-12 +- Fix double free in xmlSecGCryptAsymKeyDataGenerate + Related: RHEL-35381 + * Fri May 17 2024 Tomas Halman - 1.2.29-11 - Add xmlsec1-gnutls dependency on xmlsec1-gcrypt Related: RHEL-35381